Education
Microsoft 365 security outsourced, management gets a report every month
Support since July 2025
Microsoft cloud security
that stands up to attackers and can be proven.
For companies that take IT security seriously. We secure your Microsoft 365 and your cloud and provide the evidence that customers, cyber insurers and auditors ask for.
In the introductory call you speak directly with Bastian Wenske, founder and managing director.
Example of a secured Microsoft 365: sign-in with a second factor, separated admin accounts, centrally managed devices and tested backups are done, and the evidence for insurers and auditors is ready. We run security for you or hand it over to your IT team, fully documented.
- Member of the Microsoft AI Cloud Partner Program
- Aligned with ISO 27001 and BSI IT-Grundschutz
- NIS2-Compliant Advisory
Projects for organisations including
Our services
From the initial assessment to ongoing operations.
Microsoft 365 Security Assessment
Security assessment Fixed price NIS2
At a fixed price you learn where your Microsoft tenant stands and receive a prioritised list of measures.
from €3,500
Learn moreMicrosoft 365 hardening
MFA Email protection Admin rights
We close the findings from the Security Assessment, from MFA to email protection. At the end you receive a report you can show to insurers and customers.
Learn moreIntune & Endpoint Security
Intune Defender for Endpoint Autopilot
Laptops and smartphones are managed and encrypted, personal phones included, and you can show their status at any time.
Learn moreManaged Security & SOC
Monitoring Phishing simulation WCS portal
We monitor your Microsoft 365, respond to attacks and train your employees with phishing simulations. Every month you receive a report for insurers and auditors.
from €2,500 per month
Learn morePenetration testing
Pentest Entra ID Azure
We test which paths an attacker would have in Entra ID, Microsoft 365 and Azure, and prioritise the findings.
Learn moreAI Foundation: Copilot & Claude
Copilot Claude Purview
You introduce Copilot or Claude without confidential documents ending up with the wrong people.
Learn moreFurther services
- Cyber insurance Back up your insurer's questions with reports from Microsoft 365.
- Customer security questionnaires Answer security questionnaires from large customers correctly, with evidence.
- Conditional Access Implementation Break glass accounts, MFA and policies in report-only mode before they apply to everyone.
- NIS2 with Microsoft 365 Implement the Section 30 BSIG measures in Entra ID, Defender and Intune and evidence each one.
- Active Directory Security Assessment Tiering, service accounts, AD CS and Entra Connect reviewed, with prioritised findings.
- Azure Cloud Security Landing zone, Azure Policy and Defender for Cloud for your Azure subscriptions.
- Security Architecture & Zero Trust Target architecture with Entra ID, Intune, Defender and Purview, implemented step by step.
- DevSecOps & CI/CD Security Security checks in Azure DevOps and GitHub without slowing down releases.
Case studies
Selected projects with scope, user count and duration
Software / SaaS
ISO 27001 gaps in monitoring and supplier access closed in one month
Duration 1 month
Logistics
Run certificates in-house or buy a service? Four options compared on full cost
Duration 6 months
Energy / critical infrastructure
Every group security requirement traceable to where the platform meets it
Duration 4 months
Energy / critical infrastructure
Attack from an ordinary staff account tested: 5 critical, 10 high vulnerabilities
Users 1,500
International NGO
Change roles, get that role's rights, the same way at all 20 locations
User accounts 3,500+
Banking
Apps of an acquired fintech moved into the bank's cloud, run around the clock
Duration 2.5 years
Banking
Documentation ready for the banking supervisor, incidents resolved 40 percent faster
Team 7 people
IT consulting
Azure demo environment for Microsoft's partner audit built in one month
Duration 1 month
Does this sound familiar?
Three situations that bring management teams and IT leads to us.
You do not know how secure your company actually is
Security in Microsoft 365 and Entra ID is spread across many portals, and an overall picture does not emerge on its own. A security assessment provides that picture as a report that management can read and IT can act on.
Fixed-price security assessmentYour IT provider says everything is fine. They cannot prove it.
An audit, an insurer or your own liability requires evidence you can show. We review your tenant as an independent second opinion without replacing your provider.
Ten pieces of evidence an IT provider can showDespite Microsoft 365, phishing and spam still reach the inbox
Exchange Online and Defender for Office 365 protect well, but only once SPF, DKIM, DMARC, Safe Links and Safe Attachments are configured properly. We set this up and monitor it in operation.
