Prepare your insurance answers.
Keep the evidence close.
Bring scan evidence and your own confirmations into one readiness questionnaire. Export a report for your broker, and see which answers still need review. Your business remains responsible for its responses.
- Questions in the pack
- 141
- Supported by scan evidence
- 59
- Customer evidence only
- 82
- Write permissions
- 0
The problem
Know what supports each answer.
An enabled MFA policy is a useful starting point. Its users, applications, exclusions and grant controls determine what it covers. Registration alone does not show that a sign-in requires MFA.
Tenant Strike brings readable settings, assessment gaps and your own confirmations together. Your IT team can review the evidence, validate effective protection and help you answer accurately.
Use the pack to prepare for your carrier's specific questions.
What you get
Every answer, and where it came from.
Scan evidence
The scan supplies evidence
See the settings the scan could assess, their scope and any gaps. Confirm the complete control and keep the dated evidence with your response.
No · Partial
A finding, with a next step
Review the affected setting, its scope and the recommended action. Validate changes with your IT team and a fresh assessment.
Cannot attest
A clear limit to the evidence
Missing permissions, unsupported sources or unresolved policy scope can leave a control unverified. We label the result cannot attest and show the evidence available for further review.
Customer attestation
What only you can answer
82 questions — training, physical security, incident history, policy — sit outside what any tenant scan can see. You answer these yourself; we date them, label them clearly as your own statement, and print them alongside the scanner context. All questions require your review; your statements remain separate from scan findings.
How it works
Connect, review, download.
- 01
Connect read-only
Your Microsoft admin approves one consent screen. We never request a single write permission, so nothing in your tenant can change.
- 02
Scan your tenant
The scan reads your identity, email, device, logging and external-exposure settings, then maps what it found onto the controls your carrier asks about.
- 03
Confirm and download
Review the evidence, confirm your answers and download a dated PDF or Excel workbook. Share it with your broker alongside any additional evidence they need.
Coverage
8 sections, 141 questions.
- Identity & Access
- Email Protection
- Endpoints & Devices
- Data & Backup
- Cloud Infrastructure
- External Attack Surface
- Detection & Response
- Organization & Governance
The pack organizes identity, technology and operating-practice questions for your review. Your carrier may use different wording or require additional evidence. Organization & Governance answers come from you and remain separate from scanner results.
Managing client tenants?
Renewal season, one console.
Every client gets their own dated pack, and your partner console shows which of them still have questions to fix, verify, or attest to — so you can walk into a renewal conversation with the work already done, and bill for it. See how it works for MSPs →
Your evidence and your answers stay distinct. The scan does not attest on your behalf. The pack is generated from an automated read-only scan on the date it says. It does not bind us or your insurer, and anything marked partial or cannot-attest must be confirmed independently before you answer. Your own attestations are printed exactly as you entered them, dated, and never blended into a scan finding. That caveat is printed on the document itself — we would rather be useful than sound impressive. How our read-only access is enforced →
Know your answers before your carrier asks.
Connect your tenant, review the evidence and prepare a dated questionnaire pack. Read-only access, with no credit card required to start.