Microsoft 365 security posture & reporting · for South African SMEs

See your Microsoft 365 security clearly. Prove it to the board.

Presight connects to Microsoft 365 (read-only) and turns it into a posture and exposure score with up to ten ranked fixes a month, each explained in plain language. Then it emails a two-page board report — built for the one person keeping a growing business secure.

R1200/month · Flat rate — one tenant, unlimited users. excl. VAT
Read-only No customer credentials stored POPIA-aligned

Security posture

Synced 4 min ago
Posture
71 observed · 7 attested · model v4
Exposure34
Lower is better · down 24 points over 6 months

Trusted by in-house IT teams at South African businesses

Built in South AfricaPOPIA-firstNIST CSF 2.0 / CIS IG1 alignedRead-only connectionTransparent pricing

How it works

Connect, score, fix, prove — every month.

One loop, run end to end. The portal is where you earn the report; the report is what your board sees.

1

Connect

Link Microsoft 365 with a read-only, admin-consented connection. No credentials are stored — we keep only your tenant ID.

2

Score

Presight computes a posture score (higher is better) and an exposure score (lower is better) from published, versioned weights.

3

Fix

You get at most ten ranked fixes a month — each in plain language, with a predicted score movement and a guided, deep-linked how-to.

4

Report

A branded two-page board report lands by email every month — and on demand, the moment an executive asks.

Your daily dashboard

A dashboard that reads like a decision, not a data dump.

Open it and you know, at a glance, where you stand, what to do next, and how you compare. This is a live preview with sample data.

This month's top fixes

3 of 10
Critical
Require MFA on 12 administrator accounts
One phished password would open every mailbox and file in the business.
+6 posture
High
Renew the TLS certificate on portal.acme.co.za
Expires in 9 days — the site will show browser security warnings.
-5 exposure
Medium
Turn on DMARC enforcement for acme.co.za
Lets attackers spoof your domain in phishing emails to clients.
-4 exposure

How you compare

Posture7 pts ahead of sector
Exposure11 pts ahead of sector
Anonymised, across 14 South African manufacturing businesses (minimum cohort of 3).

Score trend

6 months
025507510001-05-202616-07-202601-10-2026
Posture · target 85Exposure

The board report

The report everyone else's users complain about — done right.

Two pages, branded, in plain language. It lands by email on the first of the month, or on demand the moment an executive asks. This is a preview — your logo, your colours, your numbers.

ACME (Pty) Ltd
Security summary · October 2026
Posture78↑ 17
Exposure34↓ 24
What improved this month
  • MFA enforced on all administrator accounts
  • Three expiring licences renewed before lapse
  • DMARC enforcement switched on for the primary domain

Prepared by Presight · compared with 14 sector peers · NIST CSF 2.0 / CIS IG1

What to do next4 ranked actions
1
Review 6 external guest accounts with file access
IT · due 15 Nov
2
Enable Conditional Access for legacy sign-ins
IT · due 22 Nov
3
Retire 2 unused service principals holding Mail.Read
IT · due 30 Nov
4
Renew the portal.acme.co.za certificate
IT · due 9 Nov
Closing each ranked action is predicted to move posture to 84 and exposure to 28 by next month.

What you get

See it. Fix it. Prove it.

The whole product in three moves — the same loop your dashboard and your board report are built around.

See
  • Posture & exposure scores. Two numbers you can defend, from published, versioned weights.
  • Score trend. Watch posture rise and exposure fall over time — your history, not Microsoft's snapshot.
  • Sector benchmarks. How you compare with anonymised South African peers in your industry.
Fix
  • Ten ranked fixes a month. Capped and prioritised — not 400 findings and a shrug.
  • Plain-language explainers. Every technical term translated to the real-world consequence.
  • Guided remediation. Step-by-step, deep-linked straight to the right Microsoft 365 setting.
Prove
  • Two-page board report. Branded, executive-ready, emailed monthly or on demand.
  • Predicted score movement. An estimate of what each fix will do — so progress is a plan, not a hope.
  • Audit-ready evidence. Findings mapped to NIST CSF 2.0, CIS IG1, King V and POPIA.

