EWS Sunset Readiness Assessor
adaQuest · Cybersecurity & IT
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 8 captures on record
What the publisher says
As described on Microsoft Marketplace.
EWS Sunset Readiness Assessor is a security-focused, read-only identity and application risk assessment agent that helps organizations prepare for Exchange Web Services (EWS) retirement. It identifies and prioritizes integrations that may rely on EWS, reduces legacy exposure, and accelerates a safer transition to Microsoft Graph through an evidence-based readiness report.
Inputs (what data the agent consumes)
Show the rest of the publisher’s description (32 more lines)
The agent consumes Microsoft Entra signals (via the Microsoft Entra plugin) such as:
- Applications and service principals inventory and details
- Sign-in logs (app/service principal activity indicators)
- Audit logs (directory and app-related events)
- App permissions and granted consents (permission footprint for integration posture)If some signals are unavailable due to permissions or retention limits, the agent runs best-effort and explicitly reports data gaps and confidence impact.
Tasks (what the agent performs)
- Enumerates applications and service principals relevant to integration assessment
- Correlates sign-in and audit telemetry with app identities and permission grants
- Classifies dependency likelihood as Confirmed / Likely / Suspected using strict evidence rules
- Calculates exposure scoring and readiness prioritization (tenant-safe, bounded analysis)
- Produces retirement impact insights (what is most likely to break if EWS is disabled)
- Builds a Graph-first migration backlog with prioritized remediation steps
- Documents telemetry gaps and confidence drivers for auditability
Outputs (what results the agent generates)
A single consolidated readiness report (structured for both technical teams and leadership), including:
- Executive summary with confidence and top risks
- Observed applications/service principals and their classification (Confirmed/Likely/Suspected)
- Exposure scoring and prioritization drivers
- Retirement impact simulation (confirmed and likely affected integrations)
- Graph-first migration plan (actions, effort, owners, risk)
- Telemetry notes & gaps (missing signals, failures, confidence impact)
Estimated SCU consumption
Estimated consumption for a full assessment run:
- Small environments: ~ 1.0 SCU per run
- Mid-size environments: typically ~ 1.6 – 2.5 SCUs per run
- Enterprise environments: typically 3 - 5.0 SCUs per run
Actual SCU usage varies primarily with the number of applications/service principals, sign-in/audit log volume in the lookback window, and how many entities require deeper enrichment during the assessment.
---
Change log
Version: 1.0.2
- Updated the agent setup experience by adding the assessment focus setting required for guided execution.
- Improved scope handling for EWS readiness assessment, Microsoft Entra application analysis, permissions review, sign-in and audit activity, and Microsoft Graph migration planning.
Preview
5 images
Agent build and provenance
Sign in to see the provenance.
The evidence, the layer-by-layer tracing, the risk basis, and the cross-marketplace links are open to signed-in accounts.
Sign inCompliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Plans and pricing as listed
1 listedSources
Publisher resources
3 linksEvidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.