The Copilot Hardening Baseline + M365 Copilot Deployment Kit

$249. $296 if you buy the two apart. One legal entity, one licence, bought once.

This pairs the two ends of a Copilot rollout: deploy first, harden second. The Deployment Kit is the 90-day roadmap and the working papers a rollout lead needs in the first weeks. The Hardening Baseline is the settings work that usually gets found out about later: 176 checks across the consoles Copilot touches, tracked row by row with an Owner column and an Evidence column against every one, plus four policy templates you can put your own letterhead on. Since v1.2 every check is also mapped to the MITRE ATLAS mitigations, techniques and case studies that bear on it, to the OWASP Top 10 for LLM Applications 2025 and to the Copilot-relevant recommendations of the CIS Microsoft 365 Foundations Benchmark v7.0.0, with the relation recorded in the row. Bought separately the two run $296. Paired here, they're $249.

What you get

From the M365 Copilot Deployment Kit ($97 alone):

• 28 field guides covering the rollout, in Markdown and HTML
• A 90-day adoption roadmap
• A prompt-audit worksheet
• An ROI-conversation template for the budget conversation
• A governance checklist
• 10 paste-ready declarative agent templates

From the Copilot Hardening Baseline ($199 alone):

• The guide: 307 pages, 176 checks across 9 sections (foundation and tenant readiness; Copilot settings; agents, across three chapters covering inventory, tenant policy, and lifecycle; data protection and oversharing; consumption and billing controls; the EU chapter; the durable layer of roles, decision rights, and runbooks; the Baseline Advisor agent; the framework crosswalk that maps every check to MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025 and the CIS Microsoft 365 Foundations Benchmark v7.0.0)
• The tracker workbook: the same 176 checks as rows, with an Owner column and an Evidence column against every one, a live dashboard reading compliance by section and gaps by priority, and a Decisions log for the controls you accept as a risk instead of leaving as an unexplained gap, and a Frameworks sheet carrying the crosswalk row by row
• The volatility register: 148 of the 176 checks graded for how fast they'll go stale, each with what would have to change for the reading to be wrong
• Four policy templates in Word and Markdown: acceptable use, agent approval and lifecycle, data handling, and consumption and spend, ready to edit into your own house style
• 38 screenshots of the admin surface, captured August 2026

The price

$249 for the pair, bought once. Bought separately they are $199 for the Copilot Hardening Baseline and $97 for the M365 Copilot Deployment Kit, $296 total, so the pairing saves $47 if you own neither. This is the bundle's standing price, not a promotion.

Who this is not for

• You already run a mature configuration-governance practice covering Microsoft 365 Copilot. If you maintain a current settings register across all six consoles, with an owner and a review date on every entry, this tracker will read as paperwork you already have, not new information.
• You're expecting a tool that scans your tenant and reports back. Neither product does that. The roadmap and the checks are worked from research and Microsoft's own documentation, but a person still opens each console and records what's actually there. Nothing here connects to your tenant or runs against it automatically.
• You already own both products. The pair is those same two products, so there is no content here you do not have.
• You already own the M365 Copilot Deployment Kit. The Baseline on its own is $199, and that is the cheaper path.
• You already own the Copilot Hardening Baseline. The Kit on its own is $97, and that is the cheaper path.
• You run mainly on GCC, GCC High, DoD, or another sovereign cloud. Both products are built and verified against commercial Microsoft 365 tenants. Several console paths and settings named in the Baseline don't exist, or sit somewhere else, in a sovereign cloud tenant, and neither product has been verified there.

Refresh commitment

This commitment attaches to the Copilot Hardening Baseline component of this bundle.

The settings baseline is stamped August 2026, and the Microsoft 365 admin surface moves, so the kit is refreshed on a clock: two refreshed editions a year, at no additional cost, for as long as the kit is on sale at store.kesslernity.com, one edition in the first half of the year and one in the second. Every edition published while it is on sale is yours. Each one is a new edition of the same product rather than a second purchase, and it is put on the download you already hold, so you re-download it from your library. If the kit is retired we say so on this page, and the commitment ends with the last edition published before that date. Article 8 of the Terms is what binds this, this block is the wording it binds, and the version of both in force on the day you buy is what governs your purchase. An email when an edition lands is a courtesy and not the commitment, because a buyer who opted out of product email cannot be reached.

For a bundle purchase, "the kit" in the block above is the Copilot Hardening Baseline: the clock runs on the Baseline's own listing staying on sale at store.kesslernity.com, not on this bundle, and a retirement notice would appear on the Baseline's listing.

Screenshot disclosure

This disclosure attaches to the Copilot Hardening Baseline component of this bundle: it is the product whose contents list the screenshots above.

The kit carries screenshots of Microsoft 365 admin surfaces. They appear under Microsoft's published permission terms for the use of their screen content, and each one carries the attribution Microsoft requires. Kesslernity Limited holds no rights over Microsoft's screen content and grants you none, so if you want to lift a frame out of this kit and put it in your own deck, you look Microsoft's terms up yourself.

Notices

Kesslernity Limited is an independent publisher, not affiliated with, sponsored by or endorsed by Microsoft. Microsoft, Microsoft 365, Microsoft 365 Copilot, Microsoft Purview and Microsoft Entra are trademarks of the Microsoft group of companies. Both products are practitioner guidance, not professional, legal, or financial advice. Questions: mathieu@kesslernity.com.