Every Microsoft 365 tenant,
assessed in minutes.
Connect a tenant, run a read-only assessment, and walk away with an AI-written, brand-ready security report — identities, devices, mail, SharePoint, Secure Score and more.
Whole-tenant dashboard
Identities, licences, compliant endpoints, active risks and Secure Score for every tenant — live, on one screen.
Posture radar
Control-by-control posture mapped from your real tenant state, scored and visualised at a glance.
AI-drafted findings
GPT-4 writes the executive summary, key findings and remediation — you review and approve.
Branded reports
One-click PDF and Excel reports, white-labelled with your brand, ready to hand to the client.
Risky-user watch
Put a watch on any user; every sign-in and audit event is tracked with a plain-English alert.
Read-only & API-only
Application permissions, consented per customer. No certs, no standing access, no tenant changes.
See exactly where a tenant stands.
All your tenants in one dashboard.
Sign in and see every customer tenant's secure score side-by-side. Add new ones with a domain or tenant ID. Consent verifies in real time before the first sync runs.
- task_altAdd tenant by domain or tenant ID
- task_altConsent verified before sync starts
- task_altStatus chips — Secure / Review / At risk
- task_altSync all tenants in one click
One tenant, nine focused views.
Switch between Dashboard, Users, Devices, Email, Data, Policies, Apps, Licenses and Baselines — each tab a different angle on the same assessment. No re-fetching, no waiting.
- task_altMicrosoft Secure Score + Alif posture score
- task_altAI findings prioritised by impact
- task_altTile grids drill into detailed tables
- task_altEvery view from one fetch
Compare against 9 compliance frameworks.
Click a framework — CIS, NIST, ISO 27001, Essential 8, and more — to see your tenant scored against it instantly. The dashed ring is the 70% target. Anything outside it needs work.
- task_altCIS, NIST, ISO 27001, Essential 8 & more
- task_altPer-control scoring from real state
- task_altOverall score animates as you switch
- task_altTarget line at 70%
Audit every privileged admin.
Click any admin to see job title, department, MFA method, risk score, last sign-in, and full licence list — pulled live from Microsoft Graph. The fastest way to answer “is this admin still safe?”
- task_altIdentity signals — MFA, risk, status
- task_altProfile context — title, department, UPN
- task_altFull licence list — not just a count
- task_altBreak-glass detection + last sign-in age
Every finding explains itself.
We don't just flag the issue — AI writes a plain-English paragraph explaining the risk, who it affects, and how to fix it. All grounded in your real tenant state. Edit before you export.
- task_altSeverity mapped to CVSS-style bands
- task_altCross-references multiple frameworks
- task_altCopy to clipboard or rewrite with AI
- task_altExecutive-summary generator included
Two reports, one click.
A branded PDF for the boardroom and a full Excel workbook for the engineer. Same assessment, two formats — exported in seconds.
- task_altBranded PDF with your logo and colour
- task_altExcel — one sheet per data view
- task_altGenerated in under 30 seconds
- task_altEvery chart embedded, not linked
White-label everything as yours.
Your customers never need to know you use Alif. Swap the name, logo, tagline and accent colour — every report, email, and URL shows your brand.
- task_altRename it — the preview updates live
- task_altPick a brand colour — everything re-themes
- task_altUpload a logo to replace the mark
- task_altApplied to PDF and portal
Built for MSPs managing many tenants.
Every customer in one console. Schedule automatic syncs, compare scores side-by-side, and catch security drops the week they happen.
- task_altUnlimited tenants per workspace
- task_altEach user keeps their own shortlist
- task_altScheduled re-syncs (weekly / monthly)
- task_altScore-drift alerts — email / Slack / Teams
Read-only. Revocable. Stays in your region.
We request only read permissions. Your data never leaves the Azure region you signed up in. Remove a tenant and our app is auto-removed from your directory — no extra steps.
- task_altRead-only Graph scopes only
- task_altData stays in your Azure region
- task_altPer-customer consent, app-only
- task_altRemove tenant → enterprise app auto-removed
Now fix what we found.
