Choose the coverage your business needs.

Convert to Pro (no interruption — your data stays, scans continue), downgrade to Basic (you keep Microsoft 365 coverage but lose Azure, Vulnerability Watch, the external scan, and Azure attack paths), or cancel. Your data is kept for up to 30 days after you cancel or ask us to delete it, so you can come back, and is deleted by day 30. Database backups expire on their separate rolling 30-day schedule. No surprise charges — we never bill without explicit consent.

Yes, anytime, from the billing portal in your dashboard. Monthly plan changes apply immediately and are prorated both ways — upgrades charge only the difference for the rest of the period, and downgrades credit the unused portion of the old plan toward your next invoices, so you never pay for the same time twice. During your trial you can pick the plan you'll land on without affecting the trial itself. Changes involving a yearly plan take effect at your annual renewal — email [email protected] and we'll set it up.

Included with Pro at no extra cost, and it’s in beta. You bring your own AI provider key, so the model usage is billed to you by your provider rather than marked up by us. It’s also off until you turn it on: it uses a second, separate Microsoft app registration that an admin has to consent to, so nothing goes near an AI model until someone deliberately enables it. Its reads are read-only and scoped to configuration metadata. Authentication appears in your Entra sign-in logs under the app name — “Tenant Strike AI Assistant” — sign-in logs identify app access, not every API request. See what it does and where your data goes. Basic doesn’t include it.

Both, on Pro. The external scan is a point-in-time picture; continuous monitoring is what happens in between. We register the public IP addresses you provably own with Shodan Monitor, and get pushed a notification when something changes — a new service or port appears, a database opens to the internet, a TLS certificate expires, or a host starts showing as running known-vulnerable or end-of-life software. You get an email when it fires. We only register addresses you demonstrably control: resources read from your own Azure subscription, the A record for your primary domain, and hostnames under a domain you’ve verified. Addresses behind a CDN or on shared Azure infrastructure are deliberately left out — they’re shared with thousands of unrelated sites, so watching one would mean emailing you about a stranger’s server. It all happens outside your tenant, on what is already publicly visible — and the only thing we hand to Shodan is the IP addresses themselves. See exactly what we register and what we don’t.

The 500-user cap on Pro is a soft fair-use guideline. If you exceed it, we'll reach out to discuss an enterprise contract — we won't shut off your scans without warning. Or email us upfront if you already know you're above 500 and we'll work with you on pricing.

Yes, self-serve: pick yearly at checkout or while on your trial — Basic is $990/yr and Pro is $2,990/yr, two months free versus monthly. Yearly plans renew annually; cancellations and plan changes take effect at your renewal date, and we don't refund mid-term (the 30-day guarantee on your first payment still applies — see the refund policy below). If your procurement process needs a quote, PO, or invoice with ACH instead of a card, email us and we'll arrange it.

Yes. Tenant Strike is listed on the Microsoft commercial marketplace, so you can subscribe on your existing Microsoft billing account instead of paying us by card — the same Basic and Pro plans at the same prices. If your organization has an Azure consumption commitment, a marketplace purchase draws down against it. It also means we arrive as an existing Microsoft vendor rather than a new one, which is usually the shorter path through procurement. You manage and cancel the subscription from the Azure portal, and your Tenant Strike account works exactly the same either way. View our Microsoft listing.

If you're within 30 days of your first payment — monthly or yearly — and Tenant Strike isn't a fit, email us — we'll refund the charge, no friction. After that, cancel anytime; we don't refund partial months or the remainder of a yearly term, but you keep access through the end of the period you paid for.

Yes. One click in the dashboard. No phone calls, no retention scripts. Your data is kept for up to 30 days after you cancel or ask us to delete it, so you can come back, and is deleted by day 30. Database backups expire on their separate rolling 30-day schedule.

Scan results, audit records and available request diagnostics, and your account / billing info. We never see or store the contents of your files, mailboxes, or chats — only configuration metadata. See the trust page for the full list of API calls + verified read-only manifests.

Possibly, eventually — we keep adding to the product and list prices move with it. What we commit to is how: your price never changes inside a term you’ve already paid for, you get at least 60 days’ notice by email before any increase affects you, and you can cancel before it takes effect. No silent uplifts at renewal, and no increase that first shows up on an invoice. If you’re on a yearly plan, an increase can only ever apply from your next renewal.

A free tier we can't support well isn't a favor to anyone. The 7-day Pro trial gives you the full product, free, for long enough to decide. If $99/month doesn't fit your situation (non-profit, tiny shop, student), email us — we're flexible.

The trust page publishes the scanner's API inventory and access requirements, generated from the code and checked during the build. Review these alongside available request diagnostics and audit records to understand the app's activity.