8 recommendations. Filter by category, criticality, maturity tier, or system.
Reduce the Exchange Online attack surface by blocking Exchange Web Services (EWS) when it is not required and migrate legitimate application dependencies to Microsoft Graph.
Protect privileged administrator accounts from credential phishing and MFA bypass attacks by requiring phishing-resistant authentication methods such as FIDO2 security keys, passkeys, Windows Hello for Business, or certificate-based authentication.
Block legacy authentication protocols that bypass modern security controls such as MFA and Conditional Access to reduce the risk of credential attacks.
Prevent users from downloading email attachments to unmanaged or untrusted devices to reduce the risk of data leakage and unauthorized file distribution.
Synchronize AD password hashes to Microsoft Entra ID to unlock leaked-credential detection, keep cloud sign-in working when on-premises infrastructure fails, and remove your dependency on always-available federation servers.
Reduce security risks by assigning permissions to roles instead of individual users, ensuring consistent least-privilege access across your environment.
Optional analytics cookies help us improve Hardenly. They stay off unless you accept. Cookie policy