Microsoft 365 consultancy & managed services
You own Microsoft 365. Nobody runs it.
The tenant was configured once, during a migration, by whoever was technical that year. Nothing has been touched since. That gap is where the overspending lives, and where the breach comes from. Start with a free fifteen-minute call. No charge, no pitch, nothing to sign.
One issue or the whole tenant · Quoted after we talk · EU & US business hours
Annual licensing waste
$4,860
Nine seats paid for every month: four leavers still licensed, three shared mailboxes that never needed one, two assigned to nobody at all.
- Users
- 34
- Licensed
- 43
- Unused seats
- 9
- MFA covered
- 28 / 34
- Secure Score
- 38%
- Global admins
- 9
- CriticalSix active users have no MFA method registeredPassword-only accounts on a tenant reachable from anywhere.
- CriticalLegacy authentication is not blockedLegacy protocols skip MFA entirely. This is how password spray lands.
- CriticalA mailbox forwards to an outside addressRunning since March. Nobody in the company recognises the recipient.
- HighNine accounts hold Global AdministratorEach one is a full-tenant blast radius. Most were granted to save five minutes.
- HighFour departed staff still hold paid licencesLive identities, and a bill arriving every month.
- ClearBackup retention verified against policyThe one thing this tenant had right.
What we find
The same eight problems, in almost every tenant.
None of this is negligence. It is what an unowned platform looks like after two years. Read the list and count how many you can rule out from memory.
| Severity | Finding | What it costs you |
|---|---|---|
| Critical | Users without MFA | One phished password becomes one mailbox, then every mailbox that one can reach. |
| Critical | Legacy authentication left open | Old protocols bypass MFA completely. Attackers test for this first. |
| Critical | Mailboxes forwarding externally | The standard way an intruder keeps reading your mail after you change the password. |
| High | Licences held by people who left | Direct cost. In a thirty-person company this is usually four figures a year. |
| High | Too many Global Administrators | Any one of them, compromised, is the whole tenant. Microsoft advises fewer than five. |
| High | No Conditional Access policies | No say in who signs in, from where, or on what device. |
| High | One Global Admin, no break-glass account | Lose that account and the tenant is unrecoverable without Microsoft support. |
| High | Shared mailboxes carrying paid licences | Under 50 GB they never needed one. Pure waste, every month, indefinitely. |
The assessment checks all eight, plus guest sprawl, dormant accounts, mail flow rules, external sharing and Secure Score. You get the findings in writing, ranked, with the fix for each.
How it works
A conversation first. A price only once we know what we are quoting on.
We do not publish rates, because a mail flow problem and a fifty-user migration are not the same job. Fifteen minutes on a call tells us both which one you have.
01
Free consultation
Fifteen minutes, no charge. One problem, a whole roadmap, or a second opinion on somebody else's proposal.
02
We look, if it helps
For anything tenant-wide, a read-only review of licences, identities, admin roles, mail flow and policy. Nothing is changed.
03
You get a quotation
In writing, fixed, scoped to exactly what we discussed. Per case, per project, or monthly, whichever fits.
04
Work starts
You approve the quote and we begin. No open-ended hours, no invoice you have to interrogate at month end.
No fix, no fee. On a single case, if we cannot solve it, you do not pay for it. We will tell you before we start if we think it falls outside what we do, rather than bill you to find out.
About the access. For a tenant review you create a reviewer account with read-only permissions. We never ask for anyone's password, it cannot change a setting, and you can revoke it in one click when the work ends. If you would rather watch over a screen share instead, that works too.
What we take on
Anything inside Microsoft 365, and some things next to it.
Some companies need one thing fixed this week. Some need a migration. Some want to stop thinking about it altogether. All three are normal.
| Service | What it covers | Basis |
|---|---|---|
| Consultation | Fifteen minutes on anything in Microsoft 365: a problem, a purchase decision, a plan, or a proposal you want checked. | Free |
| Advisory & planning | Licence strategy, migration planning, security roadmap, or a written second opinion before you commit budget. | Per session |
| Single case | One issue, diagnosed, fixed and written up. Mail flow, Outlook, permissions, Teams, SharePoint, licensing: anything in the platform. | No fix, no fee |
| Urgent case | Mail down, or a mailbox you believe is compromised. Everything else drops and yours goes first. | Per case |
| Tenant health assessment | Read-only review of the whole tenant, findings ranked by severity, each with its fix. Written, and yours to keep. | Fixed quote |
| Licence rescue | The waste from the assessment, actually removed: seats reclaimed, shared mailboxes unlicensed, leavers cleaned up. | Nothing found, nothing owed |
| Migration | Google Workspace, IMAP, on-premises Exchange, or tenant-to-tenant. Planned, executed out of hours, verified. | Fixed quote |
| Setup & hardening | A new tenant configured properly, or an existing one brought to a security baseline and documented. | Fixed quote |
| Adjacent work | Things that touch the platform without being inside it: Intune enrolment, hybrid Exchange, DNS and mail authentication, Power Platform against M365 data. Quoted per case if we are the right people for it. | Per case |
| Offboarding | Per departing employee: licence stripped, mailbox converted, access revoked, data preserved, the whole thing documented. | Per leaver |
| Monthly management | We are your Microsoft 365 administration team. Everything below, continuously, with a written report each month. | Monthly |
Every one of these is quoted in writing after the free consultation. You will never get an hourly invoice you did not expect.
