Skip to main content
N365
NINJASECURE 365
By DR IT • The IT Ninjas • M365 + Azure CSPM & FinOps
v1.2.1 • Open Three-Lens Scoring • Zero-PII AI Governance & Deterministic Opt-Out•105 Controls (77 M365 + 28 Azure CSPM)

Self-Funding Microsoft 365 & Azure Security Posture, Compliance Cross-Walks, and FinOps Governance.

Audit 77 Microsoft 365 controls and 28 Azure Cloud Security Posture (CSPM) controls mapped to 8 regulatory frameworks in minutes—while automatically uncovering unassigned licenses, inactive user seats, E3/E5 bundle overlaps, and idle Azure resources that pay for your subscription many times over.

Start 14-Day MSP / MSSP Trial →Start 14-Day Internal IT Trial →
Three-Lens Open Scoring
Severity-Weighted (4·3·2·1), CIS/SCuBA pass rate & Microsoft Secure Score sync
Zero-PII AI Governance
Pre-transit PII scrubbing, tenant pseudonymization & 100% deterministic opt-out
105 Canonical Controls
77 M365 + 28 Azure CSPM evaluated with 0% AI using auditable TypeScript
8 Regulatory Frameworks
CIS v3.1/v2.1, CISA SCuBA, NIST 800-53, SOC 2, HIPAA, PCI-DSS v4.0, CMMC 2.0, ISO 27001
Interactive Platform & Deliverable Walkthrough

Inspect Every Layer of the NinjaSecure 365 Command Center

Board-Ready Executive Scorecards & 10-Tab Technical Workbooks

Every assessment generates a deterministic weighted posture score across Identity, Email/Defender, SharePoint/Teams/Purview, Intune Endpoints, Audit/SIEM, and Azure CSPM—complete with a 30/60/90-day remediation roadmap ranked by exact posture score uplift.

  • Fractional pass scoring (e.g., 14 of 16 Global Admins enforcing FIDO2 MFA).
  • Cross-walked to CIS v3.1/v2.1, CISA SCuBA, NIST 800-53, SOC 2, HIPAA, PCI-DSS v4.0, CMMC 2.0, and ISO 27001.
  • White-label HTML/PDF executive brief + 10-worksheet Excel (.xlsx) evidence workbook.
LIVE SCORECARD SNAPSHOT (105 CONTROLS)
78.4%+14.2% Above Regulated Benchmark
Identity & Access (Entra ID)84%
Email & Threat Protection (Defender)88.5%
Collaboration & Purview DLP74.2%
Azure Cloud Security Posture (28 Controls)73.8%
Interactive FinOps Savings & MSP Resale Margin Simulator

See How License Waste Recovery Pays for Your Subscription

15 Client Tenants
180 Seats / Tenant (2,700 Total Seats)
$38/seat/mo
$249/client/mo
Estimated Recoverable License & Azure Waste
$13,855/mo
34.7x Subscription Payback
$166,260/yr Savings
Unassigned Pool Seats
$4,514/mo
Inactive (>90d) Users
$4,001/mo
E3/E5 Bundle Overlap
$2,565/mo
Idle Azure Disks & IPs
$2,775/mo
Recommended Plan: MSP Pro (Up to 15 Client Tenants) ($399/mo wholesale)
MSP Resale Revenue: $3,735/mo • Net MSP Gross Profit: $3,336/mo (89.3% Margin)
Interactive 105-Control & 8-Framework Regulatory Cross-Walk

Search All 77 Microsoft 365 & 28 Azure CSPM Canonical Controls

Showing 105 of 105 canonical controls
NS-ID-001Critical • Identity
Global Admin MFA

Global Admin MFA

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-002High • Identity
Block legacy auth

Block legacy auth

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-003Medium • Identity
Admin-governed app consent

Admin-governed app consent

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-004High • Identity
Sign-in risk policy

Sign-in risk policy

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-005High • Identity
All users MFA

All users MFA

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-006High • Identity
User risk policy

User risk policy

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-007High • Identity
PIM enabled

PIM enabled (Identity baseline posture verification).

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-008Medium • Identity
Password protection and banned passwords

Password protection and banned passwords

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-009Medium • Identity
Guest access governed

Guest access governed

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-010High • Identity
Emergency access accounts

Emergency access accounts

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-011High • Identity
Least privilege for admin roles

Least privilege for admin roles

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
NS-ID-012Medium • Identity
Stale accounts removed

Stale accounts removed

CIS M365 v3.1 / Azure v2.1NIST 800-53SOC 2ISO 27001CISA SCuBA
Zero-Trust Read-Only Security Architecture

Engineered for Regulated Enterprises, vCISOs & Security-First MSPs

ReadOnlyEgressGuard Enforcement

Every assessment collector request passes through an immutable egress guard that blocks HTTP POST/PUT/PATCH/DELETE mutations and rejects write-capable Graph scopes.

Zero Long-Lived Client Footprint

Uses delegated OAuth 2.0 PKCE or ephemeral read-only Entra worker credentials—never storing refresh tokens or service role keys in downloadable artifacts.

Deterministic Evaluation (Zero AI Hallucinations)

All 105 controls are scored by deterministic TypeScript & Zod evaluators against live Microsoft Graph and Azure ARM evidence. AI narratives summarize only verified findings.

Tenant-Isolated Private Evidence Storage

Generated reports and evidence workbooks are stored in private RLS-isolated buckets and served exclusively through authenticated, role-verified proxy endpoints.

Transparent Dual-Track Commercial Plans

Live Subscription Catalog

Assessment & FinOps (Read-Only)
Zero-footprint Microsoft 365 security posture assessments, CIS/CISA scoring, and FinOps license waste optimization. • Up to 5 Tenants Included
MSP Pro (Drift & Active Management)
Continuous configuration drift attribution, consolidated multi-tenant triage, 1-click user offboarding, and RFC 6902 baseline remediation. • Up to 15 Tenants Included
Enterprise MSSP
Full-scale MSSP command center with Tier 2 Linux PowerShell 7.4 container workers, 365-day regulatory retention, and white-label deliverables. • Up to 50 Tenants Included
One-Time Deep Security & FinOps Assessment Pass (1 Tenant)
Point-in-time zero-footprint M365 security posture audit (77 controls), FinOps license waste analysis, executive report & 7-tab remediation workbook — no recurring commitment. • Up to 1 Tenant Included
Direct Client Security & FinOps Monitoring — Read-Only (1 Tenant)
Continuous weekly read-only M365 & Entra ID posture monitoring, CIS/CISA compliance scoring, and FinOps license waste tracking for a single organization — zero write permissions. • Up to 1 Tenant Included
Direct Client Managed Security & FinOps (1 Tenant)
Continuous M365 security posture monitoring, automated drift detection, FinOps license optimization, and guided baseline remediation for a single organization. • Up to 1 Tenant Included
Modular Feature & Worker Add-Ons (6 Available)
Tier 2 Linux Container Worker (Shared GHCR Runner)+$24/mo
Tier 2 Linux Container Worker (Dedicated Azure ACR Basic Runner)+$39/mo
Continuous Daily Drift & Real-Time Alerting+$31/mo
White-Label CISO Trust Pack & Custom Report Branding+$39/mo
365-Day Regulatory Audit & Snapshot Retention Vault+$29/mo
Azure Infrastructure CSPM (CIS Azure v2.1) & Cloud Spend FinOps Pack+$39/mo

Request Custom Enterprise or 50+ Tenant MSSP Quote

Need dedicated Azure Container Registry workers, custom volume pricing, or guided Customer Zero onboarding? Submit an inquiry directly to our engineering team: