Will TrueConfig make changes to my production tenant?

No. TrueConfig operates in read-only monitoring mode by default. We never make changes to your Microsoft 365 environment without your explicit approval. All remediation actions require confirmation.

What Microsoft permissions does TrueConfig need?

TrueConfig requires read permissions to evaluate your configuration (Directory.Read.All, Policy.Read.All, RoleManagement.Read.All, etc.). For optional auto-remediation features, write permissions are requested separately and only when you enable those features.

How long does the initial scan take?

Most tenants complete their first scan in 2-5 minutes. Larger environments with thousands of users may take up to 15 minutes. Subsequent incremental scans are much faster.

Yes. TrueConfig uses zero-knowledge architecture—we never store your Microsoft credentials. All data is encrypted at rest and in transit. We are hosted in EU data centers and are GDPR compliant.

Can I try TrueConfig before purchasing?

Absolutely. TrueConfig offers a free tier that lets you connect one tenant and run unlimited scans. No credit card required to start.

For IT teams managing Microsoft 365

Stop firefighting your Microsoft 365 security.

Someone disabled a policy at 2 AM. An auditor is asking about your Global Admins. Guest access is a mess. Sound familiar?

TrueConfig watches your tenant 24/7 and catches the drift before it becomes your problem.

Free scan • No credit card • Takes 5 minutes

Your tenant right now (probably)

3 things need attention

Drifting

7 Global Admins

Should be 2

MFA policy disabled

3 days ago

Legacy auth enabled

On 4 accounts

This is what TrueConfig finds in most tenants on day one.

60+security controls checked

30+auto-fix actions available

< 15 minto first scan results

What IT teams are saying

"I used to spend half a day every month on compliance reports. Now I just send auditors a link."

IT Manager

350-person manufacturing company

"We found 12 stale Global Admins on day one. I had no idea it was that bad."

Systems Administrator

Regional healthcare provider

"Finally, something that actually fixes the problem instead of just telling me about it."

IT Director

Professional services firm

GDPR compliant

Data stored in EU

Read-only by default

SOC 2 Type II in progress

Your tenant drifts while you sleep.

Not because anyone screwed up. Just because that's what happens when busy people make quick changes and forget to clean up.

That 'temporary' Global Admin from 6 months ago?

Still has access. Still in your audit report. You'll find out when someone asks why.

The policy someone disabled 'just for testing'?

Legacy auth has been wide open for 3 weeks. You found out from an alert, not your dashboard.

The guest access you set up for that contractor?

He finished 4 months ago. The access didn't. Neither did the 47 others like him.

You could spend 15 hours a month running PowerShell scripts and reviewing spreadsheets. Or you could let us watch it for you.

Here's how it works

No 6-month implementation. No professional services. Just connect and go.

Connect your tenant

Pick a baseline (or use ours)

Choose how strict you want to be. We have sensible defaults, or customize control by control.

See what's actually wrong

We'll scan your tenant and show you exactly what's drifted. Spoiler: it's usually more than you think.

Fix it (one click or automatic)

Preview changes before applying. Or turn on auto-fix and let us handle the routine stuff.

Then it just runs

TrueConfig checks your tenant on a schedule. When something drifts, you hear about it fast.

Someone adds a Global Admin → you get notified in 15 minutes

A policy gets disabled → it gets re-enabled automatically

Guest access piles up → you see who needs cleaning up

The goal: You stop thinking about security drift. It's just handled.

Simple, transparent pricing.

Saving just two hours of senior admin time pays for the month.

MonthlyAnnualSave 13%

Essential

€86/month

Billed annually (€1032/year)

For IT teams establishing their security baseline.

Real-time drift detection
Opinionated security baseline
Configuration audit trail

No credit card required

RECOMMENDED

Pro

€260/month

Billed annually (€3120/year)

For IT teams that need control, history, and one-click fixes.

Everything in Essential
One-click remediation
Change history with explanations

No credit card required

Scale

€521/month

Billed annually (€6252/year)

For organizations with multiple tenants or automated enforcement needs.

Everything in Pro
Automatic enforcement
Multi-tenant support

Questions? Answers.

The stuff you're probably wondering about.

Nope. TrueConfig is read-only by default. We just look at your configuration and tell you what's drifted. When you want us to fix something, you enable it per-control and preview every change before it happens.

Still have questions? Just ask

Ready to see what's actually going on?

Connect your tenant in 5 minutes. Get your first scan results in 15. No credit card, no sales calls, no commitment.

Most teams find 5+ issues in their first scan. What will you find?