M365 governance for every tenant you manage.
TenantForge assesses your Microsoft 365 configurations, maps findings to HIPAA, CMMC 2.0, NIST 800-171, and CIS benchmarks, and lets you approve remediations — without touching the admin center.
- Multi-tenant portfolio dashboard
- Approval-driven remediation workflows
- One-click compliance gap reports
- Self-hosted or cloud-hosted
Environment-based pricing. No per-user fees. 30-day trial available.
The Problem
M365 governance at scale is broken.
The tools Microsoft provides weren't built for multi-tenant management, compliance evidence, or audit-ready governance. They were built for single-tenant administration.
No portfolio visibility
Microsoft Admin Center shows one tenant at a time. Managing 5, 10, or 50 tenants means 50 separate sessions — and zero aggregate view of your security posture.
Assessment takes weeks
Manual M365 configuration reviews require dozens of settings checked across 8+ workloads. By the time you're done, the first findings are already stale.
Compliance is a spreadsheet
Mapping M365 settings to HIPAA §164.312 or CMMC 2.0 practices by hand is error-prone, time-consuming, and produces documentation that auditors question.
Remediations have no guardrails
A misconfigured Conditional Access policy can lock out your entire organization. Without approval workflows and rollback capability, every change is a risk.
Capabilities
Everything you need. Nothing you don't.
TenantForge is purpose-built for M365 governance practitioners. Not a general IT platform retrofitted for compliance. Not a monitoring tool that charges per user.
Assess
Graph-native automated assessment across Entra ID, Exchange, SharePoint, Teams, Defender, and Purview. Zero agent install.
Validate
Map findings to HIPAA Technical Safeguards, CMMC 2.0 Level 2 practices, NIST 800-171 controls, and CIS M365 Foundations.
Remediate
Approval-driven remediation proposals. Plain-language descriptions, configurable approvers, full before/after audit trail.
Monitor
Continuous drift detection. Get alerted when configurations fall out of compliance between scheduled assessments.
Report
One-click PDF compliance gap reports with executive summary, findings table, and control mapping evidence.
Portfolio
Manage all your tenants from a single dashboard. Sort by health score, filter by framework, spot the problems instantly.
Built For
Who uses TenantForge?
Practitioners who manage Microsoft 365 in regulated or multi-tenant environments.
Manage 10 clients. See them all at once.
You're managing M365 environments for multiple clients but your tooling makes you work one tenant at a time. TenantForge gives you a portfolio-level view, automated assessments, and per-client compliance reports you can deliver as part of your service.
- Portfolio health overview at a glance
- Client compliance reports in seconds
- Billable governance service offering
HIPAA §164.312. Every control. Mapped.
Your M365 environment needs to satisfy HIPAA Technical Safeguards, and your next OCR audit is the question you can't answer. TenantForge maps every M365 configuration to the specific safeguard it satisfies — and generates the evidence documentation you need.
- §164.312 control-level mapping
- Audit-ready gap report in 30 seconds
- Continuous monitoring for compliance drift
CMMC Level 2. 14 domains. C3PAO-ready.
Your C3PAO assessment is coming and your M365 environment covers a significant portion of the 110 CMMC 2.0 practices. TenantForge assesses your posture across all 14 domains and shows you exactly what's failing — before the assessor does.
- 14-domain CMMC 2.0 coverage map
- Practice-level gap identification
- Remediation approval trail for CM.2.061
Faster assessments. Better deliverables.
You run M365 assessments manually — PowerShell scripts, spreadsheet tracking, screenshot documentation. TenantForge automates the data collection, structures the findings, and produces the PDF report. You spend your time on analysis, not data gathering.
- 5-minute automated assessment
- Structured findings vs. raw notes
- Professional PDF reports for clients
Pricing
Environment-based pricing.
No per-user fees.
Pay per environment you manage — not per user in that environment. Early Access pricing locked in for the first 12 months after GA.
Self-Hosted
Deploy TenantForge on your own infrastructure. Full control, no data leaves your environment.
GA pricing: $$29/env/mo · Lock in EA rate now
- Unlimited assessments
- Up to 20 connected tenants
- HIPAA + CMMC + NIST + CIS mapping
- PDF compliance gap reports
- Approval-driven remediation
- Docker or Azure Container App
- Community support
Professional
Cloud-hosted on M&H infrastructure. Zero setup, automatic updates, priority support.
GA pricing: $$49/env/mo · Lock in EA rate now
- Everything in Self-Hosted
- Unlimited connected tenants
- Cloud-hosted (M&H managed)
- Automated updates
- Priority email support
- Onboarding call included
- Uptime SLA at GA
No credit card required for Early Access. Trial terms will be finalized at GA.
Join the first cohort.
Shape what we build next.
TenantForge Early Access is open to a limited number of MSPs, consultants, and IT organizations. You get the platform at EA pricing, direct access to the team, and a voice in the product roadmap.
- Lock in Early Access pricing for 12 months post-GA
- Direct access to the founding team
- Shape the roadmap — your feedback is prioritized
- 30-day trial, no credit card required
Questions? Email tenantforge@mh-ts.com