./blog
Notes from the tenancy trenches
Practical writing on Microsoft 365 security — Conditional Access, Secure Score, the Essential Eight — from the practice behind the free tenant checks. No vendor recycling, no AI filler.
The break-glass mistake sitting in most Australian tenants
An all-users MFA policy with zero excluded accounts isn't hardening — it's a lockout loop waiting for one bad Tuesday. The failure mode, the five-point fix, and how to check yours in two minutes.
./read →Reading about a misconfiguration is one thing — finding it in your own tenant is another. The free checks read your tenant live, in your browser, read-only: ./ca-policy-check · ./secure-score-gap