Microsoft 365 & Azure Security Posture Plans & Trial Onboarding
CHOOSE DIRECT SINGLE-TENANT ORGANIZATION PLANS OR MULTI-TENANT MSP/MSSP FLEET SUBSCRIPTIONS • PLAIN-ENGLISH CAPABILITY BREAKDOWN
Direct Internal IT & Enterprise Security Teams
Designed for IT Directors, Systems Administrators, and CISOs securing their own company's Microsoft 365 and Azure tenant. Choose a 30-day one-time audit pass ($499) or continuous daily monitoring & guided remediation ($199/mo annual).
Multi-Tenant Managed Service Providers & vCISOs
Built for MSP engineers and MSSPs managing multiple client tenants. Includes automatic Customer Zero home-tenant pinning, cross-tenant posture & FinOps triage, white-label deliverables, and wholesale-to-retail client resale margins.
Step 1 of 4: Select Your Plan Tier
1. Select Purchasing Audience Track
2. Billing Commitment
Assessment & FinOps (Read-Only)
Zero-footprint Microsoft 365 security posture assessments, CIS/CISA scoring, and FinOps license waste optimization.
- ✓Up to 5 Microsoft 365 client tenants included ($15/mo per additional tenant)
- ✓Pinned MSP Home Tenant ("Customer Zero") internal posture workspace
- ✓Strictly Read-Only Assessment Mode (TokenClaimValidator + ReadOnlyEgressGuard)
- ✓77 Canonical Controls (53 Core + 24 CIS M365 v3.1 / CISA SCuBA Gap Controls)
- ✓Regulatory Compliance Crosswalks (CIS v3.1, CISA SCuBA, NIST 800-53, HIPAA, GLBA, CMMC)
- ✓FinOps License Waste & Bundle Overlap Evaluator (Shelfware, Blocked & Inactive >90d Users)
- ✓Executive Markdown Reports & 7-Tab Sanitized Excel Remediation Workbooks
MSP Pro (Drift & Active Management)
Multi-Tenant Active Remediation, Daily Drift & Container Worker Fleet (Up to 15 Tenants)
Who It's For: Growing MSPs and vCISOs standardizing continuous security posture, daily drift alerting, Exchange/Teams deep inspection, and guarded remediation across 15+ client tenants.
What It Does: Unlocks the Cross-Tenant Portfolio Triage Matrix, 1-click user offboarding, license reclaim, RFC 6902 dry-run baseline deployment, white-label client reports, and containerized PowerShell 7.4 collectors.
Data Collectors: Serverless Microsoft Graph collector + Shared Containerized PowerShell 7.4 Worker + White-Label Executive Deliverables.
Operational Mode: Full Opt-In Active Management with 5-gate MFA verification, dry-run diff preview, and 1-click rollback.
- ✓Up to 15 Microsoft 365 client tenants included ($12/mo per additional tenant)
- ✓Everything in Assessment & FinOps (Read-Only)
- ✓Continuous Daily/Weekly Drift Detection with Entra Audit Log Actor Attribution
- ✓Consolidated Cross-Tenant Issue Feed & Portfolio Posture Triage
- ✓Opt-In Active Management Mode (5-Gate Step-Up MFA & Break-Glass Protection)
- ✓User & License Administration Hub + 1-Click User Offboarding & License Reclaim
- ✓RFC 6902 Dry-Run Baseline Diff Preview, Pre-Mutation Snapshots & 1-Click Rollback
- ✓SHA-256 Hash-Chained Tamper-Evident Audit Ledger (management_audit_log)
Enterprise MSSP
Full-Scale MSSP Command Center, Azure CSPM & 365-Day Audit Vault (Up to 50 Tenants)
Who It's For: Established MSSPs and multi-tenant security operations teams requiring dedicated Azure Container Registry workers, Azure Subscription CSPM + Cloud FinOps, and 365-day evidence retention.
What It Does: Combines M365 + Azure infrastructure posture (105 total controls), dedicated Azure ACR worker isolation, automated daily drift detection, and full white-label B2B2C client resale.
Data Collectors: All M365 Graph + Dedicated Azure ACR PowerShell 7.4 Workers + 28 Azure ARM CSPM Controls + Azure Retail Cost Management FinOps.
Operational Mode: Full Opt-In Active Management, Cross-Tenant Baseline Deployment, and 365-Day Immutable Audit Vault.
- ✓Up to 50 Microsoft 365 client tenants included ($9/mo per additional tenant)
- ✓Everything in MSP Pro (Drift & Active Management)
- ✓Tier 2 Ephemeral Linux PowerShell 7.4 ACA Container Workers (>5k Users / >10k Devices)
- ✓Deep Exchange Online (EXO v3), SCuBA, ORCA & M365DSC Telemetry Collection
- ✓365-Day Regulatory Snapshot Retention & Automated Tiered Pruning
- ✓White-Label Executive Reports & Custom CISO Trust Pack Branding
- ✓Dedicated MSSP Priority SLA & Multi-Operator Role Governance (OrgAdmin, Assessor, Auditor, ClientViewer)
Customize Optional Add-Ons for MSP Pro (Drift & Active Management) — or Skip Directly to Step 3
Tier 2 Linux Container Worker (Shared GHCR Runner)
Ephemeral Ubuntu 22.04 PowerShell 7.4 container worker pulled from GitHub Container Registry (GHCR $0 registry overhead) for deep Exchange Online (EXO v3), CISA SCuBA, ORCA & M365DSC telemetry.
Tier 2 Linux Container Worker (Dedicated Azure ACR Basic Runner)
Dedicated private Azure Container Registry (ACR Basic) + Managed Identity (AcrPull) Linux ACA worker with zero external registry dependency, fast cold-start image caching, and KEDA 0→1→0 queue scaling.
Continuous Daily Drift & Real-Time Alerting
Upgrades weekly baseline scans to automated daily drift sweeps with Microsoft Entra Audit Log actor attribution and real-time webhook/email regression alerts.
White-Label CISO Trust Pack & Custom Report Branding
Custom MSP logo, agency color palette, and white-labeled executive Markdown deliverables, 7-tab Excel workbooks, and CISO Security Trust Pack PDF exports.
365-Day Regulatory Audit & Snapshot Retention Vault
Extends immutable baseline snapshot and SHA-256 hash-chained audit log retention to 365 days for HIPAA, CMMC 2.0, GLBA, and NIST 800-53 compliance audits.
Azure Infrastructure CSPM (CIS Azure v2.1) & Cloud Spend FinOps Pack
Unlocks 28 CIS Microsoft Azure Foundations v2.1 controls (RBAC, Defender for Cloud, Storage, Network NSGs, SQL/KeyVault, Activity Logs, Compute) plus 6-Detector Azure IaaS/PaaS Cloud Waste & Spend Optimization (Unattached Disks, Stopped Not-Deallocated VMs, Idle IPs, Snapshots, Right-Sizing, Hybrid Benefit).
Interactive MSP Wholesale-to-Retail Margin & Client Resale Calculator
Model your MSP wholesale platform cost against what you bill downstream client tenants for monthly managed security and one-time M365 audits.
$199/mo
Effective Wholesale: $19.9/tenant/mo
+$1791/mo
Gross Retail: $1990/mo (90% Margin)
+$26,482/yr
Includes +$4,990 audit fees (10x ROI)