Tighter sign-in rules for businesses with more at stake.
Every plan includes our baseline sign-in rules. Secure+ adds a wider set of Conditional Access policies that make stolen credentials much harder to use - for example blocking sign-ins from countries where you don't operate - set up around how your team actually works.
Uses Conditional Access in Microsoft Entra ID P1, included in Microsoft 365 Business Premium, which every plan requires.
How it works
Map how you work
Where your team signs in from, on which devices, and which accounts matter most.
Design the rules
We choose the extra policies that fit your business, without blocking real work.
Roll out carefully
Policies are tested before they're enforced, so nobody is locked out by surprise.
Keep them right
Exceptions and changes go through the helpdesk, and the whole set is reviewed every year.
Where it helps
Real situations this covers for businesses like yours.
A phishing gang tries a stolen password from overseas
Sign-ins from countries you don't operate in are blocked.
A member of staff travels for work
Tell us before they go and we'll allow sign-ins from that country for the dates needed.
Sensitive data only on company devices
Access can be limited to compliant, managed devices.
Regulated clients ask about access controls
You can show exactly which sign-in rules protect their data.
Which plans include it
Prices exclude VAT. Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price - we manage and right-size your licences. See full pricing.
Common questions
How is this different from the baseline?+
The baseline sign-in rules on every plan cover MFA, legacy sign-in and admin accounts. Secure+ adds a wider set of policies, such as country blocking and device-based rules.
Do we need extra licences?+
No. These policies use Microsoft Entra ID P1, which is included in Microsoft 365 Business Premium.
What if someone needs to work from abroad?+
Tell us before they travel and we'll allow sign-ins from that country for the dates needed.
Will the stricter rules lock people out?+
Policies are tested before they're enforced, and we roll them out with you. If something blocks real work, the helpdesk sorts it.
Is this on Essentials or Complete?+
No. Every plan has the baseline sign-in rules. The wider set of policies is Secure+ only.
Works alongside
Want this looked after for you?
Free Microsoft 365 security audit - Cancel anytime in your first 3 months