We apply the fix for you
With the delegated rights you grant us and can revoke at any time. Every fix we apply is validated by an expert.
A vulnerability found is not a vulnerability closed.
We fix the vulnerability with you, then a before-and-after check confirms it is closed.
- Detect
- Fix
- Prove
Who does what
The same chain for the pentest and the SOC. Each plays its part, from finding to proof.
Detect
Pentest
Our pentesters look for your vulnerabilities the way an attacker would.
24/7 SOC
24/7 monitoring, plus an audit of your Microsoft 365 every 3 months.
Fix
Pentest
The report gives the fix for each vulnerability. You apply it, or we do: this is agreed at scoping.
24/7 SOC
Fixing included in all three tiers, on Microsoft 365, in the mode you choose.
Prove
Pentest
A retest, included within 60 days of the report.
24/7 SOC
A before-and-after check of the fix.
And the PSSI? It has no before-and-after check: it sets the rules for the whole and delivers a prioritized action plan.
Two ways to fix, your choice
You choose who applies the fix. Either way, your IT team stays in control.
We hand you the fix ready to apply
Your team applies it at its own pace, with the exact setting to change.
What stays on your side
- Your application code and vendor patches: we specify the fix, your team or your providers apply it.
- Outside Microsoft 365 (business applications, servers, equipment): fixed by your IT team, or by us on quotation.
On the SOC side: what happens after the alert
The effect of each fix shows up in the Microsoft Secure Score, an indicator computed by Microsoft.
The score doesn’t rise on its own. It rises because a specific action was taken, and you can name it.
Microsoft Secure Score
Illustrative six-month progression
- 40Initial state
- 50Month 1
- 60Month 3
- 70Month 6
+30 points from the initial state
An indicator, not a promise
« Microsoft Secure Score isn’t an absolute measurement of how likely your system or data could be breached, and it shouldn’t be interpreted as a guarantee against security breach in any manner. »
The work, step by step
Following one recommendation, from finding to proof
Block legacy authentication
7points
Recommendation status : 06Recorded in the monthly report
Framing
At kick-offDMC DEFENSE
Initial Secure Score audit
At kick-offDMC DEFENSE
Action prioritization
At kick-offDMC DEFENSE
Remediation plan
Execution
OngoingDMC DEFENSE or your IT team
Applying the fixes
OngoingDMC DEFENSE
Verification and validation
Proof
MonthlyDMC DEFENSE
Progress reporting
Microsoft scoring: enabling the policy that blocks legacy authentication is worth 7 points (Microsoft Learn, Microsoft Secure Score, accessed 29 September 2026).
Where the points come from
The Secure Score spreads its recommendations across four categories: identity, devices, apps and data.
Identity and access
- Enable MFA for all users
- Block legacy authentication
- Set up conditional access
Devices
- Turn on real-time antivirus protection
- Turn on tamper protection
- Encrypt disks (BitLocker)
Apps
- Configure anti-phishing rules
- Enable Safe Links and Safe Attachments
- Block automatic forwarding of email outside the organization
Data
- Encrypt sensitive email
- Configure DLP policies
- Classify confidential data
Each recommendation is worth 10 points or less; exact weightings evolve with Microsoft’s recommendation catalog.
Beyond the score
The Secure Score sets the priorities. Alongside it, we maintain the underlying health of your Microsoft 365 tenant.
License optimization
Spotting underused or missing licenses to get the most security out of your subscriptions.
Account cleanup
Removing inactive accounts, old guests and permissions that have become obsolete.
Configuration hardening
Applying Microsoft best practices beyond the Secure Score recommendations alone.
Automation
Scripts and workflows that keep best practices in place; each one is validated by one of our experts before it is deployed.
Tenant documentation
Up-to-date documentation of every security configuration, ready for audits.
Sources
How the Secure Score works and how it is scored is documented by Microsoft.
- Microsoft Secure ScoreMicrosoft Learn (new tab)
- Assess your security posture through Microsoft Secure ScoreMicrosoft Learn (new tab)
Sources accessed on 29 September and 6 October 2026.
Where does your Secure Score stand?
We audit your tenant and show you, in numbers, the points to win back first. No commitment.
After you send it
Reply within 24 business hours
An expert reads your request and gets back to you to qualify your need.
Free audit
On Microsoft 365: a one-hour audit of your tenant's posture (Secure Score, identities, Defender) and your priority flaws. Otherwise: we scope your need (pentest, security policy) and set the price. No commitment.
Dedicated contact
The same DMC expert follows you end-to-end, with no call-center in between.