A review of how your Microsoft 365, Entra ID, Azure and AWS tenancies are actually configured — and of who can reach what.
Conditional access, legacy authentication, privileged roles and how they are assigned, guest access, application consent, mailbox delegation and forwarding rules, and whether your logging would actually tell you an account had been taken over.
Identity and entitlement review, network exposure, storage and key handling, logging and retention, and the gap between what the tenancy permits and what anyone needs.
This is a configuration and identity review, carried out with read access. Where you need an adversarial test with exploitation and proof,penetration testing is the right engagement — and the two are often scoped together.
A short conversation is usually enough to work out whether we can help, and what it would cost.