Essentials
- 3 modules: Identity, Posture, OAuth apps
- Daily scheduled scans
- 3 on-demand scans per day
- 90-day history
- Admin-only dashboard
- Admin remediation (revoke shares, fix permissions)
- Up to 50 users
Workspace Security
- 5 modules: Identity, Posture, OAuth apps, SharePoint, OneDrive
- Daily scheduled scans
- 20 on-demand scans per day
- 1-year history
- Admin-only dashboard
- Weekly email digest
- Critical-finding alerts within 1h
- Saved executive reports + PDF
- Public share links for auditors
- Deep scan for SharePoint & OneDrive
- Excel export (SharePoint & OneDrive)
- Admin remediation (revoke shares, fix permissions)
- Up to 200 users
Complete
- All 7 modules: SharePoint, OneDrive, Copilot, Identity, Email, OAuth apps, Posture
- Daily scheduled scans
- Unlimited on-demand scans
- 3-year history
- User self-dashboard
- Weekly email digest
- Critical-finding alerts within 1h
- Saved executive reports + PDF
- Public share links for auditors
- Deep scan for SharePoint & OneDrive
- Excel export (SharePoint & OneDrive)
- Admin remediation (revoke shares, fix permissions)
- Up to 500 users
For partners & custom deals
MSP Partner is for IT service providers managing multiple customer tenants — one bill, unlimited tenants, white-label. Enterprise is for 500+ seats, bespoke DPAs, on-prem options, or procurement that needs a signed contract.
MSP Partner
- All 7 modules: SharePoint, OneDrive, Copilot, Identity, Email, OAuth apps, Posture
- Daily scheduled scans
- Unlimited on-demand scans
- 3-year history
- User self-dashboard
- Weekly email digest
- Critical-finding alerts within 1h
- Saved executive reports + PDF
- Public share links for auditors
- Deep scan for SharePoint & OneDrive
- Excel export (SharePoint & OneDrive)
- Admin remediation (revoke shares, fix permissions)
- White-label (your brand on customer reports)
- Unlimited licensed users
Enterprise
- All 7 modules: SharePoint, OneDrive, Copilot, Identity, Email, OAuth apps, Posture
- Daily scheduled scans
- Unlimited on-demand scans
- 3-year history
- User self-dashboard
- Weekly email digest
- Critical-finding alerts within 1h
- Saved executive reports + PDF
- Public share links for auditors
- Deep scan for SharePoint & OneDrive
- Excel export (SharePoint & OneDrive)
- Admin remediation (revoke shares, fix permissions)
- White-label (your brand on customer reports)
- Unlimited licensed users
Every feature, side by side
The same table we show inside the app — there's no surprise paywall.
| Essentials | Workspace Security | Complete | MSP Partner | |
|---|---|---|---|---|
| Security modules | ||||
| SharePoint | — | ✓ | ✓ | ✓ |
| OneDrive | — | ✓ | ✓ | ✓ |
| Copilot | — | — | ✓ | ✓ |
| Identity | ✓ | ✓ | ✓ | ✓ |
| — | — | ✓ | ✓ | |
| OAuth apps | ✓ | ✓ | ✓ | ✓ |
| Posture | ✓ | ✓ | ✓ | ✓ |
| Cadence & history | ||||
| Daily scheduled scans | ✓ | ✓ | ✓ | ✓ |
| On-demand scans / day | 3 | 20 | Unlimited | Unlimited |
| History retention | 90 d | 1 yr | 3 yr | 3 yr |
| Admin & user experience | ||||
| User self-service portal | — | — | ✓ | ✓ |
| Deep scan (SharePoint & OneDrive) | — | ✓ | ✓ | ✓ |
| Excel export (SharePoint & OneDrive) | — | ✓ | ✓ | ✓ |
| Admin remediation (revoke shares, fix permissions) | ✓ | ✓ | ✓ | ✓ |
| Bulk actions | ✓ | ✓ | ✓ | ✓ |
| Saved executive reports + shareable links | — | ✓ | ✓ | ✓ |
| Public share links for auditors | — | ✓ | ✓ | ✓ |
| Weekly email digest | — | ✓ | ✓ | ✓ |
| Critical-finding alerts (1h) | — | ✓ | ✓ | ✓ |
| Teams alerts | — | — | ✓ | ✓ |
| Multi-tenant console (MSP) | — | — | — | ✓ |
| White-label | — | — | — | ✓ |
Can I switch plans later?
Yes — anytime, self-serve. Upgrades are prorated; downgrades take effect at the end of your current billing period.
What does "2 months free" mean exactly?
Annual billing is priced at 10× the monthly rate, so you pay for 10 months and get the year — 2 months free. Same product, same modules, same support; just a year-long commitment instead of month-to-month.
What happens after the 14-day trial?
Your tenant goes into read-only mode — existing reports stay visible but new scans pause until you pick a plan. Nothing is deleted.
Do you store our data?
Only SAFE metadata — booleans, counts, finding IDs. Never URLs, message bodies, tokens, or raw content. Everything sensitive is re-fetched from Microsoft Graph at display time.
What's covered by "licensed users"?
The count is your Microsoft 365 assigned licences — the people the scanner actually inspects. External guests and shared mailboxes don't count.
Need something bigger?
Enterprise = custom scope, signed DPA, dedicated onboarding. Write to [email protected].