Skip to main content
NinjaSecure 365
14-Day Free Trial • Guided 4-Step Self-Service OnboardingZero-Footprint Microsoft 365 & Azure Architecture

Microsoft 365 & Azure Security Posture Plans & Trial Onboarding

CHOOSE DIRECT SINGLE-TENANT ORGANIZATION PLANS OR MULTI-TENANT MSP/MSSP FLEET SUBSCRIPTIONS • PLAIN-ENGLISH CAPABILITY BREAKDOWN

Docs & Trust PortalOnboarding Wizard
Track A • Direct Organization (1 M365 Tenant)/pricing/direct

Direct Internal IT & Enterprise Security Teams

Designed for IT Directors, Systems Administrators, and CISOs securing their own company's Microsoft 365 and Azure tenant. Choose a 30-day one-time audit pass ($499) or continuous daily monitoring & guided remediation ($199/mo annual).

1 Production Tenant • 77 M365 Controls + 14-SKU FinOps✓ Active Track
Track B • MSP / MSSP Partner Fleet (5–100+ Tenants)/pricing/msp

Multi-Tenant Managed Service Providers & vCISOs

Built for MSP engineers and MSSPs managing multiple client tenants. Includes automatic Customer Zero home-tenant pinning, cross-tenant posture & FinOps triage, white-label deliverables, and wholesale-to-retail client resale margins.

5 to 50+ Included Tenants • Multi-Tenant Command CenterSwitch to MSP Track →
Guided 4-Step Plan Selection & 14-Day Trial Onboarding

Step 1 of 4: Select Your Plan Tier

Selected: Direct Client Managed Security & FinOps (1 Tenant) • $129/mo (annual)

1. Select Purchasing Audience Track

2. Billing Commitment

direct-one-time-assessmentOne-Time Audit Pass (30-Day Window)

One-Time Deep Security & FinOps Assessment Pass (1 Tenant)

Single-Tenant 30-Day Audit Pass (Read-Only)

Plain-English IT Summary

Who It's For: Internal IT teams, sysadmins, or compliance officers who need a point-in-time Microsoft 365 security and license audit for a single tenant without a recurring subscription.

What It Does: Connects via read-only Microsoft Entra ID OAuth 2.0, evaluates 77 M365 security controls (CIS v3.1 & CISA SCuBA) plus 14-SKU license waste, and produces board-ready executive deliverables.

Data Collectors: Serverless Microsoft Graph collector (Identity, Conditional Access, MFA, Secure Score, Device Compliance, SharePoint/OneDrive sharing, and License SKU usage).

Operational Mode: Strictly read-only (zero write scopes).

$499one-time pass (30-day audit)
Base Rate: $499 one-time (1 tenant included)
Read-Only + FinOpsPowerShell 7.4 Worker (Shared GHCR)
  • ✓1 Microsoft 365 organization tenant included (30-Day Audit Pass)
  • ✓Strictly Read-Only Assessment Mode (Zero-Footprint OAuth PKCE)
  • ✓77 Canonical Controls (53 Core + 24 CIS M365 v3.1 / CISA SCuBA Gap Controls)
  • ✓Tier 2 Ephemeral Linux Container Worker included for deep EXO v3 / SCuBA / ORCA telemetry
  • ✓FinOps License Waste & Bundle Overlap Evaluator (Shelfware, Blocked & Inactive >90d Users)
  • ✓Regulatory Compliance Crosswalks (CIS v3.1, CISA SCuBA, NIST 800-53, HIPAA, GLBA, CMMC)
  • ✓Executive Markdown Report & 7-Tab Sanitized Excel Remediation Workbook
direct-readonly-single-tenant14-Day Free Trial

Direct Client Security & FinOps Monitoring — Read-Only (1 Tenant)

Continuous weekly read-only M365 & Entra ID posture monitoring, CIS/CISA compliance scoring, and FinOps license waste tracking for a single organization — zero write permissions.

$49/ month (annual)
Base Rate: $49/mo (1 tenant included)
Read-Only + FinOpsContinuous Drift
  • ✓1 Microsoft 365 organization tenant included (+$39/mo per additional affiliate tenant)
  • ✓Strictly Read-Only Assessment Mode (Zero-Footprint OAuth PKCE — zero write scopes)
  • ✓77 M365 & Entra ID Canonical Controls (53 Core + 24 CIS M365 v3.1 / CISA SCuBA Gap Controls)
  • ✓Enterprise Application & OAuth2 Consent Grant Risk Governance (ENTRA-APP-001..005)
  • ✓FinOps License Waste & Bundle Overlap Evaluator (Shelfware, Blocked & Inactive >90d Users)
  • ✓Regulatory Compliance Crosswalks (CIS v3.1, CISA SCuBA, NIST 800-53, HIPAA, GLBA, CMMC)
  • ✓Executive Markdown Reports & 7-Tab Sanitized Excel Remediation Workbooks
direct-managed-single-tenant14-Day Free TrialRecommended for Internal IT

Direct Client Managed Security & FinOps (1 Tenant)

Single-Tenant Continuous Security, FinOps & Guided Remediation

Plain-English IT Summary

Who It's For: Internal IT departments managing 1 Microsoft 365 production tenant that want continuous daily drift monitoring, Exchange/Teams/Defender deep inspection, and guarded remediation.

