Optimize365

Optimize365, A CyberFOX® Platform is a multi-tenant security management platform for Microsoft 365. It assesses the security posture of each connected tenant, applies customizable security baselines, detects configuration drift, predicts the effect of a configuration change before it is applied, and produces reports. It is agentless and connects to Microsoft 365 through the Microsoft Graph application programming interface (API). Optimize365 extends the CyberFOX portfolio into Microsoft 365 security and configuration management, alongside CyberFOX products for endpoint privilege, credentials, DNS, and network security.

Audience

IT leaders at small and mid-sized enterprises who manage Microsoft 365 security across multiple tenants. The main channel buyers are managed service providers (MSPs) and managed security service providers (MSSPs) that manage Microsoft 365 security for many client tenants.

Key Capabilities

• Multi-tenant posture assessment: Scans every connected Microsoft 365 tenant and scores its security posture from one dashboard, so administrators do not have to sign in to each tenant's admin center.
• Customizable security baselines: Defines a standard configuration, applies it across tenants, and offers one-click automated remediation of gaps.
• Drift detection: Tracks configuration changes across all tenants and alerts with guided fixes when a tenant moves off its baseline, so the baseline works as ongoing monitoring and not as a one-time audit.
• Configuration impact prediction: Predicts the effect of a remediation before it is applied, including an analysis of the impact on users.
• License gap detection: Identifies security controls that are unavailable because of the tenant's licensing, which explains why a control is off when no one disabled it.
• Third-party app registration audit: Surfaces high-risk third-party applications that are connected to a tenant through OAuth app registrations.
• AI readiness evaluation: Assesses whether a tenant is configured safely for Microsoft AI features such as Copilot, including whether existing oversharing would carry into an AI rollout.
• Compliance mapping: Maps configuration state to compliance frameworks, so findings can be reported in terms that auditors and cyber insurers use.
• Branded client reporting (for MSPs): Generates client-ready reports under the provider's branding, for uses such as quarterly business reviews.
• Project scoping and statement-of-work generation (for MSPs): Produces time estimates and statement-of-work documents from assessment findings, so a security gap can become a scoped, priced project.
• PSA integration and tenant onboarding: Connects to professional services automation (PSA) systems for automated tenant onboarding and consolidated task management, so findings reach the system where work is tracked and billed.

Use Cases

• Running a rapid security posture assessment across every tenant from one dashboard.
• Applying a baseline and remediating gaps, with the impact of each change predicted first.
• Monitoring continuously for configuration drift and receiving alerts with guided fixes.
• Auditing high-risk third-party app registrations and license gaps that leave controls disabled.
• Producing branded reports and scoped projects for client conversations, for MSPs.

Technical Specifications

• Delivery: Cloud software as a service. Nothing is installed on endpoints or servers.
• Connection: Connects to each Microsoft 365 tenant through the Microsoft Graph API and requires administrative consent per tenant.
• Management: A single multi-tenant dashboard.
• Integrations: Microsoft 365 through the Microsoft Graph API, and the PSA systems ConnectWise, Autotask, and HaloPSA.
• Purchasing: Through CyberFOX's approved purchasing channels and the Microsoft Marketplace, including co-sell eligibility, depending on the current go-to-market model.
• Pricing: A subscription with per-user tiers. CyberFOX does not publicly list pricing.
• Certifications: Optimize365 states that it holds SOC 2 Type 2 and ISO 27001:2022.
• Scope: Microsoft 365 only. The platform does not address endpoints, credentials, DNS, or network access.
• Time to start: Optimize365 states that organizations can be operational in about 30 minutes.

Brand Transition

Optimize365 continues to operate under the Optimize365 brand within the CyberFOX portfolio, and CyberFOX will integrate it into the CyberFOX brand and portfolio over the coming quarters. Existing partner and customer contracts, service, and support are unaffected.