Evidence-backed verification

Move from belief to evidence.

Fortly's Verified Exposure Scan checks selected Microsoft 365 and Entra conditions against your self-assessment, so you know what your environment actually shows.

Self-assessment vs verification

Self-assessment

What your organisation currently believes or knows. This is what the free Exposure Readiness Check captures.

Verification

What supported technical evidence actually shows. This is what the Verified Exposure Scan provides, read-only and with your consent.

Examples of the difference

Illustrative examples only. Actual findings depend on your environment and the agreed scope.

Questionnaire

"We believe MFA is enabled for everyone."

Technical evidence

"Some accounts may not have effective MFA coverage."

Questionnaire

"Former users are removed promptly."

Technical evidence

"Enabled inactive accounts remain."

Questionnaire

"Applications have appropriate permissions."

Technical evidence

"An application has broad permissions or no clear owner."

What the scan can review

The scan validates selected questionnaire answers using supported read-only evidence. Depending on the agreed scope, it can review evidence relating to:

  • Identities
  • Authentication and MFA configuration
  • Privileged access
  • Guest and external identities
  • Application registrations
  • Enterprise applications and service principals
  • Selected application permissions
  • Credential expiry metadata
  • Selected Microsoft 365 sharing settings
  • Licence and account cleanup opportunities

How verification works

Move from what you believe is configured to what Microsoft 365 and Entra can actually show, without changing anything.

Read-only
Least-privilege approach
No configuration changes during the scan
Report you can use with your existing IT provider
Fortly remediation is optional

What we do not read in the standard scan

The standard scan does not read the contents of your communication or documents, and never touches secrets.

Email bodies

Teams chat messages

Document contents

Passwords

MFA secrets

Application secret values

Private keys

What's included

Supported technical evidence collection
Questionnaire vs evidence comparison
Prioritised findings
Customer report
Technical evidence register
45-minute results walkthrough
One supported re-scan within 30 days

One supported re-scan within 30 days is included for the same agreed scope. Find, fix, verify.

Founding Customer Programme

Pricing

Limited founding-customer pricing while Fortly validates the service with Australian SMEs. Standard assumption: one Microsoft 365 tenant.

1 to 25 active users

$990 + GST

26 to 75 active users

$1,490 + GST

76 to 150 active users

$2,290 + GST

150+ / complex environments

Custom scope

Ready to move from belief to evidence?

Book a 20-minute scope call to see whether the Verified Exposure Scan fits your environment.

Book a scope call