Managed Security & SOCYou carry the responsibility. We provide the evidence.
The security assessment shows where your Microsoft tenant stands today and what to do first. Fixed price after scoping: from €3,500.
From assessment to secure operation
-
Introductory call
In 30 minutes we clarify your situation and your requirements.
-
Analysis
We review your Microsoft environment and name weaknesses and the need for action.
-
Report
You receive prioritised measures that management and IT can both read.
-
Implementation
We implement the agreed measures together with your IT team.
-
Ongoing support
We run security for you or hand it over to your IT with full documentation. Either way you stay independent.
Working together
Security without hiring anyone
Your IT provider keeps workplaces, network and user support running. Security is often one topic among many there. We specialise in the security of your Microsoft cloud and coordinate directly with them. You don't have to coordinate anything or switch providers.
What you get
- A dedicated contact for the security of your Microsoft 365
- Coordination directly with your IT provider, changes only after your approval
- A report you can show to insurers and customers
What you contribute
- Read-only access once for the security assessment, removed afterwards
- A kick-off and a results workshop with management and IT
- A quarterly review in operations, requests go through the WCS portal
About Wenske Cyber Solutions
Wenske Cyber Solutions is a Berlin-based consultancy for security in the Microsoft cloud. We work for companies with 50 or more employees and implement in Entra ID, Microsoft 365, Intune and Azure what customers, cyber insurers and laws such as NIS2 require, in a way you can prove. We have applied the same care in projects for banks, energy companies and public authorities. Every project is handled by experienced consultants, without junior staffing and without anonymous project teams.
8+
Years of experience in cloud & security
Regulated industries
- Financial services & banking
- Critical infrastructure / energy
- Government & municipalities
- Healthcare & e-health
25+
Completed client projects
Microsoft in depth
One stack: Entra ID, Microsoft 365, Intune, Azure and Sentinel.
Strategy and substance
No concepts without implementation.
Responsibility
No dependency: your environment, data and documentation stay with you.
Evidence included
Whatever we set up, we document for insurers, customers and auditors.
Frequently asked questions
What management and IT want to know up front
Short answers to questions we are often asked before the first conversation.
We already have an IT provider. Do you work with them?
Yes. Your provider stays responsible for workplaces, network and user support. We review and run the security of your Microsoft 365 and deliver measures in a form they can implement directly. We only change your environment after approval.
What does managed security cost for a company with 50 or more employees?
Managed security comes in three tiers: Secure Start from €2,500 per month, Secure Base from €3,500 per month and Detection & Response from €5,500 per month. Every tier includes the WCS portal and phishing awareness training and simulation for your employees. Microsoft licences stay on your existing agreements. The security assessment shows which tier fits.
Compare the three tiersHow much effort is required on our side?
Manageable. For the security assessment we need read-only access once, removed afterwards, plus a kick-off and a results workshop with management and IT. In operations we align in a quarterly review. Requests such as new employees or changed permissions are made in the WCS portal.
What does my cyber insurer require from our IT?
Questionnaires differ. Typical questions cover MFA, endpoint protection, updates, backup, admin rights, logging and email protection. What matters is that every answer can be backed by a report from your Microsoft 365.
Back up the cyber insurance questionnaireHow can I tell whether my IT provider works in an audit-proof way?
By whether they can show evidence without having to create it first: MFA coverage, Conditional Access policies, the list of admin accounts, SPF, DKIM and DMARC, a documented restore test and a regular report. A missing item is a reason to ask questions about their work. An independent second opinion provides clarity.
Ten pieces of evidence at a glanceCan I outsource responsibility for information security to a service provider?
The tasks yes, the responsibility no: under NIS2, management must have risk management measures implemented and oversee their implementation. Operations, monitoring and documentation can be outsourced. A good provider delivers the evidence you need to meet your oversight duty.
Let us talk about your IT security
In the introductory call (30 minutes, without obligation) we clarify:
- which requirements apply to you, for example from customers, cyber insurers or NIS2
- which next step makes sense for your organisation
- what effort and price range to expect
Pick a free slot directly. You will receive the confirmation by email.
The calendar is loaded from Calendly, which transfers data to Calendly. More in our privacy policy
Bastian Wenske
Founder & Managing Director
I take every introductory call myself.
Prefer to reach out directly? Send us an email at [email protected].