M365 Security

Microsoft 365 is not its own backup.

If you use Microsoft 365, you have mailboxes, files and Teams content in one place — and with that, the risk in one place too. 365 Total Protection from Hornetsecurity adds email protection, archiving, backup and an overview of permissions.

Vendor: Hornetsecurity, HanoverSet-up and support by kyberioISO 27001 based on BSI IT-Grundschutz

Why at all

The provider protects the platform, not your content

Microsoft makes sure that Microsoft 365 runs. For the content, the shared responsibility model applies: whatever is deleted, encrypted or shared by mistake is on your side of the line. The recycle bin is not an archive, and retention within the service is not a backup in the sense of recovery after an incident.

Then there is the route through which most attacks come in: email. Phishing that looks genuine, invoices with attachments, CEO fraud — all of it lands in a mailbox first.

365 Total Protection from Hornetsecurity addresses both points. The vendor is based in Hanover.

  • Recognise shared responsibility
  • Email as the main point of entry
  • Catch deletion and encryption
  • Separate retention and archiving
  • Make permissions visible
  • Train people instead of blaming them

365 Total Protection

Four stages from the vendor

Hornetsecurity structures 365 Total Protection into four plans that build on one another. Which stage suits your environment we look at together — the vendor does not publish prices.

Plan 1 — Business

The foundation: spam and malware filtering for Microsoft 365, automatic email encryption, and central signatures and disclaimers.

Spam and malware filterEmail encryptionSignatures

On request

Enquire

Plan 2 — Enterprise

In addition, protection against advanced attacks, audit-proof email archiving and a continuity service that keeps mail flowing when Microsoft 365 cannot be reached.

Advanced Threat ProtectionArchivingEmail Continuity

On request

Enquire

Plan 3 — Enterprise Backup

In addition, 365 Total Backup: automated backup of mailboxes, OneDrive, SharePoint and Teams with fine-grained recovery.

Backup for M365Granular recovery

On request

Enquire

Plan 4 — Compliance & Awareness

In addition, Security Awareness with phishing simulations, the Permission Manager for permissions in SharePoint and OneDrive, and a DMARC Manager.

Security AwarenessPermission ManagerDMARC Manager

On request

Enquire

Feature set according to the vendor, as read on 23 September 2026. Which stage kyberio offers in which form we clarify in conversation.

Our role

What we contribute

A security product only takes effect when it is set up properly and someone is watching. That is where we come in.

Assessment, not a sales pitch

We first look at what you already have — quite often Microsoft 365 already covers part of it.

Set-up as a project

Connection to your tenant, policies, reports and quarantine configured — as a project billed by time and effort, not as a side job.

The rest of the chain

Email is one route of many. Firewall, WAF, VPN and security scans come from the same house.

More

Backup that belongs to you

If backups should not sit with the same provider as the data: BaaS and DRaaS in our own data centres.

More

Frequently asked questions

Do I need this if I already have Microsoft 365?

That depends on your plan and on your requirements. Microsoft includes protective features; gaps usually appear in archiving, recovery and the overview of what is shared. We first look at what is already covered in your case.

Isn't retention in Microsoft 365 already a backup?

Retention keeps content available; a backup restores it — even when access to the tenant itself is the problem. Confusing the two is the most common mistake in this area.

Who is Hornetsecurity?

A provider of email security and backup based in Hanover. 365 Total Protection is its suite around Microsoft 365.

Where is our data processed?

In Germany. This is the point on which an email security service stands or falls: whoever filters, archives and backs up messages sees them. With this service, processing stays in the country.

Do you set it up for us?

Yes. Connecting the tenant, setting policies, configuring quarantine reports and recipient lists, going through the results together once — we deliver that as a project billed by time and effort. The reason it is not a flat price: how much work it involves depends on the number of domains, on existing rules and on how cleanly the tenant was set up beforehand. We estimate that before we start.

What does it cost?

You get the service through us: one contract, one invoice, one contact. The vendor does not publish list prices, and we do not state any here that we cannot hold to. Tell us the number of users and the stage you want, and you will get a quote.

Sovereignty

Paving the way for digital sovereignty

ISO 27001 based on BSI IT-Grundschutz, BSI-IGZ-0552-2023
BSI-IGZ-0552-2023 ISO 27001 based on BSI IT-Grundschutz Scope: all data centers and all cloud services Security concept
  • Owner-managed since 1997

    As an owner-managed operator with our own data centers, we make our decisions independently and are subject exclusively to German / EU law.

  • 100% made in Germany

    Our data center, product development, and customer support are all based in Germany for your digital sovereignty.

  • 24/7 Customer Support

    We are here for you: 24/7/365 customer support, in English and German

What protects your Microsoft 365 today?

Tell us how many mailboxes there are and which plan you have. We will tell you where the gaps are — even if, for once, the answer is that there are none. Feel free to contact me directly.

  • We will get back to you as soon as we can.
  • No obligation, free of charge.

How we process your details is explained in our privacy notice.