Manage every tenant from one place
Back up, compare and restore Microsoft 365 configuration across all your clients
Configuration Backup & Restore
Back up and restore your Microsoft 365 tenant configuration across nine services, with full version history.
- Entra ID, Intune, Exchange, SharePoint, Teams, Purview, Defender, Power Platform and Power BI
- Scheduled backups with per-tenant cron precision
- Preview every change with dry-run restore before it applies
- Restore a single setting or clone configuration across tenants
- Encrypted at rest with AES-256
Property Differences2 differences
| Property | Expected | Actual |
|---|---|---|
| state | enabled | disabled |
| includeRoles | [Global Administrator, Security Administrator] | [Global Administrator] |
Data Backup & Recovery
Protect Exchange mailboxes, OneDrive and SharePoint sites using Microsoft 365 Backup Storage.
- Protection policies for mailboxes, drives and sites
- Retention rules with retention-lock support
- Restore points and restore sessions
- Disaster-recovery testing without touching production
- Alerts when protection changes or a backup fails
Compliance Posture
Measure your tenant against Essential Eight and the ASD Blueprint, and catch drift at every scan.
- Measure assessed vs target maturity across all eight strategies
- Essential Eight findings cite their mapped ISM controls
- Define baselines typed to ASD Blueprint, Essential Eight, ISM, PSPF, or your own
- Detect configuration drift from a baseline on every scheduled scan
- New Microsoft 365 capabilities surfaced and mapped to E8 controls and ASD sections
- Built to support your IRAP assessment
Agent & Copilot Governance
Discover and inventory agents and Copilot extensions across your tenant, and score the risk each one carries.
- Automatic discovery and inventory of agents across the tenant
- Scheduled scans with full history
- Risk scoring across trust boundaries, instructions and grounding
- Maintain your own approved-vendor allowlist; agents from vendors not on it are flagged in risk scoring
- Agent365 consent
Access Intelligence
See exactly who can reach your classified content, from OFFICIAL through to TOP SECRET.
- Containers classified from sensitivity labels, with the source of every classification recorded
- Find PROTECTED and above content exposed to people without clearance
- Surface guest access and dormant accounts that still hold access
- Run access reviews and track exemptions
- Optionally require two-person approval for SECRET+ exemptions
Records Governance & Disposal
Sentence records against your disposal authorities and prove what was destroyed, when, and on whose authority.
- Sentence against your disposal authorities and classes
- AI-assisted sentencing suggestions your team reviews and approves
- Build disposal batches with an approval workflow
- Issue disposal certificates with an integrity check
- Apply freezes and holds that stop disposal
- Two-way sync with Microsoft Purview
Ready to Secure Your Microsoft 365?
Start your free 14-day trial or talk to our team about your needs.