baref00t.io

// copilot assessments / copilot

Copilot Readiness Audit

Before you turn Copilot on, know exactly what it will surface. This assessment scores your tenant across data sprawl, sensitivity labels, DLP, identity & access, lifecycle governance, licensing, retrieval surface hygiene — and includes a teaser inventory of every agent in your Copilot/Outlook/Teams catalogue. The retrieval surface section samples the live Microsoft Search index (the same index Copilot grounds against) for surface breadth, classification coverage, external/guest crossover, and document freshness.

One-off
$499

Single report, no commitment.

Monthly
$249/month

Continuous monitoring — fresh report every 30 days.

Available in AUD, USD, GBP, EUR, SGD. MSP partners get volume discounts via the partner programme.

What it scores

CP1

Data Sprawl & Oversharing

Public groups, OAuth grants, external sharing, guest access, app consent, group creation.

CP2

Sensitivity Labels

Label inventory, default label policies, auto-labelling, label analytics, container scoping.

CP3

Data Loss Prevention

DLP policy presence and coverage across SharePoint, OneDrive, Teams, and Exchange.

CP4

Identity & Access

MFA, Copilot-specific Conditional Access, session controls, legacy auth, risk policies, device compliance, phishing-resistant MFA.

CP5

Lifecycle & Governance

Guest role restrictions, inbound B2B, invitation settings, access reviews.

CP6

Licensing & Rollout

Copilot SKU detection, prerequisite SKU detection, licence assignment ratio.

CP7

Retrieval Surface Hygiene

Live Graph Search sample of the Microsoft Search index: surface breadth, classification coverage, external + guest crossover, stale-document share.

CP8

Agent Catalogue (teaser)

Quick package count, custom-engine agent detection, third-party block hygiene — funnels into the full Agent Inventory audit.

Microsoft APIs

  • Microsoft Graph (universal scopes)
  • Microsoft Graph Search API (CP7)
  • Copilot Package Management API (preview, CP8)

Customer prerequisites

  • M365 tenant with admin consent
  • Files.Read.All + Sites.Read.All app scopes for CP7 retrieval-surface sampling
  • Microsoft Agent 365 licence for CP8 (optional)