Last updated October 19, 2026
By buying or using StepAhead 365 (the scanner, report, templates, and any re-scan service) you agree to these terms.
StepAhead 365 is a self-assessment tool. It checks Microsoft 365 settings with read-only permissions and maps findings to public frameworks (CIS Controls v8, NIST CSF 2.0). It is not an audit, certification, legal advice, or a guarantee that you are secure or compliant with any law, contract, or insurance requirement.
The SMB Kit is licensed for use on one organization's tenant. The MSP License covers the tenants of the clients you manage during the license term. You may edit the templates for your own or your clients' use but may not resell the kit or templates as a standalone product.
Run the scanner only on tenants you own or are authorized to assess, and review any changes you make based on the report. You are responsible for your environment and for the accuracy of anything you attest to.
Microsoft changes its APIs from time to time. We aim to keep the scanner working and will ship updates during your license term, but we cannot promise uninterrupted compatibility.
The product is provided "as is" without warranties of any kind to the fullest extent permitted by law. Our total liability for any claim is limited to the amount you paid us in the 12 months before the claim. We are not liable for indirect or consequential damages, including breach costs or lost profits.
See the refund policy.
These terms are governed by the laws of the State of Texas, USA.
Microsoft 365 and Entra are trademarks of Microsoft. StepAhead 365 is independent and not affiliated with or endorsed by Microsoft.
Questions: stepahead365hq@gmail.com · Privacy · Terms · Refunds