Every tenant on your standard.
Every single day.
TenantForge continuously compares all your Microsoft 365 and Intune tenants against your baseline. Drift becomes visible, exceptions get an owner, and remediation is one click - instead of a hundred admin centers.
No credit card required · No per-user or device pricing · Cancel monthly
1 baseline for your entire client book
Entra ID
Exchange Online
Microsoft Defender
Microsoft Intune
SharePoint
Microsoft Teams
Microsoft Purview
Predictable MSP pricing
Full control, priced for your client book.
TenantForge was built by technicians from several MSPs who saw the same problem every day: a hundred tenants, a hundred small deviations, zero overview. Not a product company looking at an MSP problem from the outside - a tool born on the MSP shop floor.
And thanks to AI-assisted development, we now build in weeks what used to take years. We pass that speed on: one flat monthly fee, no per-tenant commitment. Good tooling should be within reach of every MSP - not just those with enterprise budgets.
Features
Designed for action, not observation..
An MSP technician’s job is moving through many tenants quickly - not dwelling on one. Every feature is designed around that.
Baselines & drift
One yardstick, measured every day
Define your standard once. TenantForge checks every tenant against it daily and reports exactly which setting drifted - down to the value level.
Multi-tenant comparison
100 tenants, one glance
No more hundred browser tabs of admin centers. Your entire client book in one triage screen, sorted by what needs attention.
Remediation
See it. Click it. Fixed.
Found a deviation? Push the baseline value back to the tenant in one click - with role checks, so only authorized people can deploy.
Real MFA
See who MFA really protects
TenantForge evaluates each user’s MFA registration, Security Defaults, and the effective scope of Conditional Access policies together - including key Microsoft 365 service categories. See who is protected, where exclusions create gaps, and who could still sign in without enforced MFA.
Entra ID Groups
No silent changes to an exclusion group
Choose sensitive Entra ID groups to monitor, such as an exclusion group in Conditional Access. TenantForge records who is added or removed and can alert selected colleagues by email and in the app.
External Sharing
Know what is still open to the outside
Get a central per-tenant view of externally shared SharePoint and OneDrive files and folders: who can access them, through which link type, and until when. The inventory refreshes every six hours and on demand, keeping external access in view.
Exceptions
Deviating is fine - with a name and a ticket
Some customers deviate on purpose. Record who, why, and which ticket. That keeps an exception a decision, not a forgotten risk.
Secure Score trends
Prove your value, month after month
Show each customer how their security posture evolves. The strongest story in your quarterly review is a rising line.
Partner Center & GDAP
Onboard customers from one view
Connect Microsoft Partner Center to TenantForge and automatically pull in your customer list with GDAP status. Onboard customers with an active GDAP relationship from the same view without retyping tenant IDs; continue through Microsoft admin consent when required.
Security
Security is not a feature. It’s the foundation.
You trust TenantForge with the compliance data of your entire client book. That’s why every layer - from login to deploy button - is built on one principle: nothing happens anonymously, and you stay in control of your data.
Self-hosted option
Run TenantForge on your own infrastructure. Customer data never leaves your environment - you decide where it lives.
Entra ID SSO
Sign in with your own Microsoft identity, using the MFA and Conditional Access rules you already have.
Audit log
Every sync, deploy, and accepted exception is recorded: who, what, when. Nothing happens anonymously.
Roles & permissions
Owner, Admin, Engineer, Read-only. Viewing is broad - deploying to a customer tenant requires the right role.
Product
From sync to report, all in one console.
Connect customer tenants individually or pull in your customer list with GDAP status through Partner Center. TenantForge syncs policies read-only through Microsoft Graph and shows within minutes where your client book deviates from your standard.
Pricing
Choose the plan that grows with your MSP.
Priced per managed customer tenant, never per user or device. SaaS hosted by us or deployed in your own Azure subscription.
Team
For growing MSPs
10 tenants included
Scale
For larger client books
50 tenants included
All prices excl. VAT · 14-day trial with up to 3 tenants · No credit card required · Cancel monthly.
Comparison
How does it compare?
Fair is fair: CIPP is a strong open-source project. The difference is the workflow - TenantForge is built around one cycle: baseline → drift → exception → remediation.
Comparison of workflow focus, based on public documentation - not a quality judgment of other tools.
FAQ
Frequently asked questions
Get a grip on your tenants today.
14 days free. Fully functional. Your first drift overview within ten minutes.