9 Microsoft portals replaced by 1.
Manage every Microsoft 365 setting from Alif. Stop tab-hopping between Entra, Exchange, Teams, SharePoint, Intune, Defender, and Compliance — they're all in one place here.
- task_altSingle sign-on with your admin identity
- task_altNo context-switching between tabs
- task_altOne search box across every surface
- task_altOne permission model, one audit trail
The left-nav is live — switch modules to see how every surface lands in one console.
Onboard and offboard in one click.
Pick a user, pick a template, hit Schedule. Manage runs the full playbook — joiner (create, license, provision, welcome) or leaver (rename, revoke, reclaim, hide from GAL). Every step logged.
- task_altRole-specific checklist templates
- task_altSchedule overnight or run now
- task_altLive log streams each Graph call
- task_altFailures captured — retry in one click
Automate the response. Save your night.
Set triggers, conditions, and actions once — Manage runs them every night. Catch dormant users, stale guests, admin-role changes, unused licences, and anything else you can wire up.
- task_altLow-code builder — no scripts
- task_altRun-history with matched counts
- task_altAI-suggested workflows from your posture
- task_altEnable / disable with one toggle
Quick wins, ranked by impact.
Every Secure Score recommendation, sorted by points-per-hour. Click Deploy — Manage applies the fix via Graph. No PowerShell. No portal trip. Watch your score climb in real time.
- task_altRanked by points / effort ratio
- task_altOne-click deploy for 80% of controls
- task_altTrack Applied / In discussion / N/A
- task_altScore updates within an hour
See every externally shared file.
Every doc, folder, and site shared outside your org — named guest or anonymous link — in one table. Filter by risk, see the evidence, revoke or delete in one click. No PowerShell, no ticket.
- task_altNamed guests and anonymous links
- task_altAuto-ranked by risk
- task_altStop sharing or delete — both audited
- task_altBulk action on filtered results
Apply your baseline to every tenant.
Pick the policies from your gold-standard tenant, pick the customers to apply them to, and Alif rolls them out. Conditional Access, DLP, mail-flow rules, retention — every customer aligned in one move.
- task_altOne source-of-truth tenant, N targets
- task_altPreview diff before deploying
- task_altOne-click rollback if a tenant fails
- task_altPer-tenant exclusions for exceptions
Pick a watched user — each fires its own incident with a GPT-4 remediation plan.
7 failed sign-ins from unfamiliar region
14:22 UTCSummary: User john.townsend@contoso.com triggered 7 failed sign-in attempts from India between 14:22 and 14:41 UTC, outside their normal sign-in pattern (previously always US-West).
Full audit trail. Forever.
Every change made through Manage — user onboarded, policy deployed, licence reclaimed, alert dismissed — captured in an immutable log. Filter, export, and hand to your auditor in seconds.
- task_altEvery Manage action — no gaps
- task_altDistinguishes human, workflow, system
- task_altImmutable — append-only
- task_altExport CSV / JSON · retain up to 7 years
Pick a plan. Cancel anytime.
No hidden fees. No surprise bills. Switch tiers or cancel any time.
Read-only security posture assessments. Perfect for audits, M&A diligence, and quarterly reviews.
- check_circleFull 9-view security dashboard
- check_circle9 framework mappings (CIS, NIST, ISO, more)
- check_circleAI-written findings with the why & the fix
- check_circleBranded PDF + Excel reports, unlimited
- check_circleWhite-label for MSPs
- check_circleGDAP customer auto-discovery
- removeRead-only — no remediation
- removeNo automation engine
Find it and fix it. Full assessment plus the operations console — onboarding, automation, baselines, and quick wins.
- check_circleEverything in Assess, plus:
- check_circleOne-click fixes via Microsoft Graph
- check_circleJoiner / mover / leaver playbooks
- check_circleAutomation engine (if-this-then-that)
- check_circleBaseline propagation across tenants
- check_circleExternal-sharing & risky-user watchlists
- check_circleImmutable audit log, exportable
- check_circlePriority support & onboarding call
Ready to try it on your tenant?
A 30-minute walk-through with an Alif engineer on your real tenant, under a read-only trial. Leave with a sample report.