✓ Health Score
A 0–100 security posture score with sub-scores across Identity, Access Control, Data Protection, and Operations—with the specific factors driving each grade.
Download TenantSentinel
The TenantSentinel desktop app runs on your Windows machine and scans your Microsoft 365 tenant via the Graph API. No cloud agents, no tenant modifications, no firewall changes required.
ℹ Windows SmartScreen Notice
When you run the installer, Windows may show a "Windows protected your PC" warning. This is normal for new apps without a Microsoft-recognized publisher certificate. TenantSentinel is safe to install.
To continue installation:
- Click More info in the SmartScreen dialog
- Click Run anyway
The warning decreases as the app builds reputation — it typically disappears within the first few weeks of public use.
What’s in the Executive Dashboard
✓ MFA Analysis
Per-user MFA method breakdown, coverage percentages across your organization, and identification of users with no MFA registered.
✓ Conditional Access
Every CA policy inventoried and evaluated against 7 security baselines, with gap analysis showing exactly what’s missing and who isn’t covered.
✓ Privileged Roles
All admin accounts with their role assignments, MFA status, and whether they’re being used for daily work—a common and overlooked risk signal.
✓ Enterprise Apps
Third-party app permissions with risk classification, consent type, and last-activity detection to identify overprivileged or stale applications.
✓ Licensing Analysis
Per-SKU cost breakdown using Microsoft retail pricing, inactive user detection, and annualized savings you could realize by right-sizing licenses.
System Requirements
Operating System
Windows 10 or Windows 11, 64-bit. The app installs per-machine and requires administrator rights during installation.
PowerShell
Windows PowerShell 5.1 is included with every supported Windows version. PowerShell 7 is supported and used automatically if installed.
License
A TenantSentinel license key is required to activate. Get a free license key instantly—no review required.
Setup Walkthrough
After installing, a guided wizard walks you through the remaining steps. Here’s exactly what to expect.
1
Download & Install
Run the installer as administrator. TenantSentinel installs to Program Files and creates a desktop shortcut. Launch the app and the setup wizard starts automatically.
2
Activate Your License
Enter your TS-XXXX-XXXX-XXXX-XXXX license key and click Activate License. The app validates your key, automatically generates a security certificate, registers it with Microsoft Entra ID, and sets up your scan credentials—all in one step. The private key never leaves your computer.
Don’t have a key? Get a free license key instantly—no review required.
3
Grant Permissions
The wizard shows a consent link. Copy it and send it to your Microsoft 365 Global Administrator. When they open the link and click Accept, TenantSentinel is granted read-only access to your tenant’s security data. They’ll be redirected to a confirmation page when done.
Once permissions are granted, click Open TenantSentinel and run your first scan.
TenantSentinel requests read-only Graph API permissions only. No data is modified, no settings are changed.
Don’t have a license yet? Get a free license key instantly — no review, no credit card.