Experience, in practice.
What Daeza does
Daeza Pty Ltd is an Australian cyber security, infrastructure and AI advisory company. Daeza secures and improves Microsoft 365, Azure and on-premises environments for growing businesses, working across nine platforms: Microsoft 365, Azure, Defender XDR, Microsoft Sentinel, Fortinet, Cisco, Qualys, VMware and Veeam. Every Daeza engagement follows four steps: a read-only baseline, a written change plan ranked by risk, the approved changes in one scheduled window, and a hand-over with a settings register, rollback steps and a one-page summary for directors. Nothing is changed until the client approves the plan, and every change has a rollback note. Daeza is led by a senior engineer with more than 20 years in infrastructure and security. Daeza does not certify against standards, does not provide monitoring and does not provide incident response or forensics.
- Read-only baseline
- A Daeza read-only baseline is a review of a Microsoft 365 tenant, devices and network in which no settings are changed. Every finding carries evidence and a risk rating.
- Monthly security check
- The Daeza monthly security check is an ongoing read-only review of a Microsoft 365 tenant and its public domain, covering tenant drift, email authentication, domain health and exposure, reported each month.
- Director report
- A Daeza director report puts the top three actions on page one, then lists each finding with its risk, evidence, a paste-ready fix and who controls it.
Experience
Daeza is led by a senior infrastructure and security engineer with more than 20 years of hands-on work across data centres, hybrid networks, cloud and security.
- Architecture and assessmentsSecurity and infrastructure designs and technical assessments aligned to business goals.
- Hybrid and data centreData centre operations, Windows Server and VMware virtualisation, Azure and Microsoft 365.
- Security operationsPosture hardening with Defender XDR, vulnerability management with Qualys and SIEM platforms.
- ResilienceBackup and disaster recovery design with Veeam.
- DeliveryMulti-site rollouts, acquisition IT integration and cloud migrations.
- GovernancePolicy, audit readiness, identity and access management, MFA and Zero Trust.
What we build
We build and run our own software, so our advice comes from shipping, not only from reading.
- Microsoft 365 assessment platformOur own tooling: read-only collectors, drift tracking, email and domain checks, director reports and approval-gated change packages with rollback.
- HamdamAn iPhone and iPad app, built and maintained by our team. Android version in testing. hamdam.com.au
- Game studioA game studio project, in development.
Questions
What does Daeza do?
Daeza is an Australian cyber security, infrastructure and AI advisory company. Daeza secures and improves Microsoft 365, Azure and on-premises environments for growing businesses, working in Defender XDR, Microsoft Sentinel, Fortinet, Cisco, Qualys, VMware and Veeam. Every engagement starts read-only, and nothing changes until you approve a written plan.
What is a Microsoft 365 security review?
A Microsoft 365 security review is a structured check of a tenant's sign-in settings, admin roles, email protection, external sharing and audit logging against current good practice. Daeza runs the review read-only, ranks each finding by risk, shows the evidence behind it and gives a fix your team or provider can apply.
Will Daeza change anything without my approval?
No. Every Daeza engagement starts with a read-only baseline in which nothing is changed. Changes are made only from a written change plan that you approve, in one scheduled window under your change control, and every change has a rollback note so it can be reversed.
Does Daeza need admin access to start?
No. The first step is read-only, so Daeza only needs the read permissions you choose to grant. Admin access is used later, only for the changes you have approved in the written plan, under your own access controls, and it can be removed as soon as the change window ends.
Is Daeza a managed security provider?
No. Daeza is an advisory and delivery company, not a managed security provider. Daeza designs, hardens and reviews your Microsoft 365, cloud and network security, and can run a monthly read-only check, but does not provide 24/7 monitoring, incident response or forensics.
Does Daeza certify Essential Eight or ISO 27001?
No. Daeza does not certify, attest or assess maturity against the ASD Essential Eight, ISO 27001 or any other standard. Daeza can show which of your Microsoft 365 and device settings relate to the Essential Eight, so your team or an accredited assessor has a clear starting point.
Will Daeza replace our IT provider?
No. Daeza works alongside your internal IT team or managed service provider, under your change control. Daeza hands over everything it changes, including a settings register and rollback steps, so whoever runs your IT next can maintain it without Daeza.
What do I receive at the end?
At the end of a Daeza engagement you receive a settings register, rollback steps and a one-page summary for directors. Every finding is ranked by risk and comes with its evidence, a fix and a note on who controls it, so the report can be acted on straight away.
Can Daeza help us prepare for Microsoft 365 Copilot?
Yes. Daeza reviews who can see what in your Microsoft 365 tenant before Copilot or other AI tools can surface it, writes an AI use policy with you that sets what AI may and may not touch, and prepares a short paper on where AI fits your business and where it does not.
How is work priced?
Each Daeza engagement is scoped and quoted in writing before any work starts. The quote follows a short scoping conversation and sets out what is in scope, what is out of scope and what you will receive at the end.
Does Daeza work with businesses outside the capital cities?
Yes. Daeza works remotely with businesses anywhere in Australia, including regional areas. Microsoft 365, Azure and most network and security work can be reviewed and changed remotely under your access controls, so location does not limit the service.
Where is Daeza based?
Daeza Pty Ltd is an Australian company, ACN 703 651 290 and ABN 19 703 651 290, registered in 2026. Daeza works remotely with businesses across Australia, so you deal with the same senior engineer whether you are in a capital city or a regional town.