Start with whoever’s worst off
One screen ranks your clients by critical findings and overall score, and shows which tenants haven’t been scanned lately. If a scan couldn’t read something, the cell stays blank. It doesn’t pretend that’s a zero.
Microsoft 365 security for MSPs
Your security
assessment tool,
for every client.
Run the same Microsoft 365 security assessment on every tenant you manage. Tenant Strike does the collecting, ranks your clients by who’s in the worst shape, and gives your techs a fix list for each one.
7 days of Pro · No credit card · Read-only in every tenant
- Clients with criticals
- 3
- Average posture
- 68
- Stale or unscanned
- 1
| Client | Posture | Critical | High | Last scan |
|---|---|---|---|---|
| Woodgrove Financial | never scanned Finish their setup | |||
| Acme Manufacturing | 48/100F-4 | 4 | 11 | 2d ago |
| Contoso Ltd | 68/100D+6 | 4 | 8 | 1d ago |
| Northwind Logistics | 72/100C | 1 | 6 | 3d ago |
| Fabrikam Legal | 84/100B | 0 | 3 | 1d ago |
Watch it work
Eight client tenants,
one console.
1 min 22 sec, narrated: the roll-up ranked by who needs you first, one client’s findings, a fix handed to a tech with a due date, the cross-client queue, and the brief the owner gets.
The time it saves
A tenant review shouldn’t
take a tech all day.
Doing it by hand means working through Entra, Exchange, SharePoint, Intune and Defender, then doing it all again next quarter. Tenant Strike reads those settings for you, on a schedule, for every client.
The same checks for everyone
Every client is measured against the same 140 checks, so results compare from one tenant to the next and don’t depend on which tech ran the review.
One queue for the fixes
Findings become issues you can hand to a tech with a due date. They sit in one queue across all your clients, and a rescan confirms the fix took.
An assessment can cover Microsoft 365, Azure, what’s exposed to the internet and Vulnerability Watch. What you see depends on each client’s Microsoft licenses and the access they grant. See exactly what we check.
What the client gets
Give the owner something
they’ll actually read.
Most clients don’t want a spreadsheet of findings. They want to know what’s wrong, what it’s costing them and what you’re doing about it.
A brief written
for the owner
A plain-language PDF: what to fix first, what they’re spending on unused licenses, and which accounts deserve a question.
Watch the demo for MSPsA way to show
why it matters
Pick a finding and walk the client through how it could turn into a break-in, and where to stop it. It lands better than a severity rating.
Explore Attacker’s ViewHelp with the
insurance form
When the renewal questionnaire arrives, see which answers the scan backs up and which controls still need work. Export a report for the broker.
See insurance evidenceScans repeat on the schedule you set, so the next review shows what changed since the last one.
The business case
A security service you
can put on an invoice.
Partner pricing is per client tenant, per month, and the price per tenant drops as you add clients. What you charge your clients is up to you.
Recurring work, not a one-off
Because the scans run themselves, a regular security review for every client is mostly reading results and deciding what to do. That’s a service you can deliver every quarter.
Findings become quotes
The fix plan puts the work in order, lists the steps and estimates the effort for each one. That gets you most of the way to a quote for the remediation work.
Find what they’re overspending
Each scan estimates what the client pays for licenses nobody is using, such as unassigned seats and licenses still on disabled accounts. It’s a good number to open a review with.
What it touches
It can’t change anything
in a client’s tenant.
Tenant Strike asks for read-only permissions and nothing more, so it has no way to push a bad change across your clients. You make the fixes yourself, with the tools you already use.
See exactly what it reads- Nothing to installIt connects through Microsoft’s APIs. No agents on client machines.
- The client’s admin approves itYou send an invite link. An administrator in that tenant signs in, sees your company’s name and approves the read-only permissions. If you hold an admin account there, that can be you.
- Seats only work in your tenantYour techs sign in with their work accounts. Typing the wrong address into your team list doesn’t give anyone access.
Getting started
Try it on your own
tenant first.
You’ll see exactly what your clients would get. When you’re ready, tell us how many tenants you manage and we’ll quote a partner plan.
Run it on yourself
Start a 7-day Pro trial with no credit card. Connect your own Microsoft 365 and see what it finds.
Tell us about your clients
Email us roughly how many tenants you manage. We’ll send a quote, set up your partner console and help you connect the first few.
Invite your clients
Send each client an invite link. Once their admin approves it, they show up in your console. They don’t need a subscription or a login of their own.
Talk partner pricing or email hello@tenantstrike.com
FAQ
What MSPs usually ask
Do my clients have to sign up or pay you directly?
No. Your partner plan covers the tenants you manage, and your team does the work from your console. A client only gets a login if you decide to give them one.
Can I bill my clients for this?
Yes, that’s the idea. On a partner plan you set your own price and package it however suits your agreements, whether that’s part of a security bundle or a separate quarterly review.
What access do you need in a client’s tenant?
Read-only, through Microsoft’s APIs. We never ask for permission to change settings, and there’s nothing to install on their devices. Every permission and API endpoint we use is listed on our Trust page.
Who has to approve the connection?
An administrator in the client’s tenant. You send an invite link for their verified Microsoft 365 domain. They open it, see your company’s name and approve the read-only permissions. If you hold an admin account in their tenant, you can do it yourself. Each link connects one tenant and expires after 14 days.
Does this replace my RMM or tenant management tools?
No. Tenant Strike doesn’t change anything, so it sits alongside whatever you use to manage and deploy settings. It’s the independent check on that work. It shows you and the client how each tenant is really configured, and confirms a fix after you’ve made it.
How does partner pricing work?
Per client tenant, per month, and the price per tenant drops as you add clients. Email [email protected] with roughly how many tenants you manage and we’ll send a quote.
Your next step
See what it finds
in your own tenant.
Seven days of Pro, no credit card. If it earns a place in your stack, we’ll help you get your clients connected.