What It Does: Runs automated daily/weekly posture sweeps, tracks configuration drift, audits M365 license waste, and provides opt-in 1-click user offboarding and RFC 6902 policy deployment with rollback.

Data Collectors: Serverless Microsoft Graph collector + Containerized PowerShell 7.4 Worker (Exchange Online, Defender for Office 365 ORCA, Teams, Purview, and M365DSC).

Operational Mode: Includes both Strictly Read-Only mode and Opt-In Active Remediation (with 5-gate MFA step-up and pre-mutation rollback snapshots).

$129/ month (annual)
Base Rate: $129/mo (1 tenant included)
Read-Only + FinOpsContinuous DriftActive Mgmt + Rollback
  • ✓1 Microsoft 365 organization tenant included (+$99/mo per additional affiliate tenant)
  • ✓Continuous Daily/Weekly Drift Detection with Entra Audit Log Actor Attribution
  • ✓77 Canonical Controls + FinOps License Waste & Bundle Overlap Evaluator
  • ✓Opt-In Active Management Mode (5-Gate Step-Up MFA & Break-Glass Protection)
  • ✓1-Click User Offboarding, License Reclaim & RFC 6902 Baseline Remediation
  • ✓SHA-256 Hash-Chained Tamper-Evident Audit Ledger
  • ✓Executive Markdown Reports & 7-Tab Sanitized Excel Workbooks
Step 2 of 4 • Optional Modular Feature & Worker Add-Ons (Or Skip)

Customize Optional Add-Ons for Direct Client Managed Security & FinOps (1 Tenant) — or Skip Directly to Step 3

worker infrastructure+ ADD

Tier 2 Linux Container Worker (Shared GHCR Runner)

Ephemeral Ubuntu 22.04 PowerShell 7.4 container worker pulled from GitHub Container Registry (GHCR $0 registry overhead) for deep Exchange Online (EXO v3), CISA SCuBA, ORCA & M365DSC telemetry.

Unlocks automated PowerShell telemetry for all 24 CIS M365 v3.1 / CISA SCuBA Gap Controls (EXO, Teams, SharePoint, Defender)
+$24/moGitHub GHCR
worker infrastructure+ ADD

Tier 2 Linux Container Worker (Dedicated Azure ACR Basic Runner)

Dedicated private Azure Container Registry (ACR Basic) + Managed Identity (AcrPull) Linux ACA worker with zero external registry dependency, fast cold-start image caching, and KEDA 0→1→0 queue scaling.

100% Automated 77 Canonical Controls (53 Core + 24 CIS v3.1 / CISA SCuBA Gap Controls) with private Azure backbone isolation
+$39/moAzure ACR
drift monitoring+ ADD

Continuous Daily Drift & Real-Time Alerting

Upgrades weekly baseline scans to automated daily drift sweeps with Microsoft Entra Audit Log actor attribution and real-time webhook/email regression alerts.

Continuous 24-hour regression detection across all 77 Canonical Controls
+$31/mo
branding+ ADD

White-Label CISO Trust Pack & Custom Report Branding

Custom MSP logo, agency color palette, and white-labeled executive Markdown deliverables, 7-tab Excel workbooks, and CISO Security Trust Pack PDF exports.

Applies custom MSP branding across all 77 Controls & 6 Regulatory Compliance Crosswalks
+$39/mo
retention+ ADD

365-Day Regulatory Audit & Snapshot Retention Vault

Extends immutable baseline snapshot and SHA-256 hash-chained audit log retention to 365 days for HIPAA, CMMC 2.0, GLBA, and NIST 800-53 compliance audits.

Satisfies 12-month audit log & configuration history requirements for HIPAA, CMMC 2.0, GLBA, and NIST 800-53
+$29/mo
feature+ ADD

Azure Infrastructure CSPM (CIS Azure v2.1) & Cloud Spend FinOps Pack

Unlocks 28 CIS Microsoft Azure Foundations v2.1 controls (RBAC, Defender for Cloud, Storage, Network NSGs, SQL/KeyVault, Activity Logs, Compute) plus 6-Detector Azure IaaS/PaaS Cloud Waste & Spend Optimization (Unattached Disks, Stopped Not-Deallocated VMs, Idle IPs, Snapshots, Right-Sizing, Hybrid Benefit).

Adds 28 CIS Microsoft Azure Foundations Benchmark v2.1 Controls (AZ-IAM, AZ-DEF, AZ-STR, AZ-NET, AZ-KEY, AZ-SQL, AZ-LOG, AZ-VM) — expanding platform coverage to 105 Total Controls
+$39/mo
MSP Partner Profitability & B2B2C Resale Engine

Interactive MSP Wholesale-to-Retail Margin & Client Resale Calculator

Model your MSP wholesale platform cost against what you bill downstream client tenants for monthly managed security and one-time M365 audits.

$199/client/mo
$499/client
MSP Wholesale Cost (10 Clients)

$199/mo

Effective Wholesale: $19.9/tenant/mo

Net Monthly Recurring Profit

+$1791/mo

Gross Retail: $1990/mo (90% Margin)

1st-Year Total Net Profit

+$26,482/yr

Includes +$4,990 audit fees (10x ROI)