Skip to content
SaaS and Shadow AI Audit · Free · No signup

What AI and SaaS is running inside your Microsoft 365?

Connect Microsoft 365 or Google read-only, or drop a CSV. In minutes we surface the shadow AI tools your team connected, risky app permissions, security gaps, and the dead licenses you are still paying for. Then we price the fix.

Start the free scan

Read-only accessCSV runs in your browserNo signup, no card

SaaS Auditor

License · Spend · Shadow IT

Free · No signup
CSV scans run in your browser✓ Cleared - nothing left in this browser

Microsoft 365 / Google / SaaS user export - license waste, Shadow IT, security

or scan your own

Your data stays under your control

CSV and HR roster scans run in this browser. The email form sends your email plus report totals, not the source file.

CSV: browser scanGraph: server scanIdentities masked
Optional: Upload HR roster for ex-employee detection

Upload a CSV from BambooHR, Personio, ADP, or any HR system. Must contain an email column. We'll flag licensed accounts not on your active employee list.

or

Live Microsoft 365 scan

Connect with admin consent. No CSV needed.

Connect Microsoft 365

Runs server-side because OAuth tokens cannot run in this browser. Gets exact signInActivity for higher accuracy than CSV exports.

What you are granting, and why

Live Google Workspace scan

Admin consent, read-only. One-time snapshot.

Connect Google Workspace

Reads users, status, and last sign-in via the Admin SDK Directory API. A Workspace super-admin must consent.

What you are granting, and why

Why this tool exists

Anyone can buy E5 licences. The skill is knowing when E3 plus the right Intune policy is the better answer.
- Michal Jatczak, founder · ITSailor

How it works

Upload CSV

Microsoft 365 Admin Center or Google Admin export. We auto-detect which platform it came from - no manual switch required.

Classify & price

Blocked, inactive >90 days, unlicensed, external guests, and shared mailboxes. Each account is priced against the real SKU retail table (E3, Business Premium, Workspace Plus, …).

Export & deprovision

Get a branded PDF summary plus a CSV with the exact list of users and SKUs to remove - ready for IT to action in one pass.

AI Governance

You cannot govern the AI you cannot see.

Your team already uses AI tools nobody signed off - connected to mail, files, and calendars. Every AI policy, audit, and insurance questionnaire starts with the same artifact: an inventory. This tool builds it in minutes.

Discover every AI tool

35 named AI vendors looked for across OAuth grants, your ledger, SSO, and the browser - deduped into one register.

See what data it touches

Each AI app is risk-scored by the permissions it actually holds - mail, files, directory - with a revoke list for IT.

Keep it governed

Tenant Monitor re-scans on your cadence and alerts you when a new AI tool appears or gains risky access.

What you get

See exactly what the Auditor delivers

One free scan puts all of this in front of you. Tenant Monitor keeps it live in your dashboard and inbox. Every shot below is a real, shipped surface.

From one free scan

The estate, laid bare

Connect Microsoft 365 or Google read-only, or drop a CSV. In minutes you see the shadow AI your team connected, your live security posture, and exactly what your licensing should cost.

Shadow IT + Shadow AI
14 third-party apps6 AI
ChatGPTAIhighrevoke
GrammarlyAImedium
Zoomlow

Every OAuth grant your staff approved, scored by permission risk. Export the revoke list for IT.

Shadow AI, surfaced
Security posture · live Microsoft 365
48%
Secure Score

68%

MFA-capable

2

Admins no MFA

143

Users assessed

critical2 admin accounts can sign in without MFA.
Live security posture
Exact CSP pricing · Pax8
Recoverable / yr live wholesale

€18,400

Now

€2,140/mo

Optimized

€1,690/mo

Your estate priced against real Pax8 wholesale, not an estimate. The number nobody else gives you free.

Exact CSP pricing

What Tenant Monitor adds

A living service, not a one-off

Tenant Monitor re-scans on your cadence and only speaks up when posture drifts or a renewal approaches. The report becomes a card in your dashboard, an alert in your inbox, and a monthly PDF for finance.

Your dashboard
Tenant Monitor Active

Your estate is being watched

Cadence

Monthly

Last scan

1 Jun 2026

Next scan

1 Jul 2026

Secure Score

48%

2 admins without MFA at last scan.

A live posture card
ITSailor · Tenant Monitornow

ITSailor monitoring: 1 more admin without MFA

ITSailorMonitoring

Posture change detected

2 changes since your last scan

critical1 more admin without MFA
mediumSecure Score dropped 48% to 41%
2
Admins no MFA
41%
Secure Score
€420
Monthly waste
Alerts only on drift
PDF

Estate Intelligence

SaaS Command Report

72

Recoverable, annualised

€18,400/yr

47 apps · 3 lenses · 6 risks

Prepared for your CFO

ITSailor
Monthly CFO report
Also includedRenewal heads-ups at 90 / 30 / 7 daysSlack or Microsoft Teams drift alertsSaved contract registerDORA / NIS2 / ISO 27001 gap mapAI Command Brief (Claude)Copilot readiness check
Beyond the dashboard

The artifacts you export

The dashboard is the living view. These are the documents you hand to a CFO, an auditor, or - if you run an MSP - your own client. Each one is generated from your real scan.

