Frequently Asked Questions

TrueConfig is a Desired State Configuration (DSC) platform for Microsoft 365 identity and access security. It continuously monitors your Entra ID tenant, detects configuration drift from security baselines, and provides automated or guided remediation.

TrueConfig connects to your Microsoft 365 tenant using read-only Graph API permissions. It scans your Entra ID configuration, evaluates it against industry-standard security baselines (CIS, NIST, etc.), and reports any deviations along with remediation guidance.

Yes. TrueConfig uses read-only permissions by default. Auto-remediation is opt-in, requires explicit approval, and includes safety gates to prevent destructive changes. All actions are logged in a full audit trail.

TrueConfig monitors 55 security controls across 9 categories including privileged access, identity protection, conditional access, MFA, application security, and more.

Yes. TrueConfig supports multi-tenant deployments, allowing you to monitor and manage security across multiple Microsoft 365 tenants from a single dashboard. This is ideal for MSPs and enterprises with multiple environments.