Skip to main content

Self-service apps for your Microsoft 365 tenant

Software that runs in your Microsoft tenant

Our apps check, map and record the security and compliance work in your own Microsoft tenant. They run under your sign-in and keep their results there, so we hold your billing record and nothing else about how you use a Tool.

Sign in with your Microsoft admin account. Payments are not live yet.

SDVOSB certifiedHUBZone certified

The Tools

Each Tool runs in your Microsoft tenant. Buy only the ones you want; your tenant admin switches them on.

  • Governance

    Buy
  • Drift

    Needs Config

    Buy
  • Rollback

    Needs Drift and Config

    Buy
  • Access

    Buy
  • Config

    Buy
  • Bid

    Buy
  • Cloud

    Buy
  • Incident

    Buy
  • Training

    Buy
  • Data

    Buy
  • Device

    Buy
  • Email

    Buy
  • Workspace

    Buy
  • Telemetry

    Buy
  • AI

    Not sold yet

  • Identity

    Not sold yet

  • Media

    Not sold yet

How it works

The three questions a security reviewer asks first.

Where it runs

The apps run in your Microsoft 365 tenant, under your sign-in, and keep their results there. Your data is not sent to us.

What you do

Your tenant admin signs in at the Portal with a Microsoft admin account and switches a Tool on. There is no call to book and nobody from us to wait for.

What it does not do

We cannot tell you how many people use an app you run, which of your accounts are vulnerable or which of your machines are insecure. The apps support CMMC, NIST and ISO 27001 work. They certify no one.

What we hold about you

We hold your billing record and nothing else about how you use a Tool.

That record is who pays us for which Tools. It is nothing beyond what Stripe, our payment processor, holds. We keep no record of whether, how often or how you use a Tool. The exceptions are these:

  • A sign-in session token, only if you choose to share your session across browser tabs.
  • The link between your Stripe billing record and your tenant.
  • A log of the network address and the page asked for on each request.
  • A bug report, which holds only what you type or attach, plus the date and time, the build and the app name. You see all of it before you send.
  • A message or booking you send through this site. Our policy is to delete it after 90 days.
  • A case study that names you, only with your written consent.

The privacy notice covers this site in full.

Proof, not promises

Every code change we make leaves a trail: the ticket, the reasoning, the checks, the deploy.

We would rather show you the repository than a slide. Read how we work and what each Tool costs.

Contracting officers and primes: read our capabilities statement.

Ready to start?

Sign in at the Portal, or send a message and we will reply by email.