Start with a scan. Grow into continuous governance.
Every team starts with a free diagnostic. Most grow into daily governance within a week. Pick the tier that matches where you are today.
Most teams choose annual after the first month.
Tenant Exposure Report
See what’s hiding. One scan, zero commitment.One-time snapshot. No background monitoring.
$0
What’s included:
- ✓Full app registration & credential discovery
- ✓Risk scoring with AI explanations
- ✓License waste detection
- ✓Read-only. No agents. Revocable anytime.
Starter
Continuous visibility. Early warnings before things break.
$99/ tenant / month
Cancel anytime. No commitment.
Everything in Free, plus:
- ✓Daily background scans
- ✓Email alerts when things change
- ✓Full scan history with diffs
- ✓License savings estimates
- ✓Group & enterprise app governance
- ✓CSV exports for audit
Most teams start here
Pro
Fix problems, not just find them.
$249/ tenant / month
Cancel anytime. No commitment.
Everything in Starter, plus:
- ✓Step-by-step remediation guidance
- ✓Permission drift detection
- ✓Device posture (Intune)
- ✓CA policy analysis (8 detectors)
- ✓Tenant Hygiene Grade (full breakdown)
- ✓Compliance summaries & activity log
Starter tells you what’s wrong. Pro tells you how to fix it — with remediation steps, drift detection, device posture, and the full Tenant Hygiene Grade.
Enterprise
Risk chain analysis, blast radius estimation, and programmatic access.
$499+/ tenant / month
Cancel anytime. No commitment.
Everything in Pro, plus:
- ✓Risk chain & blast radius analysis
- ✓Governance coverage scoring
- ✓Remediation ROI estimation
- ✓Webhooks & API keys
- ✓Priority support
Quick comparison
Free
Starter
Pro
Enterprise
Tenant scans
One-time
Daily
Daily
Daily
Background monitoring
—
✓
✓
✓
Email alerts
—
Unlimited
Unlimited
Unlimited
Scan history
7 days
Full
Full
Full
License savings
Detection
Estimates
Estimates
Estimates
Remediation guidance
—
—
✓
✓
Device posture
—
—
✓
✓
CA policy analysis
—
—
✓
✓
Hygiene Grade
Letter
Letter
Full breakdown
Full breakdown
Webhooks & API
—
—
—
✓
A snapshot is not governance
The Tenant Exposure Report shows you what's in your Entra tenant right now — the apps, the credentials, the risks. That's valuable. But it's a photograph, not a security camera.
Governance means continuous visibility. It means catching the expired secret at 2am, the orphaned app someone spun up Friday, the permission drift that happened while you were on vacation. A point-in-time scan can't do that. That's not a limitation — it's the difference between looking once and watching always.
Full feature breakdown
Expand each category to see exactly what's included at every tier.
Single Organization
One tenant. One price. Continuous governance without operational overhead.
Managed Service Providers
Deploy IdentityOps across your client tenants with per-tenant pricing and volume discounts. Each tenant gets its own isolated instance with full governance capabilities.
Run a free scan. See what governance is missing.
Most teams that run the diagnostic upgrade within a week.
Read-only access. Revocable anytime. No credit card required.