Simple, transparent pricing

Start free, upgrade when you need more. All plans include a 7-day free trial of Pro features.

Cheaper than the breach. Faster than the audit.

7-day free trial on all plans. No credit card. No procurement call.

MonthlyAnnualSave up to 20%

Essential

83/month

Billed annually (€996/year)

You run M365 alone at a 100 to 250 person company and just need to know what is drifting.

  • Tenant scanned every 15 minutes
  • Teams alerts the moment something changes
  • Plain-English explanation of every finding

No credit card required

RECOMMENDED

Pro

239/month

Billed annually (€2868/year)

You are the IT team at a 250 to 500 person company and want one-click fixes plus a paper trail when someone asks who changed what.

  • Everything in Essential
  • One-click fix on every finding, from the alert
  • Full change history: who changed what, when, and why

No credit card required

Pro Plus

499/month

Billed annually (€5988/year)

Two-person IT team at a 500 to 1500 person company, or you inherited a second tenant from an acquisition and need both watched.

  • Everything in Pro
  • Auto-fix the routine drift without you clicking
  • Up to 3 tenants on one bill (handy after an M&A)

No credit card required

FAQ

Yes. We built this for the IT generalist who runs M365 alongside everything else, not for a security specialist. Every alert is written in plain English ('Someone added a new Global Admin called John Smith at 14:32') with a one-click fix. No CIS benchmark numbers, no NIST control IDs, no security jargon you have to Google.
No. Read-only by default. When you turn on fixes, you preview every change before it happens, and there's a 24-hour rollback on everything we do.
Read-only Graph permissions to see your config. Write permissions only if you want auto-fix, and you pick exactly which categories you trust us to touch. No tenant-wide write access ever.
Every change is reversible with one click for 24 hours. High-risk actions (anything touching Global Admin, Conditional Access, or domain settings) always require your approval. Auto-fix is opt-in per category.
Encrypted at rest and in transit. GDPR compliant. Data stays in the EU. We only store config metadata, never user emails, files, or messages.
No agent, no script, no helpdesk ticket. Sign in with your M365 admin account, grant read-only permissions, the first scan finishes before your coffee gets cold.

Still have questions? Just ask