Managed workspace security

Your tenant, devices and data. Managed and secured.

We manage and secure your Microsoft 365 tenant, every endpoint and your critical data, then layer on email security, training and EDR, so the tools your people use every day stay protected and up to date.

Managed for you

What's included

Four layers, one accountable team.

Best-in-class platforms, configured and run by Legion so your team doesn't have to become experts in each one.

Powered by CIPP

Managed Microsoft 365

One partner for your Microsoft licenses, tenant management and security. We harden your tenant to a security baseline, keep it there, and give you clear visibility into users, licenses and devices.

  • Microsoft 365 licensing purchased directly through Legion
  • Security standards applied, enforced and checked for drift
  • MFA and conditional access policies
  • User onboarding, offboarding and license management
  • Mailbox, sharing and admin role reviews
  • Tenant, user, license and device compliance data synced into endpoint management for one view of every account and device

Powered by NinjaOne

Endpoint management

Every Windows, macOS and mobile device monitored, patched and managed from one platform, wherever your people work.

  • Operating system and third-party application patching
  • Monitoring, alerting and remote support
  • Mobile device management for iOS and Android
  • macOS management and configuration profiles
  • Intune device compliance monitoring
  • Hardware and software inventory

Powered by NinjaOne

Backup & recovery

Immutable, encrypted, offsite backups, so ransomware, accidental deletion or a failed device doesn't mean lost work.

  • Workstations and servers
  • Microsoft 365 email, OneDrive, SharePoint and Teams
  • Google Workspace Gmail and Drive
  • Immutable copies attackers can't encrypt or delete
  • Encrypted in transit and at rest, stored offsite

Powered by Guardz

Workspace security

Layered protection for the people, inboxes, files and devices attackers target every day, in one integrated service.

  • Advanced email security and DLP with Check Point Avanan
  • Security awareness training and simulated phishing
  • SentinelOne AI-powered EDR with managed detection and response
  • Visibility and cleanup of public link shares in SharePoint, OneDrive and Google Drive

Why it matters

Most breaches start with the basics.

Attackers rarely need anything exotic. They look for a missed setting, an unpatched laptop, a convincing email or a forgotten shared link.

Configuration drift One changed setting can undo your Microsoft 365 security. We catch it and put it back.
Unpatched devices Known vulnerabilities on laptops and servers are among the easiest ways in.
Phishing Email remains the most common starting point for attacks, so we filter it and train your people.
Oversharing Files shared with "anyone with the link" can stay public for years. We find and fix them.
Ransomware If the worst happens, clean, immutable backups get you running again without paying.

See how it fits together

Workspace security in context.

Choose a service to see where it sits between attackers and your business, and how it connects to our 24/7 SOC.

Security services network diagram Adversaries and the dark web send phishing, malicious sites and stolen logins across the internet toward business services and users and devices, all monitored by the Legion 24/7 SOC. AdversariesCriminals, ransomware Dark webLeaked credentials Phishing Malicious sites Stolen logins Internet Business services Users and devices Microsoft 365 Google Workspace Okta AI tools Users Laptops and Macs Phones, tablets Office network Legion 24/7 SOC

Choose a service

Tap a service to see where it sits between attackers and your business, and what it protects.

Part of a bigger picture

Managed by the same team that watches and tests it.

Workspace security feeds directly into our 24/7 SOC, gets validated by our offensive testing and produces the evidence your auditors and insurers ask for.

24/7 detection & response Continuous pentesting Compliance & audit

Common questions

Can we buy our Microsoft 365 licenses from you?

Yes. Legion is a Microsoft license reseller, so licensing, tenant management and security all come from one partner, with one point of contact and one bill.

We already have an IT provider. Does this replace them?

It can, or it can complement them. Some clients rely on us for all of this; others keep their IT provider for day-to-day support while we handle the security, monitoring and backup layers. We'll recommend what fits.

Do you support Google Workspace as well as Microsoft 365?

Yes. Backups, email security and public link share remediation cover Google Workspace, alongside full Microsoft 365 tenant management.

Do you manage Macs and mobile phones?

Yes. NinjaOne manages Windows, macOS, iOS and Android devices, including configuration, patching and inventory.

Does this help with compliance and cyber insurance?

Yes. MFA, patching, EDR, backups and security awareness training are common insurance and audit requirements, and these services produce the reports to prove they're in place.

Get your workspace under control.

Tell us about your users, devices and platforms and we'll put together a quote.

Request a quote Talk to our team