Pricing
Run a full M365 security audit in 10 minutes — get a severity-ranked report and act on the findings.
One $99 audit credit runs a complete Entra ID & Microsoft 365 benchmark against any tenant and produces a client-ready PDF — no subscription, no seats, no surprises. Add white-label once for $50 to put your own brand on every report.
What you'll pay
$99 per audit credit — one-time
One credit = one full tenant audit + PDF report. Buy one or many; credits never expire.
$50 white-label — one-time, optional
Pay once to brand every report with your logo. Applies to all past and future audits.
No subscription, no seats, no recurring charges. You're only charged when you buy a credit.
- Scope
- One full tenant audit — 100+ checks across identity, access, and configuration.
- Time to report
- Report generates in minutes after consent — most tenants finish in under 10.
- Re-runs
- Each credit covers one audit run. Credits never expire — buy ahead and re-audit whenever you need.
You'll create an account at checkout — credits are added to it instantly so you can run your first audit right away.
Still comparing options? See everything an M365 security audit checks.
How it works
- 1
Buy a credit
Pay $99 via Stripe. No subscription — the credit lands in your account instantly.
- 2
Connect & scan
Grant read-only consent to the target tenant. The audit runs the full benchmark suite automatically.
- 3
Deliver the report
Download a severity-ranked PDF with remediation steps — ready to send to the client.
Audit Credit
Pay per tenant — buy only what you use
One comprehensive M365 security audit against any tenant. Full PDF report with remediation guidance.
- Full M365 security benchmark suite
- Severity-ranked PDF report
- CIS, CISA SCuBA, EIDSCA coverage
- Historical trend tracking
- Direct admin portal links
White-Label Add-on
Pay once — applies to every audit you ever run
Permanently enables white-label branding on all your reports — your logo, your firm name. One-time purchase.
- Your logo on every page of every report
- Zero M365Audit branding
- One-time purchase — never pay again
- Works with all past and future audits
Requires at least one audit credit to use.
Built for MSPs & MSSPs
Run audits across every client tenant and bill per engagement — no per-seat licensing.
Read-only & secure
Consent-based read-only access. We never change tenant settings. Payments handled by Stripe.
Credits never expire
Buy in advance for a project, use them whenever. No subscription clock running.
Billing, answered
- How am I charged?
- One-time charge per credit via Stripe. No subscription, no recurring billing — you're only ever charged when you buy.
- Can I get a receipt or invoice?
- Yes — Stripe emails an itemized receipt after every purchase, suitable for expensing or client rebilling.
- Can I buy multiple credits at once?
- Yes — adjust the quantity at checkout. Credits never expire, so stocking up for a project is safe.
- What if an audit fails to run?
- A credit is only consumed on a successful audit. If a run fails, your credit stays intact — reach out and we'll make it right.
Pricing FAQ
- Is the audit safe to run against production?
- Yes. Every check is read-only and reads configuration state through the Microsoft Graph API. There's no port scanning, no network probing, no traffic to your endpoints, and no write permission held at any point. Running it during business hours is fine.
- What permissions do you need, exactly?
- Read-only application permissions: Organization.Read.All, Policy.Read.All, RoleManagement.Read.Directory, AuditLog.Read.All, and specific read scopes for Exchange Online and Teams. The full list appears in the consent prompt before you approve, and again in the preflight check before every run.
- What happens to our data after the audit?
- Findings are stored so you can trend repeat audits of the same tenant, and are accessible only to your account. You can delete your audit data at any time from account settings. We never store mailbox or file contents — only configuration state.
- How do I connect a tenant?
- A Global Admin clicks a consent link and approves the read-only permissions. No credentials are shared, no modules installed, no service principal to create. About 30 seconds.
- How long does an audit take?
- Most tenants finish in 5–15 minutes.
- What does $99 actually get me?
- One complete audit of one tenant — every check across all five benchmarks — and the full PDF report, plus that tenant's findings retained for trend comparison on future audits.
- Why pay when open-source test suites exist?
- You're paying for everything around the checks: the multi-tenant consent and onboarding flow, the preflight permission check that stops silent failures, the cross-tenant dashboard, the trend history, and a client-ready report you don't rebuild by hand. Doing it yourself is a few hours per tenant the first time and an hour or two every time after. At $99 the question is just whether that time is worth more than the fee.
- Can I put my own branding on the report?
- Yes — $50 one-time enables white-label permanently across every report on your account.
- Do credits expire?
- Never.