Free and open source ยท Built for MSPs
Office Sentry reads each client's Microsoft 365 tenant every night, keeps the history and turns it into the reports you actually send: a branded monthly review, an insurance evidence pack, about 30 detail reports, a view across every client and what changed since last month.
No sign-up. The demo has three fictional clients and resets every night.
It asks Microsoft for read permissions only, so it can't change anything in a client's tenant.
Every night's results are kept, so you can see what changed, when, and whether it got better.
Compare any report across all your clients, worst first, and open the rows behind any figure.
Reports carry your logo and colours and explain findings in words a client understands.
What you get
Office Sentry does the gathering every night for every client. You review the report and send it, or let it email itself.
The Monthly Security & Licensing Review opens with a verdict and a plain-English summary, then the figures that matter.
Identity, email, files, devices and licences: MFA coverage, mail forwarding, mailbox permissions, sign-ins, Conditional Access, licence right-sizing and more.
All tenants compares any report across every client, one row each. What changed lists the month's changes, most important first: new and fixed findings, admins, accounts, Conditional Access, forwarding, apps and devices.
See how full a tenant is and when it will run out at the current rate, where the space goes, and the biggest folders, files, version histories and recycle bin items, each with what to do about it.
Open the 19-page example
The evidence pack answers the controls cyber-insurance questionnaires ask about, such as MFA, admin accounts, legacy sign-in, email authentication, forwarding, leavers and devices, with the gaps listed.
Open the example pack
Sign-in, MFA, admin roles, licences, mailbox forwarding, devices and sharing for one account, with how it changed. Handy for offboarding and "was this account compromised?"
Findings become the projects an account manager can propose, with a branded proposal PDF. A project drops off once the tenant is fixed.
Any mix of reports weekly, monthly or quarterly in the client's timezone, plus alert emails and Teams, Slack or webhook alerts.
Client users sign in and see only their own organisation's reports and downloads, never another client or how collection works.
Open the demo and click around three fictional clients with five weeks of history. Nothing can be changed, and it starts fresh every night.
Example reports
Real exports from Office Sentry, made from fictional demo data.
Security
Get started
Office Sentry runs as two Docker containers with everything in one volume. No database server, no Redis.
Download the compose file, set your domain and timezone, and run docker compose up.
One command creates the app in your own Microsoft tenant, with its certificate.
Each client approves read access once. The first reports are ready after the first collection.
Nothing. Office Sentry is free, open-source software under the AGPL-3.0. You run it on your own server; a small cloud server is enough for most MSPs.
No. It only asks Microsoft for read permissions, and its code can't write to Microsoft Graph or run Exchange commands other than ones that read.
No. It reads settings, mailbox details such as size, forwarding and permissions, and inbox rules, never message contents. What Office Sentry reads lists every permission, written for your clients.
On your own server, in one database you can back up and restore. Office Sentry has no telemetry, so nothing is sent to us.
Microsoft shows one tenant at a time, in its own words, with little history. Office Sentry keeps every night's results for every client, compares them month by month and across clients, and turns them into branded reports.