← Back to Blog

GOVERNANCE · April 11, 2026 · 11 min read

The Microsoft 365 Complete Assessment: One Audit, Six Reports

Most M365 audits ask one question: can you safely turn Copilot on? That is a useful question, but it is not the only question. Real Microsoft 365 tenants have problems that span every governance surface — sprawl in Teams, oversharing in SharePoint, identity drift in Entra, label gaps in Purview, update channel chaos in Apps, and Power Platform connectors quietly bypassing every DLP rule the security team thinks is in place. A Copilot-only assessment will not catch any of those because they are not Copilot problems. They are tenant health problems.

The Microsoft 365 Complete Assessment Bundle exists because consultants and CIOs kept asking for one audit that covered all of it. So we built it: six read-only audits delivered together, with white-label PDF rights and a commercial redistribution license, for a single one-time payment of CA$1,599. This post explains what is in it, who it is for, and why the price is what it is.

What "Complete" Actually Means

The bundle is six standalone assessments executed against the same Microsoft 365 tenant in one engagement:

  1. Copilot Readiness Assessment — DLP coverage, Anyone-link audit, Conditional Access, Purview labels, Teams governance, SharePoint permissions. The original 6-module pilot readiness scan with the 1.0–4.0 verdict.
  2. SharePoint and OneDrive Assessment — Anyone-link inventory across the top 30 most-active SharePoint sites, external sharing posture, ownership gaps, OneDrive enablement.
  3. Teams Assessment — Teams lifecycle health, orphaned teams, owner counts, external sharing capability, OneDrive Known Folder Move adoption.
  4. M365 Security Assessment — Conditional Access policies, MFA coverage, Global Admin count, guest user ratio, Purview labels, audit log readiness.
  5. Power Platform Assessment — environment inventory, maker concentration, DLP on connectors, premium connector usage, on-prem data gateway audit. (Coming in the next release.)
  6. Microsoft 365 Complete cross-cutting report — bundle-only. A narrative tying the findings from all five into one executive summary mapped to remediation cost, timeline, and license dependencies.

The first five are sold individually at CA$399 each. The sixth — the Complete cross-cutting report — is the reason the bundle exists as a separate SKU. It is the consultant-grade narrative deliverable that ties the technical findings into something a CIO can actually take to a board meeting. It is bundle-only because the only people who need it are people delivering the report to someone who is not them.

Why a Bundle Exists at All

If you sum the five individual single assessments at CA$399 each, you get CA$1,995. The bundle is CA$1,599 — a CA$396 discount, plus the bundle-only Complete report on top. That is the math, but the discount is not the point.

The point is that the bundle includes two things the singles literally do not have:

This is not arbitrary. It is exactly how Vendasta, ConvertKit, ShareGate, Loomly, and AvePoint price their consultant tiers — gate the higher tier on white-label rights and commercial redistribution license, not on features the cheaper tier could replicate. The two artifacts (single PDF vs bundle PDF) are deliberately different so the pricing holds up to scrutiny.

The Reference Pricing

Consultants and MSPs running Microsoft 365 readiness engagements typically charge clients $5,000 to $50,000 per engagement. Public reference points from the Microsoft Marketplace as of April 2026:

These engagements deliver a branded PDF with the consulting firm's logo, an executive summary written for the CIO, and a remediation backlog the client's IT team can act on. The Microsoft 365 Complete Assessment Bundle delivers the same artifact for CA$1,599 per client tenant. That is between 3.2% and 9.6% of the equivalent consulting cost.

If you are an MSP running ten client engagements per year, the math is overwhelming. Ten bundles = CA$15,990 in tool cost. Ten consulting engagements at $25,000 each = $250,000 in revenue. The tool cost is 6% of the engagement revenue. You pocket the rest, the client gets a deliverable identical to what they would have got from a Big 4 engagement, and the deliverable arrives in three to five minutes of scan time instead of three to five weeks of consultant hours.

The Per-Tenant Lock

The Microsoft 365 Complete Assessment Bundle is priced per client engagement, and the technical enforcement is the per-tenant lock. Each bundle has a target Microsoft 365 tenant ID that is null until the first scan, then immutably stamped at run time. Subsequent scans against a different tenant return a 402 error: "Your purchase is locked to a different tenant. Each bundle is locked to one tenant at first scan. Buy another bundle to scan a different tenant."

