Two tiers, a 7-day Pro trial, and no credit card to start.

Convert to Pro (no interruption — your data stays, scans continue), downgrade to Basic (you keep Microsoft 365 coverage but lose Azure, Vulnerability Watch, the external scan, and Azure attack paths), or cancel (your data stays for 30 days in case you change your mind, then is deleted). No surprise charges — we never bill without explicit consent.

Yes, anytime, from the billing portal in your dashboard. Monthly plan changes apply immediately and are prorated both ways — upgrades charge only the difference for the rest of the period, and downgrades credit the unused portion of the old plan toward your next invoices, so you never pay for the same time twice. During your trial you can pick the plan you'll land on without affecting the trial itself. Changes involving a yearly plan take effect at your annual renewal — email [email protected] and we'll set it up.

Included with Pro at no extra cost, and it’s in beta. You bring your own AI provider key, so the model usage is billed to you by your provider rather than marked up by us. It’s also off until you turn it on: it uses a second, separate Microsoft app registration that an admin has to consent to, so nothing goes near an AI model until someone deliberately enables it. Its reads are read-only, scoped to configuration metadata, and appear in your Entra sign-in logs under their own name — “Tenant Strike AI Assistant” — so you can see exactly what it looked at. See what it does and where your data goes. Basic doesn’t include it.

Both, on Pro. The external scan is a point-in-time picture; continuous monitoring is what happens in between. We register the public IP addresses you provably own with Shodan Monitor, and get pushed a notification when something changes — a new service or port appears, a database opens to the internet, a TLS certificate expires, or a host starts showing as running known-vulnerable or end-of-life software. You get an email when it fires. We only register addresses you demonstrably control: resources read from your own Azure subscription, the A record for your primary domain, and hostnames under a domain you’ve verified. Addresses behind a CDN or on shared Azure infrastructure are deliberately left out — they’re shared with thousands of unrelated sites, so watching one would mean emailing you about a stranger’s server. It all happens outside your tenant, on what is already publicly visible — and the only thing we hand to Shodan is the IP addresses themselves. See exactly what we register and what we don’t.

The 500-user cap on Pro is a soft fair-use guideline. If you exceed it, we'll reach out to discuss an enterprise contract — we won't shut off your scans without warning. Or email us upfront if you already know you're above 500 and we'll work with you on pricing.

Yes, self-serve: pick yearly at checkout or while on your trial — Basic is $990/yr and Pro is $2,990/yr, two months free versus monthly. Yearly plans renew annually; cancellations and plan changes take effect at your renewal date, and we don't refund mid-term (the 30-day guarantee on your first payment still applies — see the refund policy below). If your procurement process needs a quote, PO, or invoice with ACH instead of a card, email us and we'll arrange it.

If you're within 30 days of your first payment — monthly or yearly — and Tenant Strike isn't a fit, email us — we'll refund the charge, no friction. After that, cancel anytime; we don't refund partial months or the remainder of a yearly term, but you keep access through the end of the period you paid for.

Yes. One click in the dashboard. No phone calls, no retention scripts. Your data stays for 30 days post-cancellation in case you come back.

Scan results, audit logs of every API call we made into your tenant, and your account / billing info. We never see or store the contents of your files, mailboxes, or chats — only configuration metadata. See the trust page for the full list of API calls + verified read-only manifests.

Possibly, eventually — we keep adding to the product and list prices move with it. What we commit to is how: your price never changes inside a term you’ve already paid for, you get at least 60 days’ notice by email before any increase affects you, and you can cancel before it takes effect. No silent uplifts at renewal, and no increase that first shows up on an invoice. If you’re on a yearly plan, an increase can only ever apply from your next renewal.

A free tier we can't support well isn't a favor to anyone. The 7-day Pro trial gives you the full product, free, for long enough to decide. If $99/month doesn't fit your situation (non-profit, tiny shop, student), email us — we're flexible.

You don't have to take our word for it. The trust page publishes the complete list of everything Tenant Strike reads from your tenant, generated automatically from our code on every release — and our build fails if anything that could make a change ever sneaks in. We also keep a live log of every call we make, so what we did is always checkable against what we claim. Full technical detail is on the trust page.