Pricing
Simple, Environment-Based Pricing.
One license per tenant. No per-user pricing. No metered usage.
Self-Hosted
For security-conscious teams who want full control over where TenantForge runs.
billed annually
Early Access pricing · GA will be $29/mo
- Full tenant discovery via Microsoft Graph API
- CIS M365 Foundations benchmark validation
- Findings report with severity classification
- PDF and JSON report export
- Remediation workflow with audit log
- Governance drift monitoring
- Self-hosted on your infrastructure
- Community support
Professional
For consultants and growing organizations that need compliance framework coverage and multi-tenant support.
billed annually
Early Access pricing · GA will be $49/mo
- Everything in Self-Hosted
- HIPAA §164.312 Technical Safeguard mapping
- CMMC 2.0 Level 2 practice mapping
- NIST SP 800-171 control family scoring
- Multi-tenant dashboard (up to 10 tenants)
- Scheduled automated assessments
- Compliance evidence package generation
- Microsoft Secure Score trend reporting
- Email support within 2 business days
Enterprise
For MSPs and enterprise teams managing large tenant portfolios at scale.
volume pricing available
- Everything in Professional
- Unlimited tenant environments
- Custom baseline policy configuration
- Change management ticketing integration
- SIEM and SOC integration
- White-label reporting (MSPs)
- Dedicated onboarding and training
- SLA-backed support
- Custom compliance frameworks
Full Feature Comparison
| Feature | Self-Hosted | Professional | Enterprise |
|---|---|---|---|
| Tenant discovery | |||
| CIS M365 Foundations validation | |||
| HIPAA Technical Safeguard mapping | – | ||
| CMMC 2.0 Level 2 mapping | – | ||
| NIST 800-171 scoring | – | ||
| PDF / JSON report export | |||
| Multi-tenant dashboard | – | Up to 10 | Unlimited |
| Scheduled assessments | – | ||
| Compliance evidence packages | – | ||
| Custom baseline policies | – | – | |
| SIEM integration | – | – | |
| White-label reporting | – | – | |
| Support | Community | Email 2BD | SLA-backed |
Pricing Questions
What does 'environment' mean for licensing?
Each Microsoft 365 tenant you connect to TenantForge counts as one environment. If you manage 5 client tenants, you need 5 environment licenses. This is significantly more cost-effective than per-user licensing at enterprise scale.
Is TenantForge available now?
TenantForge is in private Alpha. Early Access participants get access to the Alpha and Beta builds at discounted pricing, locked in at their early access rate. General Availability is planned for Q4 2026.
Can I run TenantForge in my own infrastructure?
Yes — the Self-Hosted plan runs entirely on your own infrastructure. TenantForge connects to the Microsoft Graph API from within your environment. We publish deployment packages for Docker and Kubernetes.
Does TenantForge require admin consent or elevated permissions?
TenantForge requires Microsoft Graph API permissions appropriate to what it reads — primarily read access to security and configuration endpoints. It does not require global admin for read-only assessment mode. Remediation actions require appropriate delegated or application permissions for the specific changes being made.
What is the Early Access program?
Early Access participants get access to Alpha and Beta builds, direct influence over the product roadmap, and locked-in pricing below GA rates. Early Access is by application — we onboard in cohorts to ensure we can provide adequate support.