FAQ
Mito: frequently asked questions.
The questions UAE businesses and IT partners ask us most about Mito.
FAQ
Questions we hear most.
Can Mito change anything in my tenant?
No. Mito's app registration has read-only Microsoft Graph permissions and the Global Reader role. It can read configuration; it cannot write, delete or send anything.
Where is my data stored?
In Microsoft Azure UAE North. Assessments run there and results are stored there.
What do you need from us to get started?
A Global Admin runs one setup script (or follows the manual steps in our docs) to create the read-only app registration, then sends us four values. It takes about ten minutes.
How do we stop using Mito?
Delete the Mito app registration from your tenant. Access ends immediately.
How often are we assessed?
Every day. Each run is kept in your history, and Mito highlights new failures and fixes since the previous run.
Which standards do the checks follow?
CIS Microsoft 365 Foundations, CISA ScuBA, EIDSCA and ORCA, with mappings to NIST 800-53. The portal maps results to CIS Microsoft 365 v7.0.0, ISO/IEC 27001:2022 Annex A and the UAE IA Regulation v1.1 as evidence for their technical controls; these frameworks also need non-technical controls. Mappings to Dubai ISR and ADHICS are coming soon.
Is Mito only for large companies?
No. It is built for small and medium businesses in the UAE, and for the IT partners and MSPs who manage them.
How much does it cost?
We have plans for SMEs and for partners managing several tenants. Contact us and we will match a plan to the number of tenants you need.
See your own tenant through Mito.
Book a short demo. We will walk through a real report and answer your security team's questions.
Or email us at mito@virtualpetals.com