Discovery
Full Tenant Visibility in Minutes.
TenantForge connects to your Microsoft 365 tenant via the Microsoft Graph API and produces a comprehensive inventory of your environment's security and governance state — without installing agents or modifying any configuration.
- Entra ID configuration inventory — directory settings, authorization policies, app registrations
- Conditional Access policy completeness review
- Exchange Online security configuration audit
- SharePoint and OneDrive external sharing and permission review
- Microsoft Teams external access, guest policies, and channel governance
- Microsoft Defender for M365 deployment status and coverage gaps
- Microsoft Purview configuration — sensitivity labels, DLP policies, retention
- Intune device management and compliance policy inventory
Discovery view · Screenshots coming in Beta
Validation
Validate Against Baselines That Matter.
TenantForge validates your tenant configuration against the security and compliance baselines that apply to your organization — not generic best practices, but the specific controls your regulatory context requires.
- CIS Microsoft 365 Foundations Benchmark validation
- HIPAA §164.312 Technical Safeguard mapping and gap identification
- CMMC 2.0 Level 2 practice mapping for M365-applicable controls
- NIST 800-171 control family scoring across 14 domains
- Microsoft Secure Score improvement opportunity identification
- Custom baseline policy support (Enterprise edition)
Validation view · Screenshots coming in Beta
Findings
Actionable Findings, Not Just Data.
Every TenantForge assessment produces structured, prioritized findings — ranked by severity, mapped to compliance frameworks, and delivered with the specific remediation action required to close each gap.
- Critical, High, Medium, and Low severity classification for every finding
- Plain-language finding descriptions — no cryptic error codes
- Direct compliance framework mapping for each finding
- Specific M365 configuration change required to remediate
- Effort estimate for each remediation action
- Exportable findings report in PDF and JSON formats
Findings view · Screenshots coming in Beta
Remediation
Fix Issues Safely. Every Change Logged.
Remediation in TenantForge follows a structured approval workflow — every proposed change is reviewed by a human before execution, and every executed change is logged with a full audit trail.
- Structured remediation proposals — what will change, why, and expected outcome
- Multi-stage approval workflow for production changes
- Full audit log of every remediation action — who approved, when, what changed
- Rollback capability for reversible configuration changes
- Bulk remediation for common findings across multiple tenants
- Integration with change management ticketing (Enterprise edition)
Remediation view · Screenshots coming in Beta
Governance
Governance Policies That Actually Enforce.
TenantForge monitors your tenant continuously against the governance policies you define — detecting drift the moment it occurs, not when you run the next assessment.
- Teams and Microsoft 365 Groups lifecycle policy monitoring
- SharePoint external sharing drift detection
- Entra ID configuration change alerting
- Guest access change monitoring and review triggers
- Conditional Access policy drift detection
- Administrative role assignment change alerting
Governance view · Screenshots coming in Beta
Reporting
Reports Your Auditors Can Use.
TenantForge generates structured compliance reports designed for auditor review — not raw data exports, but formatted evidence documents that map to the controls your assessors need to verify.
- Scheduled assessment reports — weekly, monthly, or on-demand
- Compliance framework evidence packages (HIPAA, CMMC, NIST)
- Executive dashboard with tenant health score trending
- Findings history and remediation closure tracking
- Multi-tenant portfolio reports for MSPs and managed service providers
- Microsoft Secure Score trend reporting with improvement roadmap
Reporting view · Screenshots coming in Beta
Multi-Tenant Ops
Manage Every Tenant From One Dashboard.
For MSPs and multi-entity enterprises, TenantForge provides portfolio-level visibility across all managed tenants — assess them all, compare health scores, and prioritize remediation across your entire client base.
- Multi-tenant dashboard with per-tenant health scores and status
- Cross-tenant findings aggregation and prioritization
- Tenant comparison — identify which clients have similar gaps
- Bulk assessment scheduling across tenant portfolio
- Per-client reporting and evidence package generation
- Environment-based licensing — one license per tenant, not per user
Multi-Tenant Ops view · Screenshots coming in Beta