CoreView: The Microsoft 365 Security Platform That Just Won Gold

At a time when Microsoft 365 has become the backbone of enterprise productivity for hundreds of millions of users worldwide, its security has never been more contested. Cybercriminals are increasingly targeting the cloud environment not as a peripheral concern but as the primary attack surface, exploiting configuration drift, over-privileged accounts, and gaps in tenant visibility to compromise organisations at scale. Into this landscape steps CoreView, a SaaS platform purpose-built to treat the Microsoft 365 tenant with the seriousness it deserves. That approach has now earned the company a Gold award at the 2026 Cybersecurity Excellence Awards, one of the most widely recognised independent honours in the global security industry.

The Cybersecurity Excellence Awards, run by Cybersecurity Insiders and backed by a global community of over 600,000 security professionals, recognise standout companies, products, and leaders across the cybersecurity space each year. Winners are announced in March, timed to coincide with peak industry attention ahead of the RSA Conference. CoreView’s Gold recognition, in the category of Microsoft 365 Tenant Resilience SaaS Security Posture Management (SSPM), reflects the growing acknowledgment that M365 security is a specialised discipline that generic security tools are not equipped to handle.

The Microsoft 365 Security Problem Nobody Talks About Enough

Microsoft 365 is not a single application. It is a sprawling ecosystem of more than 60 interconnected services and applications, each with its own configuration settings, access controls, and potential vulnerabilities. For enterprise IT and security teams, managing this environment is an ongoing operational challenge. Configurations drift over time. Users accumulate excessive permissions. New applications are added without proper governance. And tenant-wide administrative accounts, by default, carry privileges that make a single compromised identity potentially catastrophic for the entire organisation.

Legacy security tools were not designed with this complexity in mind. They can monitor endpoints and networks effectively, but they struggle to provide continuous, operational control over the configuration and identity layers of a Microsoft 365 tenant. CoreView was built specifically to close that gap. The company describes its mission as delivering cyber resilience that treats the Microsoft 365 tenant as the uniquely critical and sensitive environment it is, whether an organisation is managing a single tenant or navigating the complexity of a multi-tenant architecture alongside on-premise environments.

CoreView ONE: The Platform at the Centre of It All

CoreView’s offering is delivered through its CoreView ONE platform, a unified SaaS solution covering four core technology capabilities: configuration management, policy enforcement, delegation management, and agentic AI for Microsoft 365 administration. Together, these capabilities allow security and IT teams to continuously monitor tenant health, enforce standards automatically, and respond to threats without the manual overhead that typically comes with managing a complex cloud environment.

The platform addresses three broad solution areas. The first is tenant resilience, which covers hardening the M365 environment against attacks, detecting and rolling back configuration tampering, removing excess privilege through virtual tenant segmentation, and enabling rapid recovery to a known-good state after an incident. CoreView’s posture management engine scans across more than 8,000 individual settings in the Microsoft 365 environment, giving teams an unparalleled level of visibility into where risks are hiding.

The second solution area is complex tenant management, serving organisations running multi-tenant environments, hybrid setups that combine Microsoft 365 with on-premise Active Directory and Exchange, and those mid-way through a tenant consolidation. CoreView’s virtual tenant segmentation capability is particularly distinctive here, partitioning a tenant into administrative boundaries so that IT administrators receive only the access they need for their specific scope, rather than the dangerous tenant-wide privileges that Microsoft 365 grants by default.

The third area is governance and lifecycle management, which encompasses automating user provisioning and deprovisioning, managing Microsoft Entra application security, standardising configuration change management across development, test, and production environments, and optimising Microsoft 365 licence spend to eliminate waste. One client, Mateco, saved 70,000 dollars through licence cost optimisation alone, while another, Middleby, automated more than 30,000 tasks in seven months and saved 200,000 dollars in the process.

Industry Recognition and Customer Trust

The 2026 Gold award at the Cybersecurity Excellence Awards is the latest in a series of recognitions that validate CoreView’s approach. Microsoft itself has recommended the platform, noting that deploying CoreView gives enterprises robust tenant resilience and compliance solutions that strengthen their overall security posture. CoreView is now trusted by more than 30,000 active IT and security administrators across more than 4,000 organisations globally, including some of the largest Microsoft tenants in the world. The platform manages over 20 million licensed users and operates through a network of more than 130 trusted partners.

The company’s compliance credentials reinforce its suitability for enterprise environments.

CoreView holds ISO 27001 and ISO 27018 certifications, SOC 2 Type II and SOC 3 attestations, and ISO 9001 certification, along with IRAP assessment for Australian government requirements. It also maintains GovRAMP Basic membership, reflecting its growing presence in regulated and public sector markets.

The Broader Stakes of M365 Security in 2026

CoreView’s Gold recognition arrives at a moment when the stakes around Microsoft 365 security could not be higher. Nation-state actors and organised cybercrime groups have made cloud identity and configuration attacks a primary strategy, exploiting the fact that many organisations still lack the tools to detect when something has been changed in their tenant without authorisation. A compromised global administrator account, or a silently altered conditional access policy, can give an attacker persistent, undetected access to an organisation’s most sensitive data and communications.

CoreView’s response to this reality is operationally grounded. Rather than treating security posture as a point-in-time assessment, the platform turns it into a continuous discipline, one that integrates directly with day-to-day IT administration rather than sitting in a separate security silo. Led by CEO Simon Azzopardi and Chief Product and Technology Officer Andrea Sivieri, the company is now pushing further into agentic AI capabilities to help IT teams manage the ever-expanding complexity of the Microsoft 365 environment with even greater efficiency.

For organisations that have built their operations on Microsoft 365, the question of how to secure it properly has never been more pressing. CoreView’s Gold award at the 2026 Cybersecurity Excellence Awards is a signal that the industry is taking notice of companies that are answering that question with genuine depth and operational rigour.