Know exactly where your Microsoft 365 environment stands
I help IT leaders and management see where the security gaps in Microsoft 365 are, which licenses are paid for unnecessarily and in what order things should be fixed. After that, I fix them if that is what we agree.
- 25+ years in ICT
- 28 Microsoft certifications
- 100+ Microsoft 365 environments reviewed
- MCT Microsoft Certified Trainer
What does Wolflake Consulting do?
Wolflake Consulting is an independent Microsoft 365 and Azure security consultancy based in Tampere, Finland. The services are the health check, security remediation and deployments, Azure and hybrid infrastructure, and training. The work is done by founder Jami Susijärvi.
M365 Health Check
In one week: which licenses you pay for unnecessarily and where the security gaps are. Fixed price, usefulness guarantee.
Security remediation and deployments
Entra ID, Conditional Access, Intune, Defender and Zero Trust. Findings fixed in an agreed order, primarily with the licenses you already have.
Azure and hybrid infrastructure
Connecting on-premises and cloud, Azure foundations and migrations from servers to the cloud. Focus on manageability and security.
Training and advisory
Training for your IT team by a Microsoft Certified Trainer, and advisory for IT leadership in the middle of Microsoft's constant change.
Who are the services for?
I work with organizations of 10–500 people that use Microsoft 365 and where someone looks after it alongside their day job. My contact is typically the head of IT, the CFO or the CEO who wants a fact-based picture of the environment before deciding what to do.
- No in-house IT staff; a partner runs the environment. You want an independent view of what is actually being done about security.
- There is an IT team, but it is busy with day-to-day operations. There is no time for a systematic security review.
- A major customer, an insurer or the board has started asking about your security posture, and the answer is not ready.
Why choose an independent Microsoft 365 consultant?
Independent means the result of the review is not tied to any vendor or license sale: I tell you what the environment needs, even if the answer is "nothing". Many M365 environments have been built over the years by several hands. A managed service provider has a blind spot for its own work, and few will bill you for finding savings in their own invoice. I have no reason to recommend anything you do not need.
The need is not theoretical. In 2025 the Finnish National Cyber Security Centre received over 330 reports of compromised Microsoft 365 accounts in Finnish organisations, and many of them were accounts with multi-factor authentication turned on. Current phishing techniques bypass ordinary app-based MFA, so the question is whether phishing-resistant authentication, Conditional Access and device management are in use, and whether they have been finished. These are rarely missing from the licence, but they are often half-configured.
I review the environment, explain the findings in plain language and give you the list to fix them. The fixes can be done by your own IT, your current partner or me. Read what clients say about the Health Check.
How the work proceeds
- Review.
Facts first: what is in the environment, what is being paid for and where the gaps are. The Health Check does this in a week; for a smaller matter, a conversation is enough.
- Recommendations.
A prioritized list of what to do first and what does not need doing at all. Written so that management understands it without an interpreter.
- Implementation.
Your own IT, your current partner or me. You decide, and the work is done primarily with your existing licenses.
Who does the work?
I am Jami Susijärvi. I founded Wolflake Consulting and do the work myself. Over 25 years in ICT, most of it with Microsoft infrastructure, security and identity. 28 Microsoft certifications, Microsoft Certified Trainer, office in Tampere, Finland.
More about me and the companyFrequently asked questions about Microsoft 365 security and the Health Check
How do I find out whether we are paying for Microsoft 365 licenses we do not need?
Licenses are reviewed user by user and compared with actual use: who has a license that is not used, and who has a higher tier than their work requires. The M365 Health Check does this in one week and gives a savings estimate in euros.
Why choose an independent consultant alongside our current IT partner?
The health check is done at a fixed price, and its result does not affect what I sell. Findings and savings are reported as they are, including when they land on your current partner's invoice. Your partner maintains, I review, and either of us can do the fixes.
Do you only work in Tampere?
The office is in Tampere, but most of the work is done remotely and clients are located across Finland. In the Tampere region I am happy to meet on site.
What does the M365 Health Check include and how long does it take?
In one week you get prioritised security findings, a license savings estimate in euros and a remediation path that management understands without a translator. Fixed price and a usefulness guarantee. The full description is on the health check page.
Can you also fix the findings?
Yes. Fixes are done by your own IT, your current partner or me, primarily with the licenses you already have. You decide who does what.
What size of organisation are the services for?
Organisations of 10 to 500 people that use Microsoft 365 and where someone looks after it alongside their day job. The typical contact is the head of IT, the CFO or the CEO.
More questions and answers on the health check page.
Get an honest assessment of whether you need to do anything at all
Tell me what concerns you about your environment. I will tell you straight whether it needs action and what that would take. If it does not, I will say so. Free, no commitment.