Microsoft 365 Intelligence · Created & built by Innova Group
What's actually in
your Microsoft 365?
Old sharing links nobody remembers creating. Documents nobody has changed since 2021. Four versions of the same policy. Sites whose owners have left. Many businesses have all four and no straightforward way to see them — this is a read-only assessment that finds them and scores what it finds.
Read-only · nothing in your tenant is changed · access revoked when it's finished
We built a tool that refuses to call you ready.
If sensitive content is over-shared or unlabelled, the assessment caps the result and says so on the first page — however good the score looks. A business with payroll on a public link is not in good shape, and a report that says otherwise is not neutral. It is reassuring, which is worse than useless.
Where the scan genuinely cannot see something, it says not assessed and leaves it out of the score rather than counting it against you. Inflating the problem would sell more remediation. It would also be dishonest.
Six things that quietly decide how well your Microsoft 365 works.
Every one of the twenty-two checks sits in one of these six areas, and between them they are the whole score. The percentage on each is its real share, and the shares shift slightly where something cannot be assessed.
Content & Protection
9 checks43%Old sharing links nobody remembers creating, folders opened to the whole company years ago, sensitive documents carrying no label, and four versions of the same policy. It goes unaudited because there has never been a straightforward way to see the whole picture. If the wrong people can already reach something, Copilot does not create that problem — it makes finding it trivial.
Identity & Access
5 checks26%Who can sign in, who can administer, and what has been granted to third parties. This is where the findings people act on the same week tend to come from — applications holding organisation-wide access to mailboxes, accounts that cannot complete a multi-factor prompt, and administrative rights left on disabled accounts.
Email & Domain
2 checks10%Whether somebody can send email as your company, read from your public DNS records, and whether any mailbox carries a rule that forwards mail outside the organisation or deletes it on arrival. A forged invoice from your own domain passes every eye test.
Workplace Experience
3 checks8%Whether the intranet is current and worth visiting. Landing pages nobody has touched since 2022, news that stopped, and sites whose owners have left — the reason people stop looking there and start asking colleagues instead.
Licensing & Devices
2 checks8%What you pay Microsoft for, how much of it is assigned to somebody, and how much of it is switched on. Device management licensed for seventy people with fourteen devices enrolled is capability already bought and not being used.
Copilot Readiness
1 check5%Judged on everything above rather than measured separately. Copilot answers with whatever the person asking is already allowed to see, so the verdict is a consequence of the governance findings — and it will say “not yet” while critical items are open, whatever the licence position.
Twenty-two checks run in total. The six areas above are how they are grouped and weighted — every check is scored individually, and every one appears in the report you receive, whether it passed or not. Anything that could not be assessed is reported as not assessed and excluded from the score, rather than counted as a pass.
Four steps, and you keep control of all of them.
You approve read-only access
An administrator with rights to grant consent approves a link. The permissions requested are read-only — sites, files and directory. They do not include any ability to write, so nothing in your tenant can be altered by the assessment.
We scan and score
The tool reads file and site properties across your tenant: sharing scope, labels, when things were last changed, file names, ownership, and the content hashes Microsoft already publishes. It does not open the contents of your documents.
You get the report
A score out of 100, twenty-two scored checks across six areas, and every finding ranked by severity with the affected count. Written to be read by a director, not only an administrator. The worklist adds the specific files, links and accounts behind each finding.
You decide what happens next
The fix list is in priority order with the reasoning behind each item. Do it yourself, give it to your existing IT provider, or ask us to quote. No obligation either way.
Fixed prices, published.
This market runs from free automated reports at one end to consultancy engagements at the other, quoted on enquiry and well into four figures. Ours sit in between — and the price is on this page, along with the point where it stops applying.
See what you would get
Free
No sign-up, no access needed
The guide, and a complete sample report from an example tenant. Every section, nothing held back.
- Full sample report
- Self-assessment guide
- Nothing installed, nothing granted
The scan
£99
+ VAT · up to 100 staff, one tenant
Your own tenant, scored across twenty-two checks, with every finding, what it means and the action plan. Report within three working days of access being approved.
- Score, band and all twenty-two checks
- Every finding ranked by severity
- Prioritised action plan
- Counts and locations, not individual file paths
The worklist
£295
+ VAT · includes the scan
The full report including the specific files and links involved, and an hour going through it together.
- Everything in the scan
- The exact files, links and accounts
- An hour with us, agreeing priorities
- A remediation plan you can act on or hand over
More than 100 staff, or more than one tenant, and we will quote — the assessment is the same, there is simply more of it. Remediation, if you want us to do any, is quoted separately once you have seen the findings and never assumed.
We built Vitals. That's the difference.
An assessment like this is usually produced by licensed tooling — the report is the vendor's, with a logo changed on the front page. Ours is written in-house, which is why it scores what we think matters, explains its reasoning in plain English, and is honest about what it could not see. When you ask why a finding is there, you get an answer rather than a support ticket.
Vitals is not sold separately and it is not licensed from anyone. It exists because we needed it, and it scores what we would want to know about our own tenant.
Before You Get in Touch
No. The permissions granted to the assessment are read-only and do not allow it to change settings or files. You can revoke the consent in one click when the assessment is finished.
Understand first. Buy second.
If the answer is that your tenant is in good shape and you should go ahead, that is what the report will say. We would rather tell you that than sell you work you do not need.