Ultimate Fortress
It combines everything from Essential Shield and Pro Guard with 24/7 SOC monitoring, CyFun maturity tracking and compliance operations. For organisations where security is a standing obligation, not a one-off project.
This tier is designed for SMEs under NIS2 pressure, for organisations that must present audit-ready evidence to customers or regulators, and for those in the supply chain of Essential entities that set requirements. With Maester baselining (300+ automated checks), PIM and access reviews, and a full annual security scan, Ultimate Fortress leaves nothing to chance.
Every quarter your management sits at the table for the strategy session: security maturity, budget and compliance outlook. That way security is no longer an IT topic, but a fixed item on the management agenda.
What is included
Contains everything from Essential Shield and Pro Guard, plus:
Support & SOC
24/7 SOC monitoring
Your Microsoft 365 and Defender environment is watched day and night by a specialised SOC partner, under Dunetrails' direction. Alerts are followed up and triaged 24/7; larger remediation gets a separate project proposal, with clear agreements.
Third-line support as in Pro Guard
Fixed contacts, Service Delivery Manager and phone escalation channel, with critical escalation 24/7 through the SOC process.
Annual security scan
One full security scan per year included
Maester baselining plus expert analysis and CyFun assessment. Fresh findings every year, a revised roadmap every year: your improvement track never stands still.
Identity & access
PIM operations
Operational follow-up of time-bound admin access: admin rights only when needed, and provably so.
Periodic access reviews
Groups, SharePoint, Teams and mailboxes get a regular rights audit, plus validation of break-glass accounts. Least privilege, and we can prove it.
Risk-driven policy
Follow-up of risk-based Conditional Access, identity protection and the handling of risky users and sign-ins.
Compliance & governance
CyFun maturity tracking
We follow your progress per control and per function, with Maester baselining as the recurring yardstick. You see your maturity grow year after year.
Audit support for NIS2, CyFun and ISO
Documentation templates, policy mapping and Secure Score summaries as audit evidence. We guide your preparation, so an audit is not a crisis.
Quarterly strategy with management
Security maturity, budget and compliance outlook: a fixed moment where management and IT see the same reality.
Who is it for?
Ultimate Fortress is for organisations where security and compliance are not a choice but an obligation.
It is for you if:
- You fall under NIS2, or sit in the supply chain of parties that demand proof.
- You want 24/7 visibility into what happens in your Microsoft 365 environment.
- You must be audit-ready for CyFun, NIS2 or ISO, without last-minute panic.
- You want security on the management agenda, with maturity numbers that matter.
Doubting whether you need this level? The audit gives the answer: the tier follows from the findings, not the other way around.
What does it get you?
- 24/7 visibility into your M365 environment
- Provable CyFun maturity growth
- Audit-ready evidence, whenever a customer or auditor asks
- Security as a fixed item on the management agenda
Ready for maximum protection?
Book a free consultation and find out whether Ultimate Fortress fits your organisation. Honest advice: sometimes an audit is the better first step.