AI governance

EU AI Act inventory register

Every AI tool in the estate, classified and owned - the register an assessor asks for first.

CSV
  • Governance priority per tool: act-now, review or monitor
  • Data posture, owner, DPA status and the gaps to close
  • Evidence for the EU AI Act, NIST AI RMF and ISO 42001
  • High-risk tier depends on your use - confirmed per tool, never claimed
Download a real sample

Executable

Remediation runbook

The findings become a script you run in your own tenant - not a to-do list you retype.

PS1 + MD
  • Idempotent PowerShell, preview by default
  • Add -Apply to execute the bulk steps
  • Right-size licenses and revoke risky OAuth grants
  • A readable .md runbook ships alongside for review

For MSPs

White-label client report

The monthly posture report an operator mails a client - under their own brand, without building a deck.

PDF
  • Posture, recoverable spend and what changed this month
  • Your logo and brand colour, not ours
  • One report per tenant across the Fleet
  • Recommended actions the client can act on
Pricing

Free to scan. Pay to keep it watched.

The scan and the full report are free. Tenant Monitor turns it into a living, monitored estate. Move the licensing to us and the optimization is done for you.

Audit

The free scan

Free

no signup · one-off

  • All 4 discovery lenses
  • SaaS Command report + score
  • AI Command Brief
  • PDF + CSV exports
Start free scan
Most popular

Tenant Monitor

Managed monitoring

€119/mo billed annually

billed annually · save 20%

  • Everything in Audit
  • 30-day money-back guarantee
  • Scheduled re-scan + drift alerts
  • Renewal alerts (90 / 30 / 7 days)
  • Slack / Teams alerts
  • Monthly Command report
Start Tenant Monitor

Optimize

CSP, done for you

Scoped

transparent resale margin

  • Everything in Tenant Monitor
  • Move licensing to our CSP
  • Consolidated billing
  • Locked annual pricing
Talk to us

Remediate

Hands-on

From €499

workshop or scoped

  • Architecture & Security workshop
  • Exit Kit handover
  • Bespoke right-sizing
Book a workshop

Prices excl. VAT. VAT is calculated at checkout.

Audit vs Tenant Monitor, line by line

Every row is a shipped capability. Audit is the free scan; Tenant Monitor keeps it running.

Compare in detail

Audit

Free

Tenant Monitor

€119/mo

Discovery & visibility

SaaS discovery across 4 lenses

Users, spend, SSO, or a live Microsoft 365 connect, deduped into one estate.

Shadow IT + Shadow AI detection

Third-party OAuth apps and 35 named AI vendors, scored by scope risk.

Shadow IT triage + revoke list

Keep, revoke, or ignore each app, then export the revoke list for IT.

Dead, inactive + duplicate licenses

Blocked, never-signed-in, and overlapping suites, priced against retail.

Spend by category + run-rate

Ledger rollup into categories with an annualised run-rate.

Contract & license management

Editable contract register

Vendor, category, annual cost, renewal date, owner, auto-renew.

In session
Saved

Renewal radar (90-day window)

Upcoming auto-renewals ranked by urgency and at-risk spend.

Renewal email alerts (90 / 30 / 7 days)

Scheduled heads-ups before each renewal so nothing auto-renews unseen.

Annual footprint + recoverable spend

Total committed cost per year and the hard recoverable number.

Exports: PDF + CSV, every lens

Branded report plus raw CSV for users, spend, SSO, and Command.

Security & compliance (live Microsoft 365)

MFA, Conditional Access + admin posture

MFA coverage, CA policies, legacy auth, and admins without MFA.

Risky sign-ins + Microsoft Secure Score

Live Entra risk detections and your tenant Secure Score.

DORA / NIS2 / ISO 27001 gap map

Live signals mapped to control families and frameworks.

Copilot readiness check

Identity prerequisites plus the oversharing gate before rollout.

Intelligence & reporting

SaaS Command: unified estate + score

One deduped inventory and a visibility, cost, and security score.

AI Command Brief (Claude)

A grounded, prioritised executive brief in founder voice.

CFO-ready branded PDF

Designed report with the headline figure, risks, and roadmap.

Exact CSP / Pax8 price benchmark

Your estate priced against live Pax8 wholesale, not an estimate.

Operate, recurring

Scheduled re-scan (weekly / monthly)

We re-scan your tenant on your cadence, hands-off.

Posture drift alerts

Email only when a real regression appears, not on routine changes.

Slack / Microsoft Teams alerts

Pipe drift and renewal alerts into your team channel.

Monthly Command report delivered

A fresh CFO-ready report in your inbox every month.

Optimize and Remediate include everything in Tenant Monitor, delivered for you. Multi-tenant (Fleet) and a customer browser extension are on the roadmap.

Right-size the licences once, then keep them that way.

A single scan tells you what today looks like. What changes the bill is someone reading the same numbers every month and acting on the ones that moved.