Desired State Configuration for Microsoft 365 identity.
You define what "secure" looks like once. TrueConfig continuously checks your tenant against that desired state, shows where it deviates, and helps you bring it back into alignment.
Security Baseline Status
MFA for Global Admins
Conditional Access Policy
Guest Access Review
Identity Governance
Legacy Auth Blocked
Exchange Online
"TrueConfig caught a misconfiguration that would have failed our SOC 2 audit. It paid for itself in the first week."
"We used to spend 8 hours a month manually checking Entra ID settings. Now it's automatic and I sleep better."
"The drift detection caught someone disabling MFA at 2am. Without TrueConfig, we wouldn't have known until the audit."
Entropy is the default state of Entra ID.
Over time, even the best-managed tenants degrade. Temporary admin access becomes permanent. Conditional Access policies develop blind spots. Exceptions are granted and forgotten.
Accumulated Access
Temporary admin access becomes permanent, leaving doors open indefinitely.
Policy Drift
Conditional Access policies develop blind spots as new apps and users are added.
Manual Reviews
Valuable hours spent reviewing logs during audits or scrambling during incidents.
Instead of moving forward, you spend valuable hours manually reviewing logs.
Observation Is Not Control
Detection without correction leaves you in the same broken state.
How TrueConfig Works (DSC Loop)
Desired State Configuration is a control loop, not a one-time scan. You define what secure looks like, TrueConfig continuously checks reality against it, and helps you correct deviations before they become incidents.
Define Desired State
Adopt TrueConfig's secure baselines (L1-L3). Explicit adoption, versioned. Overrides allowed, tracked.
Detect Deviations
Drift evaluated only in context of baseline. Clear expected vs actual diffs. Severity tied to baseline impact.
Enforce Alignment
One-click remediation. Safe previews with boundaries. Full control over what gets corrected.
Maintain Stability
Continuous re-evaluation. Audit trail as a side effect. Optional notifications when state changes.
Simple, transparent pricing.
Saving just two hours of senior admin time pays for the month.
Essential
Billed annually (€1032/year)
For small teams starting to standardize their environment.
- Real-time drift detection
- Opinionated security baseline
- Configuration audit trail
Pro
Billed annually (€3120/year)
For growing IT departments needing deeper control and history.
- Everything in Essential
- One-click remediation
- Change history with explanations
Built with production systems in mind.
Every action is logged, previewed, and reversible. Control stays in your hands.
Visibility first
See the full picture before enabling enforcement.
Preview everything
See exactly what will happen before it happens.
Full audit trail
Every detection and action is logged permanently.
Reversible
Actions are designed to be safe and recoverable.
Frequently asked questions
Everything you need to know before getting started.
Still have questions? Contact us
Complete Documentation
Get started in minutes with our comprehensive guides, detailed control references, and troubleshooting help.