Every cloud has a silver lining
Automate Microsoft 365 security checks, reports and admin actions.
Admin Companion is your companion for Microsoft 365. It assesses your environment against industry-standard security baselines, runs your recurring reports and admin actions on a schedule, and records every change so you can prove it later.
Why
The work that eats your week is the work that repeats
Security checks, monthly reports, chasing inactive accounts - Microsoft gives you nine admin portals to do it all in, and every bit of it is manual unless you make it otherwise.
Settings drift
A Conditional Access policy gets loosened for a rollout and never tightened again. Nothing alerts you, because nothing was watching.
The same reports, every month
MFA coverage, mailbox sizes, stale devices - someone asks, you pull it by hand, and next month you'll pull it all again.
Proof is scattered
When an auditor, a customer or your own board asks how you know it's configured correctly, screenshots and good intentions are what's left.
How
Assess, fix, and prove - one loop
Whether it's a security assessment, a monthly report or a recurring cleanup, Admin Companion turns it into a loop you set up once, approve as it runs, and can always account for afterwards.
Assess against real baselines
Independent, versioned baseline packs run against your Microsoft 365 tenant and return per-control findings with the evidence attached. Controls are grouped by product, carry a severity, and roll up into a secure score with a trend.
Fix it - safely
Low-risk fixes run on the spot. Anything disruptive pauses on a preview of exactly what it will touch and waits for a quorum of admin approvals. One rejection vetoes the run outright.
Prove what happened
Audit records can't be quietly edited or deleted. Every change keeps who, what, when and the before-and-after - filterable, exportable, and ready for the day somebody asks.
How it starts
Four steps to your first report
-
Connect your tenant
A guided stepper walks you through an app-only connection using a certificate - Admin Companion can generate and rotate the certificate for you.
-
Run the assessment
Every control your grant and licenses support runs against your live configuration and comes back as per-control findings with the evidence attached - grouped by product, weighted by severity, and rolled up into your secure score with a trend.
-
Work the failures
Fix what has a built-in remediation, attest the controls that need a human judgment, and acknowledge the gaps you are accepting on purpose - each with a rationale and an optional expiry date.
-
Put it on a schedule
Set a daily, weekly or monthly cadence for assessments, reports and actions. Results export to PDF and CSV and can be emailed to people who have no Admin Companion account at all.
What
What's in the box
Built around the security baselines your auditor already recognizes, across the Microsoft 365 services you actually run.
- Controls across four independent baselines, 380+ of them automated
- 400+
- Controls that ship with a built-in fix
- 320+
- Microsoft 365 product areas covered
- 9
- Operational reports, scheduled and exportable
- 15+
Covers the whole Microsoft 365 surface
Microsoft 365 is where we start - support for more products and services is on the way.
Reports anyone can receive
MFA coverage, sign-in activity, device OS support, mailbox sizes and certificate expiry - emailed on a schedule, even to people without an account, through links that expire.
Approvals in one queue
Everything waiting on a decision collects on one Approvals page, and eligible approvers are emailed. Scheduled automation stays opt-in - every new schedule starts switched off.
More than one tenant? Covered.
If you look after several tenants, the estate view rolls every failing control into a single list, each row deep-linking into the tenant it came from.
What is Admin Companion, in plain words?
Admin Companion is an online tool for people who run Microsoft 365. It checks your settings against well-known security checklists and gives you a score. When something is wrong, it can fix it for you - and for big changes, it asks other admins to approve first.
It also sends the reports you need on a schedule, does routine clean-up jobs for you, and keeps a record of every change: who did it, what changed, and when. You sign in from your browser - there is nothing to install.