Microsoft security advisory
Independent answers on Entra ID, Azure and Microsoft 365,
in writing.
When the question is whether your Microsoft environment is actually secure, you need an independent assessment, not another dashboard. Dettogni's cybersecurity advisory engagements assess Entra ID, Conditional Access, privileged access, Azure control-plane security and Microsoft 365 posture against recognised benchmarks. Every engagement is fixed scope with a single price and a written, prioritised deliverable. No retainer, no ongoing dependency, no product to buy at the end.
Four fixed-scope assessments. One report each.
Microsoft Identity & Cloud Security
The deepest Microsoft engagement: Entra ID configuration, Conditional Access design, privileged access, and Azure control-plane security assessed end to end. £4,950, 7 working days.
Entra ID & Azure assessment →Security Posture Baseline
A comprehensive Azure and Microsoft 365 baseline mapped to the CIS benchmark: identity, exposure, and operational readiness in one prioritised report. £3,250, 3 working days.
Posture baseline →Incident Readiness Review
Whether your organisation could actually respond: detection readiness, recovery capability, authority to act, and single points of failure. £3,500, 5 working days.
Incident readiness →External Exposure Review
The outside-in view: DNS posture, TLS hygiene, email authentication, subdomain inventory and unintentionally exposed services. £2,750, 4 working days.
Exposure review →Not sure which fits?
Most organisations start with the Posture Baseline for breadth or the Identity assessment for depth. A 20-minute call settles it, and if none of the four is the right answer, you will be told so.
Book the call →Something ongoing instead?
Advisory is deliberately one-off. If what you actually need is someone operating your web estate continuously, that is Dettogni's retained side.
Retained website management →Assessed by an engineer who runs these systems, not a sales team.
Every engagement is delivered personally by Alex Ulfeldt, a security engineer with 15 years across IT infrastructure and security, including hands-on ownership of Entra ID, Conditional Access, Microsoft Defender, Azure security, CIS-aligned baselines and NIST-based governance in production environments. The person who scopes the work performs the assessment and writes the report. Nothing is delegated, resold, or padded with juniors.
Dettogni is based in Milton Keynes and delivers advisory engagements remotely, UK-wide. Findings are written for two audiences at once: prioritised technical actions your team can execute, and a plain-English summary a director can take to the board.
Fixed scope, fixed price, no dependency.
You buy an answer, not hours
Each engagement has a defined scope, a set duration, and one price agreed before work begins. The deliverable is a written, prioritised assessment. There is no retainer, no upsell built into the findings, and no incentive to find problems that justify a bigger contract.
Advisory in full →Call, scope, assess, report, walkthrough
A 20-minute discovery call establishes whether an engagement fits. Scope and access are agreed in writing, the assessment runs over the stated working days, and the report is walked through with you so every finding and priority is understood, not just delivered.
Start with the call →If the question involves Entra, Azure or M365, ask it.
The first conversation is a 20-minute call. No charge, and discovery rather than pitch. Bring the question you actually want answered, about identity, exposure, readiness, or posture, and leave knowing which engagement fits, or that none of them does.