Skip to main content

Huntress Managed ISPM - Review and Generate Identity Posture Assessments for Microsoft 365

Nick Gusto
  • Updated

Team: Huntress Managed Identity Security Posture Management (ISPM)
Product: Microsoft 365
Summary: Learn what is included in the Identity Posture Assessment for Microsoft 365 and how to generate report snapshots from the Huntress Platform.

 

In this Article

Identity Posture Assessment
What's Covered in the Assessment
How to Generate Your Reports
Co-branding Reports and Adding Your Logo
Sample Reports

 

Identity Posture Assessment

The Huntress Identity Posture Assessment provides a clear snapshot of your security landscape within a Microsoft 365 tenant. Generated on demand from the Huntress Platform, assessments evaluate your security posture against the Huntress Identity Security Framework, which is our SOC-informed checklist of effective Microsoft 365 security practices.

Assessments provide point-in-time snapshots of security gaps, potential misconfigurations, and opportunities for improvement.

This assessment is not currently available for Google Workspace. 

 

What's Covered in the Assessment

The Identity Posture Assessment measures your Microsoft 365 security configuration against the Huntress ISPM framework. It assesses the controls available to your organization and excludes controls your tenant is not licensed to use:

  • Overall Compliance Rating: Review the status of assessed controls; compliant, non-compliant, requiring manual action, or accepted risks. The rating highlights your current posture and potential score after remediating identified gaps.

  • Unwanted Access: Review preventive controls for authentication and external access across Microsoft Entra ID, Exchange, SharePoint, and Teams. This includes settings for MFA, legacy authentication, guest access, administrator protection, application consent, email security, and external collaboration.

  • Shadow Workflows: Review preventive controls across Exchange, Teams, and SharePoint to identify workflows that bypass security controls or conceal activity.

  • Rogue Apps: Review preventive controls for OAuth consent and app creation to limit the risk of unapproved or overprivileged integrations.

  • Gaps and Next Steps: Each non-compliant control highlights severity, category, capability, and recommended action. The report indicates which controls Managed ISPM can deploy directly and which require manual configuration by an administrator in Microsoft 365.

  • Remediation and Drift Protection: Deploy remediation directly from the Huntress Platform for supported controls. Managed ISPM continuously monitors the tenant to prevent configuration drift.

  • Microsoft Secure Score: Displays Microsoft Secure Score as a separate reference point. This metric is reported directly by Microsoft and does not impact your Huntress ISPM compliance rating.

 

How to Generate Your Reports

Generate assessment reports on demand from the Huntress Platform at either the account or organization level.
 

Account Level

  1. Log in to the Huntress Platform and go to ISPM.

  2. In the Quick Assessment section, select your organization from the drop-down menu.

  3. Select Generate. The report downloads automatically to your browser.

Organization Level

  1. Log in to the Huntress Platform and select your target organization.

  2. Go to ISPM.

  3. In the Quick Assessment section, select Generate. The report downloads automatically to your browser.

Huntress API

Security control status checks and full assessment data are also available through the Huntress API:

  • Make a GET request to /v1/organizations/<organization_id>/posture_assessment to retrieve complete report data.

  • Refer to the Huntress REST API documentation for current endpoints and schema details.

 

If an organization has just been onboarded to ISPM, assessments may not be immediately available. ISPM requires a few minutes to gather data across the organization so that the report can be generated. Typically, this is less than 15 minutes. 

 

Co-branding Reports and Adding Your Logo

Add custom branding, logos, and accent colors to your assessment reports to share results directly with customers under your own brand, backed by Huntress SOC expertise.

Follow the instructions in Add Your Company Branding to Huntress Reports and Canaries to upload your assets. Once saved, your branding applies automatically to all future report downloads.
 

Sample Reports

Review sample reports to evaluate layout and findings before generating your own:


Standard (Huntress Branded)

Co-branded

 

--

Related articles