What AI and SaaS is running inside your Microsoft 365?
Connect Microsoft 365 or Google read-only, or drop a CSV. In minutes we surface the shadow AI tools your team connected, risky app permissions, security gaps, and the dead licenses you are still paying for. Then we price the fix.
Read-only accessCSV runs in your browserNo signup, no card
SaaS Auditor
License · Spend · Shadow IT
Microsoft 365 / Google / SaaS user export - license waste, Shadow IT, security
Your statement never leaves your browser. Parsing and matching run entirely on your device - we only see vendor names and totals, never your transactions.
Pulls ~12 months of expense transactions read-only. Runs server-side (OAuth tokens can't run in your browser); we read vendor names + amounts, never store your ledger.
Processed in your browser. We only read app names and scopes - never your users.
One estate. Three lenses. One report.
No single export sees your whole SaaS estate. Run any lens below and SaaS Command merges them into the report on the right - one footprint, one score, one AI brief, one CFO-ready PDF.
Estate intelligence
PreviewSaaS Command Report
Recoverable, annualised
€18,400/yr
47
Apps
6
AI tools
3
Lenses
Merged from every lens you run
ITSailorWhy this tool exists
“Anyone can buy E5 licences. The skill is knowing when E3 plus the right Intune policy is the better answer.”
How it works
Upload CSV
Microsoft 365 Admin Center or Google Admin export. We auto-detect which platform it came from - no manual switch required.
Classify & price
Blocked, inactive >90 days, unlicensed, external guests, and shared mailboxes. Each account is priced against the real SKU retail table (E3, Business Premium, Workspace Plus, …).
Export & deprovision
Get a branded PDF summary plus a CSV with the exact list of users and SKUs to remove - ready for IT to action in one pass.
You cannot govern the AI you cannot see.
Your team already uses AI tools nobody signed off - connected to mail, files, and calendars. Every AI policy, audit, and insurance questionnaire starts with the same artifact: an inventory. This tool builds it in minutes.
Discover every AI tool
35 named AI vendors looked for across OAuth grants, your ledger, SSO, and the browser - deduped into one register.
See what data it touches
Each AI app is risk-scored by the permissions it actually holds - mail, files, directory - with a revoke list for IT.
Keep it governed
Tenant Monitor re-scans on your cadence and alerts you when a new AI tool appears or gains risky access.
See exactly what the Auditor delivers
One free scan puts all of this in front of you. Tenant Monitor keeps it live in your dashboard and inbox. Every shot below is a real, shipped surface.
From one free scan
The estate, laid bare
Connect Microsoft 365 or Google read-only, or drop a CSV. In minutes you see the shadow AI your team connected, your live security posture, and exactly what your licensing should cost.
Every OAuth grant your staff approved, scored by permission risk. Export the revoke list for IT.
68%
MFA-capable
2
Admins no MFA
143
Users assessed
€18,400
Now
€2,140/mo
Optimized
€1,690/mo
Your estate priced against real Pax8 wholesale, not an estimate. The number nobody else gives you free.
What Tenant Monitor adds
A living service, not a one-off
Tenant Monitor re-scans on your cadence and only speaks up when posture drifts or a renewal approaches. The report becomes a card in your dashboard, an alert in your inbox, and a monthly PDF for finance.
Your estate is being watched
Cadence
Monthly
Last scan
1 Jun 2026
Next scan
1 Jul 2026
Secure Score
48%
2 admins without MFA at last scan.
ITSailor monitoring: 1 more admin without MFA
Posture change detected
2 changes since your last scan
Estate Intelligence
SaaS Command Report
Recoverable, annualised
€18,400/yr
47 apps · 3 lenses · 6 risks
Prepared for your CFO
ITSailorThe artifacts you export
The dashboard is the living view. These are the documents you hand to a CFO, an auditor, or - if you run an MSP - your own client. Each one is generated from your real scan.
AI governance
EU AI Act inventory register
Every AI tool in the estate, classified and owned - the register an assessor asks for first.
