Opsora IT Services and Resources
website·Indexed 31 days ago
https://opsora.io/Opsora provides secure IT services for mid-sized international companies, specializing in Microsoft 365 governance, NIS2 compliance, and AI adoption. Their resources include implementation guides for PacketFence Enterprise NAC, tenant migration checklists, and the Planner Premium MCP server for Microsoft Planner Premium.
What's inside Opsora
- AppControl Cloud is a tool for planning, measuring, and deploying App Control for Business (WDAC). It allows security teams to analyze the impact of a policy against real-world telemetry before enforcement to prevent system instability. The tool operates as a static page in the browser, communicating directly with the user's own tenant via authentication; no data is sent to a vendor-owned backend.
Overview of M365 Files MCP for AI Assistants
M365 Files MCP is a gateway that allows AI assistants to access SharePoint and OneDrive files while enforcing technical restrictions on confidential content. Unlike standard file access where an assistant sees everything the user sees, this gateway filters access based on sensitivity labels and delegated permissions, ensuring a 'fail-closed' security model. It uses the Model Context Protocol (MCP) to provide read access and maintains traceable access logging for audits.Overview of Planner Premium MCP Server
Planner Premium MCP is an MCP server designed specifically for Microsoft Planner Premium. Unlike standard Planner integrations that use the Microsoft Graph API (which cannot access Premium plans, dependencies, resource assignments, or custom fields), this server utilizes Dataverse and the Project Schedule APIs to provide full visibility and write capabilities for Premium plans, schedules, and sprints.Overview of M365 Files MCP for SharePoint and OneDrive
M365 Files MCP provides AI assistants with read access to SharePoint and OneDrive using the Model Context Protocol (MCP). It is designed for organizations that need to technically exclude confidential content from AI access rather than relying solely on policies. The system operates using delegated authentication (acting as the logged-in user) and does not use tenant-wide application permissions. Key capabilities include:
- Read access via Model Context Protocol.
- Filtering based on confidentiality labels (fail-closed approach).
- Delegated login only (no broad app permissions).
- Traceable access logging for audits.
Overview of AppControl Cloud for WDAC deployment
AppControl Cloud is designed for Windows endpoint and security teams to plan, measure, and roll out App Control for Business (WDAC). It allows teams to identify potential application breakages before full deployment and operates without requiring an agent or a third-party backend.Overview of AppControl Cloud for WDAC deployment
AppControl Cloud is a tool for Windows endpoint and security teams to implement App Control for Business (WDAC). It follows an 'analyse first, enforce second' philosophy, allowing administrators to measure the blast radius and coverage of a draft policy against real event data before deployment to prevent system failures.
Key capabilities include:
- Analysis of existing event data from Microsoft Defender for Endpoint (no agent required).
- A rule explorer that provides explainable semantics for policy creation.
- Generation and export of base and supplemental policy XML with built-in linting to prevent boot failures.
- Integration with Microsoft Intune for deployment, featuring change previews and rollback snapshots.
- Drift detection to identify changes in the tenant since the last known state.
- Generation of change-board evidence based on the rule set.
Overview of Planner Premium MCP
The Planner Premium MCP is an MCP server that enables AI assistants to interact with Microsoft Planner Premium. Unlike the standard Microsoft Graph Planner API—which only supports basic plans and cannot access Premium plans, dependencies, resource assignments, or custom fields—this server uses Dataverse and the Project Schedule APIs to provide full access to Premium project data, including schedules, dependencies, and sprints.Custom software development services for missing tools
Opsora provides custom software development for organizations that lack a fitting market solution, have reached the limits of spreadsheet-based workflows, or need to transform an internal tool into a commercial product. The development process utilizes AI-assisted, typed, and tested workflows to deliver usable versions within weeks rather than quarters. All software is deployed in the client's own environment, integrating with existing identity and permission systems (e.g., Entra ID), and concludes with the handover of source code and operating documentation to ensure no vendor lock-in.Design Azure network architecture and connectivity
Set up a network architecture that ensures clear separation of environments, establishes secure connectivity to on-premises sites, and defines controlled paths for third-party access.Manage IT tenant separations and mergers
This service provides a structured approach to tenant migrations (separations or mergers) to ensure deadlines are met without operational disruption. It is specifically designed for scenarios where a fixed contractual date exists, such as corporate acquisitions or divestitures, where access to environments is restricted or time-sensitive.Implement Langdock AI platform for European data compliance
Langdock is an AI platform designed for organizations that need to deploy AI while keeping data within Europe. The implementation focus is on moving beyond a generic 'one-size-fits-all' access model to a structured rollout involving role-based permissions, task-specific assistants, and system integrations.Implement Identity and Zero Trust using Microsoft Entra ID
Opsora provides services to build an identity model based on Microsoft Entra ID. This implementation focuses on automating the onboarding and offboarding processes (Ein- und Austritte), implementing Just-In-Time (JIT) privileged access to ensure rights are granted only temporarily, and ensuring the system is audit-ready without requiring manual rework.