Soteria Inspect for Microsoft 365 provides automated, comprehensive configuration scans and recommended configuration changes using the Soteria Inspect software-as-a-service (SaaS) platform with a web UI and automated report delivery. Soteria Inspect for 365 aids organizations in identifying areas of risk and misconfiguration with the ability to track mitigations and identify changes over time using the same Inspectors as our open source project (https://github.com/soteria-security/365Inspect).

Why Choose Soteria Inspect?

Do you struggle to maintain visibility and control over Microsoft 365 configurations? Default settings, frequent changes, and complex licensing options can leave security gaps that are difficult to identify and resolve. Soteria Inspect solves these challenges by providing a clear, guided path to a secure and compliant Microsoft 365 environment.

Targeted problems

Configuration visibility

• Uncover misconfigurations and risks in your Microsoft 365 environment often overlooked by default settings.
• Clients rely on default configurations with an assumption of security and best practices

Configuration drift

• Microsoft sometimes introduces features that require client action to opt-out, which can apply configurations that do not align with the client’s security requirements
• Administrators of larger organizations will make frequent changes to their Microsoft tenant and may introduce risk via configuration drift

Establishing a clear target for security configurations

• Microsoft 365 license tiers can introduce confusion in options and configurations available on a per-user basis
• Many configurations are not audited via standard tools, leaving security blindspots and introducing risk
• Regulatory frameworks have specific requirements for feature-enablement and configurations

Complex setup and execution of assessment tools

• Other configuration-assessment tools can be difficult to set up and execute, requiring technical staff and specialized knowledge

Core features

Comprehensive scan results

Get a prioritized list of findings with detailed explanations, severity ratings, a list of the affected objects and remediation guidance.

Detailed finding information

Each finding provides detailed background information, the finding status and severity, detailed remediation information, references to additional information, and a list of the tenant objects affected by the finding.

Findings mapped to compliance and security frameworks

Inspect findings and recommendations are mapped to the CIS Microsoft 365 Foundations Benchmark v3.1.0, CIS Critical Security Controls v8, and NIST 800-53 Rev 5 to assist organizations aligned to these standards.

Scheduled recurring scans

Scans are scheduled to run on a periodic basis to ensure configurations changes are visible over time. Provides visibility for Microsoft and client changes.

Configuration change tracking

Changes in scan results are highlighted and indicate new, modified, and remediated findings. The history of each finding from previous scans is available to explore in the user interface, helping you track progress over time.

Flexible user management

Manage Inspect users and invite additional users from your tenant.

Support for managed service providers (MSPs)

MSPs have visibility into findings and recommendations across all subscribed client tenants. Ensure security configuration settings are applied consistently across your client’s 365 tenants.

Pausing Inspectors

You can pause individual inspectors, temporarily or permanently, to customize findings and focus on configurations that need attention.

Guided onboarding

Benefit from a streamlined onboarding process guided by our support team without ever sharing admin credentials. Once your subscription through the Marketplace is completed, Soteria will contact you and schedule a call to coordinate onboarding. The onboarding process requires the customer on the call to have the Global Administrator role in the client’s Microsoft 365 tenant. Soteria Inspect support staff will never request administrator credentials in your tenant.

Getting started

• Subscribe on Azure Marketplace
• Quick Onboarding Call: Soteria will contact you to schedule a video call with our support team.
• Automated Scanning & Insights: Start receiving detailed configuration findings and recommendations.
• Ongoing Monitoring & Reporting: Receive scheduled reports and track changes over time to maintain a secure and compliant configuration.