← graphpaas.com
GRAPHPAASFor MSPs · October 2026

Microsoft 365 & Azure, read-only

Every client tenant. Under the X-ray.

The licences your clients pay for and nobody uses, the security gaps worth fixing first, and a report per client every month — from one login, without touching a tenant.

01

Money back

  • Paid licences on disabled accounts and on people with no sign-in or activity for 90 days, down to the person.
  • A dry-run PowerShell script the client's admin runs to take them back. Direct assignments only.
  • Idle Azure: unattached disks, unused public IPs, old snapshots, Advisor cost recommendations.
02

Risk down

  • Our checks next to Secure Score's actions, worst first, for every client tenant side by side.
  • The connections graph: who reaches Global Admin, who can wipe which devices, which guests a partner brought in.
  • Defender alerts, incidents and vulnerabilities per tenant.
03

Your monthly deliverable

  • A monthly email per client tenant with the counts, and a password-protected PDF with the findings.
  • Accept a risk with a reason or snooze it to a date: it stays out of the counts until it lapses.
  • Ask Claude about any tenant in plain language, through our read-only MCP server.
1
Connect
Admin consent per client tenant. Read-only, no agents.
2
We sync
Every 4 hours; daily for what Microsoft publishes daily.
3
You fix
Script, ranked list, monthly report. Nothing changes without you.

Plans for MSPs

Per month
MSP 10For MSPs with up to 10 client tenants€149 →
MSP 25For MSPs with up to 25 client tenants€299 →
MSP 50For MSPs with up to 50 client tenants€499 →
PartnerFor licence resellers and large MSPsLet's talk →

Free licence audit: 7 days on one tenant, everything unlocked, no credit card.

Read-only Graph permissionsEU-only storageEach tenant isolated end to endGDPR processor under a DPAA broken sync raises a banner and an email