Free
Cloud scope & MFA check
The two v3.3 changes that catch most Microsoft 365 clients out: cloud services can no longer be excluded, and missing MFA is an automatic fail. See where one client stands — free, read-only, in minutes.
What you get
- Every enabled user has an MFA method registered
- MFA is enforced for all users and all cloud apps (Security Defaults or Conditional Access)
- Every admin has MFA registered and enforced
- Third-party cloud services connected through Microsoft sign-in — ready to declare in the assessment
- Unverified apps with high-privilege permissions (mail, files, directory)
- Whether ordinary users can consent to apps
A one-off report for one client tenant. No card needed.
- Sign in with your work email (we send you a link).
- Name your MSP and add the client's email domain.
- The client's Global Administrator approves read-only access.
- See the results and download the PDF.
Already have an account? The free check is for new organisations — existing customers get all 17 checks in their plan.
Important: Halberd is a readiness aid and does not issue or guarantee Cyber Essentials certification. Certification is awarded only by an IASME-licensed certification body after assessment. Halberd is not affiliated with or endorsed by the NCSC or IASME.