Monthly management
Three levels, depending on how much you want to stop thinking about.
Which one fits comes out of the consultation. So does the price.
Essential
Keep it running and stop it leaking money
Small teams · no internal IT
- Joiners, movers and leavers
- Licences reconciled against your actual invoice
- Exchange Online and mail flow support
- MFA enforcement and admin role hygiene
- A written report every month
- Email and WhatsApp support
Professional
Actively defended, not just maintained
Growing companies · real security need
- Everything in Essential, and
- Conditional Access designed and maintained
- Defender for Office 365 tuned to your mail
- SharePoint, OneDrive and Teams governance
- External sharing and guest reviews
- A quarterly review with your leadership
- Priority response during business hours
Enterprise Care
Audited, governed and answerable
Regulated · larger · under scrutiny
- Everything in Professional, and
- Retention, litigation hold and eDiscovery
- Audit logging and incident response
- Tenant-to-tenant and hybrid advisory
- A named engineer on scheduled calls
- Escalation path for mail-down events
Scope
Specialists, not a help desk.
The boundary is deliberate, and it is written into the agreement so neither side has to negotiate it at eleven at night. Staying inside Microsoft 365 is what makes the depth possible. Some things sit just outside it, and those we quote case by case rather than pretend we do not know how.
Included
Covered by any monthly plan, and the default subject of a project or case.
- Entra ID identities, groups and licensing
- Exchange Online, mail flow and hygiene
- SharePoint, OneDrive and Teams governance
- Conditional Access and Defender policy
- Compliance, retention and audit configuration
- Tenant migrations and hybrid coexistence
By arrangement
Adjacent to the platform and inside what we know. Quoted per case, not carried on a retainer.
- Intune device enrolment and compliance policy
- Windows and mobile devices joined to your tenant
- Exchange Server in a hybrid or migration context
- DNS, SPF, DKIM and DMARC for your mail domains
- Power Automate and Power Apps touching M365 data
- Admin and end-user training on what we have built
Not us
Better handled by a local provider. We will say so rather than learn on your invoice.
- Printers, routers, switches and Wi-Fi
- Standalone servers and line-of-business apps
- Desk-side support and phone password resets
- Software unrelated to Microsoft 365
- Hardware procurement and repair
Not sure which column your problem sits in? Ask on the call. If it is something we should not be doing, we will tell you and, where we can, point you at someone who should. Already have an IT provider? Good, keep them. We work alongside them and take the platform off their plate.
Why trust us with this
You are being asked to let an outside firm near your tenant. Here is the honest answer.
MXify is a young firm, and we are not going to pretend otherwise with invented logos or testimonials. What we offer instead is verifiable, and all of it is checkable before you spend anything.
01
Read-only until you decide otherwise
An assessment needs a reviewer account with read permissions. It cannot change a setting, cannot read message content, and you delete it in one click. Nothing is written to your tenant unless you have approved a quote for the work.
02
You see the findings before you spend anything
The assessment is written, ranked by severity, and yours to keep whether or not you hire us for the remediation. Take it to your existing IT provider, or act on it yourself. Nothing in it is locked behind a contract.
03
Track record you can verify
Our founder has fifteen years in IT, six of them across Microsoft 365 with Exchange Online as the specialism, including Critical Situations work through Microsoft's support partners. That history is public on LinkedIn, under a real name, with a real face on this page.
04
Nothing owed until it works
The consultation is free. Single cases are no fix, no fee. Licence rescue is nothing found, nothing owed. The risk of trying us sits with us, not with you, which is the only fair arrangement before there are reviews to read.
05
Written before it is started
Scope, price and access all go in writing first. You will never be billed for hours you did not agree to, and you will never find out what something costs after it is done.
06
Where we are, plainly
We work from Cairo, Egypt, in English and Arabic, and we cover European and United States business hours. Everything we do is remote, which is how a company of thirty affords specialist attention at all.
Who you are hiring
Specialists in one platform, led by an engineer who still takes the calls.
MXify was founded by Tamer Ibrahim, a Microsoft 365 engineer with fifteen years in IT, the last six inside the platform and specialised in Exchange Online, including Microsoft Critical Situations work: the calls that get opened when something is badly broken and the business is losing money by the hour.
A company of thirty people cannot justify that expertise on the payroll. It still needs it on the phone. That is the whole proposition: the depth of a specialist, without the salary of one.
We are deliberately small and deliberately narrow. You will not be handed to a queue or passed to someone reading your ticket for the first time. The engineer who takes your consultation is the engineer who does the work.
We support clients in English and Arabic, across European and United States business hours.
Submit a ticket
Already know what is broken? Skip the call.
Describe it here and we will come back with what it is, what it takes to fix, and what it costs, before any work starts.
What happens next
An engineer reads every ticket, not a bot. You get a reply with a diagnosis, or the questions we need answered to give you one, plus a fixed price for the fix.
If mail is down for the whole company, say so in the first line. Those go to the top of the queue.
Nothing here commits you to anything. If it turns out to be a five-minute answer, you will get the five-minute answer.
Answered in EU and US business hoursNext step
Fifteen minutes. Bring one question or the whole mess.
No charge and no pitch. You will get a straight answer on the call, and a written quote afterwards only if there is actually something worth doing. We work across European and United States business hours.