Orbit - 365 Modern Workplace Health Check
por Planet IT Ltd
Score your Microsoft 365 tenant against CIS and Cyber Essentials. Read-only, live in minutes.
Know exactly how healthy your Microsoft 365 tenant is, in minutes, without changing a thing.
Orbit signs in with your Microsoft work account, reads your tenant's configuration through read-only Microsoft Graph permissions, and scores it against Microsoft's own best-practice baselines. No agents, no scripts, no PowerShell, and nothing is ever changed in your tenant.
What Orbit checks
Eight workloads, 25 scored reports and 152 individual checks, each report scored out of 100:
- Microsoft Entra ID: Conditional Access, authentication methods and phishing-resistant MFA, privileged and dormant admin accounts, guest access, app consent and credential hygiene, password protection
- Microsoft Intune: enrolment, device compliance, security baselines, endpoint security (antivirus, encryption, firewall, EDR, attack surface reduction), update rings, app protection
- Microsoft Teams: orphaned and single-owner teams, public teams, guest access, group creation, naming and expiration policies
- SharePoint and OneDrive: external sharing, anonymous links, legacy authentication, idle sign-out, managed-device sync, dormant sites and storage
- Exchange Online: SPF, DKIM and DMARC on every custom domain, dormant and near-quota mailboxes
- Microsoft Purview: sensitivity labels and information protection
- Microsoft 365 Copilot: unassigned paid licences, dormant assignees, breadth of use
- Licensing: licences on disabled and guest accounts, inactive licensed users, premium licences on inactive users, duplicate service plans, paid-for features not deployed
Measured against recognised baselines
52 checks carry control references to the CIS Microsoft 365 Foundations Benchmark v7.0.0 and 36 to the five Cyber Essentials v3.2 control areas, so a finding traces back to a published control rather than a vendor opinion. Your Microsoft Secure Score is shown alongside Orbit's score for comparison. Checks your tenant is not licensed for are marked unlicensed and never count against you.
What you get
- An overall tenant health score and a score for every workload
- Priority fixes ranked by severity and by the points you would recover, each with an effort label and a link to the exact admin centre page where it is fixed
- A cross-workload Top Risks panel
- Daily score history with a 90-day trend, so improvement is evidenced rather than asserted
- A readiness view across identity, endpoint management, collaboration and data protection, and adoption and value
- An optional monthly summary email
Read-only by design
Orbit requests read-only Microsoft Graph application permissions and never writes to your tenant. A Global Administrator grants consent once; you can revoke it at any time from Entra ID. Every permission Orbit requests, and what it is used for, is published on the Orbit documentation page. Assessment data is stored encrypted in the UK South Azure region, deleted automatically on a rolling schedule, and deleted on request.
Try it free, for as long as you like
Sign in at the Orbit website to see your overall tenant score and the full Entra ID workload at no cost, with no card and no time limit. The Annual plan unlocks all eight workloads and nightly automatic refresh.
Who it is for
IT managers and IT leads at UK organisations who need a defensible picture of their Microsoft 365 posture: for a Cyber Essentials submission, an insurer's questionnaire, a board update, a Copilot rollout, or simply to know where the gaps are. One flat price per tenant, however many users you have.
Built and supported in the UK by Planet IT, a Microsoft Solutions Partner.