ALSO INCLUDES

TLS & security-header checksUptime monitoringSPF / DMARC / DNSSECOpen-port scanningBreached-password checksNon-human identity inventoryLicence renewal trackingCSV export

Security & trust

Connect with your eyes open.

Connecting Microsoft 365 is a one-way trust decision. Here is exactly what Presight does and does not do — and the full detail is one click away.

Read-only, app-only

Presight uses an admin-consented Microsoft Graph connection with read permissions only. We request no write permission of any kind.

No customer credentials stored

We never hold your admin credentials. Only your tenant ID is kept — so there is nothing in our database to steal.

Passwords never leave your device

The breached-password check sends only the first five characters of a password's SHA-1 hash to the public HIBP range API. The password never reaches us.

Published, versioned scoring

Every weight behind your score is published and versioned — so you can always answer “where did this number come from?”

Frameworks, named

Findings map to NIST CSF 2.0, CIS Controls IG1, King V and POPIA — defensible in an audit, not just a dashboard.

Logged and governed

Every change is recorded in an audit log, and a POPIA operator agreement backs the processing of your data.

Pricing

One price. Published — because most of our competitors won't.

No per-seat maths, no sales call to find out what it costs, no hidden “Enterprise” tier.

R1200/ month

Flat rate — one tenant, unlimited users. excl. VAT

  • Read-only Microsoft 365 connection
  • Posture & exposure scoring with trend
  • Up to 10 ranked fixes a month, in plain language
  • Attack-surface & email-security checks
  • Sector benchmarks
  • Two-page board report — monthly & on demand
  • Unlimited users, one tenant
Book a demo

On Microsoft 365 Business Premium you get Secure Score but not Defender Vulnerability Management. Presight gives you the exposure signal Microsoft doesn’t — synthesised from Graph signals and external attack-surface checks (it is not an endpoint vulnerability scanner).

Questions

The things a careful admin asks first.

Is a read-only connection really safe?

Yes. Presight uses an app-only, admin-consented Microsoft Graph connection with read permissions only — no write permission of any kind. Microsoft shows you the exact permission list on the consent screen before you approve, and the full list is on our trust page.

Do you store my credentials?

No customer credentials, ever. We hold only your tenant ID; there is no per-tenant secret or refresh token in our database to be stolen.

What if I'm the only IT person?

That is exactly who Presight is for. It does the enumerating, scoring and ranking so one person can keep a growing business secure — and prove it to leadership without writing the report by hand.

Do I need a security background to use it?

No. Every finding is in plain language: what it is, the real-world consequence, and the step-by-step fix. The jargon is translated, not buried in tooltips.

Is my data shared with other companies?

Benchmarks are anonymised and only shown against a cohort of at least three businesses, so no individual company's data is ever identifiable. Nothing about your tenant is shared with other customers.

I'm on Microsoft 365 Business Premium — what do I get?

You get an exposure score Microsoft doesn't give you. Business Premium includes Secure Score but not Defender Vulnerability Management, so Presight synthesises exposure from Graph signals and external attack-surface checks instead.

About

Built for the person who keeps the business secure.

Every other tool in this space is built for IT service providers managing dozens of client tenants. Presight is built for the in-house admin at a growing South African company — the one who does a great deal of work that leadership never sees, and still has to answer “are we secure?” to a board that treats IT as a cost centre.

Presight makes that work visible, scored and defensible: posture and exposure you can show, fixes you can rank, and a board report that lands without a late night. South African–made and POPIA-first, because that is the context our customers actually operate in.

Make your security work visible.

See your Microsoft 365 posture scored, your top fixes ranked, and your next board report written for you. Book a 20-minute demo and we’ll run it on a tenant like yours.