Identity & access
Secure sign-in for every user and guest, with policies that stop attacks without getting in the way of work.
Microsoft cloud & security consultancy
A secure Microsoft tenant, set up properly and handed over clearly.
Paian helps organisations configure Entra ID, Intune, Defender and Purview the way Microsoft intended, with documentation your own team can keep running.
tenant-baseline.report
Entra IDMFA required for all usersEnforced
Cond. AccessLegacy authentication blockedEnforced
IntuneWindows 11 via AutopilotCompliant
DefenderEDR in block modeActive
SentinelAnalytics rules and playbooksActive
PurviewSensitivity labels publishedPublished
Example of a baseline delivered at handover6 of 6 controls passed
Services
Five areas of the Microsoft stack
From identity to devices and data. Hands-on implementation, not slide decks: every engagement ends with working configuration and documentation.
Endpoint management
Devices that arrive ready to work, stay compliant and update themselves.
Threat protection
Migration from third-party antivirus to Microsoft Defender, tuned and monitored.
Security operations
Detection and automated response in Microsoft Sentinel, and fine-tuning of Microsoft Defender to cut noise and false positives.
Information protection
Sensitivity labels, retention and controlled external sharing in Teams, SharePoint and OneDrive.
Zero Trust
Six layers, one approach
Zero Trust means: never trust, always verify. Microsoft divides it into six layers, with visibility and response at the centre. Click a layer to see the risk, the Microsoft tools and what Paian does there.
Click or tap a layer
Approach
How an engagement runs
Four steps, agreed up front. You always know what has been changed and why.
01
Assessment
Review of the current tenant, devices and risks against the Microsoft baselines.
02
Design
A concrete plan with priorities, impact on users and a rollback route for every change.
03
Implementation
Phased rollout, pilot group first, automated with PowerShell where possible.
04
Handover
Documentation and a walkthrough, so your own team can manage and extend it.
Alerts
Vulnerabilities under active attack
The latest vulnerabilities that attackers are exploiting right now, from the official CISA catalogue. Updated automatically every hour.
News
Microsoft security news
What changed recently in Defender and Sentinel, and what it means for your environment. Updated November 2026.
Project Perception: AI agents that find, investigate and fix
Microsoft's new multi-agent security system runs from the Defender portal. Red team agents look for weaknesses, blue team agents investigate, green team agents propose or apply fixes. Critical actions wait for human approval. In limited public preview since August 2026, by invitation.
For you: get the basics right first. Agents can only act on what Entra ID, Defender and Sentinel are set up to see.
Read the source →
Sentinel moves fully into the Defender portal
After 31 March 2027, Microsoft Sentinel is supported only in the Defender portal. Onboarding now includes the Sentinel data lake by default, and cross-tenant delegated access became generally available in October 2026.
For you: plan the portal transition and review data retention before the deadline.
Read the source →
Defender blocks prompt injection and gets a new identity sensor
Defender for Office 365 now quarantines emails that try to manipulate AI assistants, on by default in Plan 2 and E5. The Defender for Identity v3.x sensor can now be activated on domain controllers without Defender for Endpoint.
For you: check your quarantine policies and plan the sensor upgrade.
Read the source →
About
Cees van den Haak
Founder of Paian ICT Services. ICT manager and Microsoft engineer with a long track record of leading cloud-first Microsoft programmes, from Windows 11 migrations to building a security operations practice on Defender and Sentinel.
Based in Somogy, Hungary. Working remotely and on-site for organisations in Hungary and across Europe, in English.
MCSEAMBIMicrosoft 365Azure
Contact
- c.vandenhaak@paian.eu
- Company
- Paian ICT Services Kft.
- Location
- Somogy county, Hungary