Pricing
Two tiers, a 7-day Pro trial, and no credit card to start.
Built for small teams to set up themselves: pick a plan, sign in as your Microsoft admin, and scan. No demo to sit through, and no sales call to book.
Basic
Microsoft 365 security, for small teams.
$79/mo, per tenant
Start Basic- Microsoft 365 scans & grade
- Fix plan + step-by-step guidance
- 11 Microsoft 365 attack paths
- Scheduled scans + change tracking
- Read-only access you can verify
- Up to 100 users
Recommended
Pro
Everything — Microsoft 365, Azure, and what’s exposed online.
$199/mo, per tenant
Start 7-day free Pro trial - Everything in Basic, plus:
- 47 Azure cloud checks + 6 Azure attack paths
- Vulnerability Watch — alerts for the tech you run
- External scan — what's exposed online
- Email alerts when a new flaw affects you
- Up to 500 users
Compare every feature.
| Feature | Basic | Pro |
|---|---|---|
| Microsoft 365 scans | ✓ | ✓ |
| Security score + grade | ✓ | ✓ |
| Fix plan + step-by-step guidance | ✓ | ✓ |
| Mark findings as accepted or handled | ✓ | ✓ |
| Microsoft 365 attack paths (11) | ✓ | ✓ |
| Scheduled scans | ✓ | ✓ |
| Change tracking over time | ✓ | ✓ |
| Azure cloud checks (47) | — | ✓ |
| Azure attack paths (6) | — | ✓ |
| Vulnerability Watch (alerts for the tech you run) | — | ✓ |
| Email alerts when a new flaw affects you | — | ✓ |
| External scan — what's exposed online | — | ✓ |
| Read-only access you can verify | ✓ | ✓ |
| User cap (soft fair-use) | 100 | 500 |
Above 500 users, need a custom contract, or want dedicated onboarding support? Talk to us →
FAQ
Questions we get a lot.
What happens after my 7-day trial ends?
Convert to Pro (no interruption — your data stays, scans continue), downgrade to Basic (you keep Microsoft 365 coverage but lose Azure, Vulnerability Watch, the external scan, and Azure attack paths), or cancel (your data stays for 30 days in case you change your mind, then is deleted). No surprise charges — we never bill without explicit consent.
Can I switch between Basic and Pro?
Yes, anytime. Upgrades take effect immediately (prorated for the current period). Downgrades take effect at the end of your current billing cycle so you don't lose features mid-month.
What if I have more than 500 users?
The 500-user cap on Pro is a soft fair-use guideline. If you exceed it, we'll reach out to discuss an enterprise contract — we won't shut off your scans without warning. Or email us upfront if you already know you're above 500 and we'll work with you on pricing.
Do you offer annual billing?
Monthly billing by default. If annual matters for your procurement process, email us — we'll arrange it with the usual ~2-months-free discount.
What's your refund policy?
If you're within 30 days of your first paid month and Tenant Strike isn't a fit, email us — we'll refund the charge, no friction. After that, cancel anytime; we don't refund partial months but you keep access through the end of the billing period.
Can I cancel anytime?
Yes. One click in the dashboard. No phone calls, no retention scripts. Your data stays for 30 days post-cancellation in case you come back.
What data do you keep about my tenant?
Scan results, audit logs of every API call we made into your tenant, and your account / billing info. We never see or store the contents of your files, mailboxes, or chats — only configuration metadata. See the trust page for the full list of API calls + verified read-only manifests.
Will my price go up later?
Your price is locked for the lifetime of your subscription. If the published rate ever moves, existing subscribers stay at whatever they signed up at — indefinitely, as long as the subscription stays active. Sign up at $79 Basic, stay at $79 Basic.
Why is there no free tier?
A free tier we can't support well isn't a favor to anyone. The 7-day Pro trial gives you the full product, free, for long enough to decide. If $79/month doesn't fit your situation (non-profit, tiny shop, student), email us — we're flexible.
How do I prove the read-only claim?
You don't have to take our word for it. The trust page publishes the complete list of everything Tenant Strike reads from your tenant, generated automatically from our code on every release — and our build fails if anything that could make a change ever sneaks in. We also keep a live log of every call we make, so what we did is always checkable against what we claim. Full technical detail is on the trust page.
Start with a scan
See what your Microsoft cloud looks like from the outside.
7-day Pro trial, no credit card. Full Microsoft 365 and Azure coverage, Vulnerability Watch, and all 17 attack paths.