This is the technical answer to the obvious arbitrage attack: buy one bundle, scan ten clients, save CA$14,000. The lock makes that impossible. An MSP scanning ten client tenants needs ten bundles, in exactly the same way they would need to do ten separate engagements. The pricing is honest about how the tool is used.

Within the 90-day access window for each bundle, you can re-run the assessment against the locked tenant as many times as you want. Found something to fix, fixed it, want to re-scan and confirm the score moved? Re-run, no extra charge. The 90-day window is generous enough to cover the typical engagement timeline (kickoff → scan → remediation → re-scan → final delivery → handoff) without forcing the consultant to extend the engagement just because the tool expired.

What "Read-Only" Means in Practice

Every audit in the Microsoft 365 Assessment Suite is read-only at the architectural level, not just by convention. The Microsoft Graph client that performs every call has a write guard enforced at the client level: any HTTP verb other than GET raises an exception before the request leaves the process. There is no code path from the assessment engine to a write request. You cannot accidentally misconfigure it into mutating a client tenant because the mutation path does not exist.

The service account you create for the scan is granted exactly fourteen read-only Microsoft Graph application scopes, all ending in .Read.All or equivalent. The Azure AD consent screen lists every scope; the customer sees exactly what they are agreeing to before they click Accept. Once the scan completes, every finding, every piece of evidence, every score is stored encrypted at rest with AES-256-GCM.

For a consultant delivering this to a client, the read-only architecture is a sales asset. You can hand the client a one-page "what we will and will not touch" summary that includes the actual list of fourteen scopes. Most clients will accept the engagement on those terms in 24 hours instead of the two-week security review that a write-capable tool would trigger.

Who the Bundle Is For

The Microsoft 365 Complete Assessment Bundle is for three buyers:

  1. MSPs and consultancies running multi-engagement Microsoft 365 practices. One bundle per client engagement. White-label PDF, commercial redistribution license, per-tenant lock. The CA$1,599 price point is calibrated against the $15K–$50K consulting engagements you would normally bid for.
  2. Big-4 consulting firms looking for a productized scan to replace 40 hours of manual audit time. Even at junior consultant rates, the bundle pays for itself the first time it is used. The white-label rights mean it slots into your existing client deliverable templates without requiring a Procurement conversation about a new vendor.
  3. Enterprise CIOs commissioning a comprehensive M365 health check before a major change. Pre-Copilot rollout, post-merger, pre-cloud-migration, pre-regulator-visit. The bundle is the "everything in one purchase" option for tenants where buying five separate single assessments would feel like death by a thousand SKUs.

If you are a single in-house IT team running a check on your own tenant for one specific reason, you do not need the bundle. Buy the single assessment that matches your goal at CA$399, internal use license, MigrationFox-branded PDF. The bundle is for people delivering audits as a paid service to other people.

Run the Free Snapshot First

Every assessment in the suite has a Free Snapshot. View-only, no credit card, one per tenant per month per product. The snapshot gives you the composite score, the four-state verdict, the module scorecard, and one sample finding rendered in the same format as the paid tiers. It exists to answer one question honestly: does this tenant have a problem worth paying to fix?

If the answer is yes, the Single Assessment unlocks the full findings list and exports for one product for 90 days at CA$399. If the answer is "yes and we are also delivering this to a paying client", the Microsoft 365 Complete Bundle at CA$1,599 unlocks all six products plus the white-label rights and commercial redistribution license.

The pricing is honest about what each tier exists for. The free tier is a real sneak peek, not a mutilated version of the paid product. The single tier is for in-house IT. The bundle is for consultants. There is no arbitrage path between the two because the artifacts are deliberately different and the per-tenant lock prevents reuse.

Microsoft 365 Complete Assessment Bundle

CA$1,599 one-time

All 6 audits · 90-day access · 1 tenant · white-label PDF · commercial redistribution license

Buy Bundle →

Or run a Free Snapshot first — no credit card

Read more: Microsoft 365 Assessment Suite overview · Bundle product page · Copilot Readiness deep-dive