ENTRA ID · MICROSOFT 365 · INTUNE · AZURE · SENTINEL
Audit-ready Microsoft cloud security for regulated enterprises. We build and operate your security in Entra ID, Microsoft 365, Intune, Azure and Sentinel. Everything is documented so that your team can take over at any time.
From an independent baseline assessment to ongoing operations, exclusively on the Microsoft stack.
At a fixed price you learn where your Microsoft tenant stands and receive a prioritised list of measures.
Learn moreWe close the Gap Assessment findings, from MFA to DMARC, and evidence every measure before and after.
Learn moreLaptops and smartphones are managed and encrypted, personal phones included, and you can show their status at any time.
Learn moreMonitored around the clock with Defender XDR and Sentinel, plus a monthly report for auditors and insurers.
Learn moreWe test which paths an attacker would have in Entra ID, Microsoft 365 and Azure, and prioritise the findings.
Learn moreYou introduce Copilot or Claude without confidential documents ending up with the wrong people.
Learn moreThree situations that bring management teams and IT leads to us.
Security in Microsoft 365 and Entra ID is spread across many portals, and an overall picture does not emerge on its own. A gap assessment provides that picture as a report that management can read and IT can act on.
Fixed-price gap assessmentAn audit, an insurer or your own liability requires evidence you can show. We review your tenant as an independent second opinion without replacing your provider.
Ten pieces of evidence an IT provider can showExchange Online and Defender for Office 365 protect well, but only once SPF, DKIM, DMARC, Safe Links and Safe Attachments are configured properly. We set this up and monitor it in operation.
Managed Security & SOCThe gap assessment shows where your Microsoft tenant stands today and what to do first. Scope and price are fixed in advance.
Selected projects from our work
Financial Services
BaFin-audited · ISO 27001
Learn more →Financial Services
DORA-compliant · Azure
Learn more →Energy / Critical Infrastructure
Critical Infrastructure · White-Box Pentest
Learn more →International Organisation
3,500 identities · 12+ countries
Learn more →Retail & Trading
30,000+ employees group · Cloud Security Consulting
Learn more →Public Sector
BSI Baseline Protection · 4 platforms audited
Learn more →In 30 minutes we clarify your situation and your requirements.
We review your Microsoft environment and name weaknesses and the need for action.
You receive prioritised measures that management and IT can both read.
We implement the agreed measures together with your IT team.
Build & Transfer to your team or Build & Operate by us, both without lock-in.
Wenske Cyber Solutions is a Berlin-based consultancy for security in the Microsoft cloud. For financial service providers, critical infrastructure operators, the public sector and other regulated organisations, we implement NIS2, DORA and sector requirements in Entra ID, Microsoft 365, Intune, Azure and Sentinel and document them for audits. Every project is handled by experienced consultants, without junior staffing and without anonymous project teams.
Years of experience in cloud & security
Regulated industries
Completed client projects
Microsoft in depth
One stack: Entra ID, Microsoft 365, Intune, Azure and Sentinel.
Strategy and substance
No concepts without implementation.
Responsibility
No lock-in: tenants, data and documentation stay with you.
Regulation as the foundation
NIS2, DORA and BSI IT-Grundschutz as the yardstick for the architecture.
Frequently asked questions
Short answers to questions we are often asked before the first conversation.
No. E5 provides tools such as Defender XDR, Entra ID P2, Purview and Intune, but many of them are not active after purchase or run with default settings. What matters for NIS2 is what is configured in your tenant and whether you can prove it.
By whether they can show evidence without having to create it first: MFA coverage, Conditional Access policies, the list of admin accounts, SPF, DKIM and DMARC, a documented restore test and a regular report. A missing item is a reason to ask questions about their work. An independent second opinion provides clarity.
Ten pieces of evidence at a glanceThe tasks yes, the responsibility no: under NIS2, management must have risk management measures implemented and oversee their implementation. Operations, monitoring and documentation can be outsourced. A good provider delivers the evidence you need to meet your oversight duty.
It depends on identities, devices, data sources and response times, and on whether Microsoft Sentinel is operated. Sentinel data ingestion is billed through your Azure subscription; Microsoft 365 licences stay on your existing agreements. A reliable figure is only possible after a look at your tenant. That is why we usually start with a fixed-price gap assessment.
Copilot only shows each person what they can already access. The risk lies in overly broad sharing in SharePoint, OneDrive and Teams, so preparation starts with an inventory of that sharing. Sensitivity labels, DLP, the audit log and Conditional Access follow, and only then is Copilot rolled out step by step to pilot groups.
AI Foundation: audit-ready AI adoptionNeither NIS2 nor DORA prescribes a product, but both require that you can detect, assess and report incidents on time. In many Microsoft environments Defender XDR covers a large part of this; Sentinel becomes necessary when you combine further sources, retain data longer or run your own detection rules. In both cases someone has to handle the alerts, and that has to be documented.
Defender XDR or Sentinel: when is which enough?Introductory call, 30 minutes, without obligation.
Appointment booking via Calendly. Loading the calendar transfers data to Calendly LLC (USA).
Bastian Wenske
Founder & Managing Director
Let's discuss your IT security architecture.
Prefer to reach out directly? Send us an email at hello@wenske-cs.de.