- Governance priority per tool: act-now, review or monitor
- Data posture, owner, DPA status and the gaps to close
- Evidence for the EU AI Act, NIST AI RMF and ISO 42001
- High-risk tier depends on your use - confirmed per tool, never claimed
Executable
Remediation runbook
The findings become a script you run in your own tenant - not a to-do list you retype.
- Idempotent PowerShell, preview by default
- Add -Apply to execute the bulk steps
- Right-size licenses and revoke risky OAuth grants
- A readable .md runbook ships alongside for review
For MSPs
White-label client report
The monthly posture report an operator mails a client - under their own brand, without building a deck.
- Posture, recoverable spend and what changed this month
- Your logo and brand colour, not ours
- One report per tenant across the Fleet
- Recommended actions the client can act on
Free to scan. Pay to keep it watched.
The scan and the full report are free. Tenant Monitor turns it into a living, monitored estate. Move the licensing to us and the optimization is done for you.
Audit
The free scan
Free
no signup · one-off
- All 4 discovery lenses
- SaaS Command report + score
- AI Command Brief
- PDF + CSV exports
Tenant Monitor
Managed monitoring
€119/mo billed annually
billed annually · save 20%
- Everything in Audit
- 30-day money-back guarantee
- Scheduled re-scan + drift alerts
- Renewal alerts (90 / 30 / 7 days)
- Slack / Teams alerts
- Monthly Command report
Optimize
CSP, done for you
Scoped
transparent resale margin
- Everything in Tenant Monitor
- Move licensing to our CSP
- Consolidated billing
- Locked annual pricing
Remediate
Hands-on
From €499
workshop or scoped
- Architecture & Security workshop
- Exit Kit handover
- Bespoke right-sizing
Prices excl. VAT. VAT is calculated at checkout.
Audit vs Tenant Monitor, line by line
Every row is a shipped capability. Audit is the free scan; Tenant Monitor keeps it running.
Compare in detail
Audit
Free
Tenant Monitor
€119/mo
SaaS discovery across 4 lenses
Users, spend, SSO, or a live Microsoft 365 connect, deduped into one estate.
Shadow IT + Shadow AI detection
Third-party OAuth apps and 35 named AI vendors, scored by scope risk.
Shadow IT triage + revoke list
Keep, revoke, or ignore each app, then export the revoke list for IT.
Dead, inactive + duplicate licenses
Blocked, never-signed-in, and overlapping suites, priced against retail.
Spend by category + run-rate
Ledger rollup into categories with an annualised run-rate.
Editable contract register
Vendor, category, annual cost, renewal date, owner, auto-renew.
Renewal radar (90-day window)
Upcoming auto-renewals ranked by urgency and at-risk spend.
Renewal email alerts (90 / 30 / 7 days)
Scheduled heads-ups before each renewal so nothing auto-renews unseen.
Annual footprint + recoverable spend
Total committed cost per year and the hard recoverable number.
Exports: PDF + CSV, every lens
Branded report plus raw CSV for users, spend, SSO, and Command.
MFA, Conditional Access + admin posture
MFA coverage, CA policies, legacy auth, and admins without MFA.
Risky sign-ins + Microsoft Secure Score
Live Entra risk detections and your tenant Secure Score.
DORA / NIS2 / ISO 27001 gap map
Live signals mapped to control families and frameworks.
Copilot readiness check
Identity prerequisites plus the oversharing gate before rollout.
SaaS Command: unified estate + score
One deduped inventory and a visibility, cost, and security score.
AI Command Brief (Claude)
A grounded, prioritised executive brief in founder voice.
CFO-ready branded PDF
Designed report with the headline figure, risks, and roadmap.
Exact CSP / Pax8 price benchmark
Your estate priced against live Pax8 wholesale, not an estimate.
Scheduled re-scan (weekly / monthly)
We re-scan your tenant on your cadence, hands-off.
Posture drift alerts
Email only when a real regression appears, not on routine changes.
Slack / Microsoft Teams alerts
Pipe drift and renewal alerts into your team channel.
Monthly Command report delivered
A fresh CFO-ready report in your inbox every month.
Right-size the licences once, then keep them that way.
A single scan tells you what today looks like. What changes the bill is someone reading the same numbers every month and acting on the ones that moved.