For MSPs & vCISOs
Every client tenant, one baseline, one price.
Checking Conditional Access, MFA gaps, legacy authentication and OAuth apps across dozens of client tenants by hand does not scale. Pharos is being built to make tenant hardening a repeatable managed service, and to give you the evidence at every client review. It is not available yet.
Planned pricing: Assess is $149 a month for every tenant, up to 500. Add Watch for $149 more. Together, $298 a month. No per-seat fees, and no per-client fees.
Portfolio
Example data, not real companies
5tenants
61 checks mapped
- Hardened
Northwind Dental
Microsoft 365
92All checks pass
- Drift
Contoso Legal
Microsoft 365
81External forwarding switched on
- 3 to review
Fabrikam Logistics
Google Workspace
743 third-party apps can read mail
- Failing · 14 accounts
Tailspin Clinics
Microsoft 365
58Legacy sign-in still allowed
- Hardened
Adventure Works Co-op
Google Workspace
88Reviewed 12 days ago
What you get
The work you repeat for every client, done once.
Each item says which layer it belongs to. Items marked Planned are not built yet.
One view across every client tenantPlanned
Each client’s Microsoft 365 and Google Workspace posture score, MFA coverage and open findings on one screen, ranked so you open the one that needs you first.
The same baseline for every clientPlanned
One catalogue of checks, mapped to CIS, SOC 2, ISO 27001 and NIST, run the same way against every tenant, so a review means the same thing for every client.
Reports under your own namePlanned
A PDF for each client review carrying your brand: what improved, what is still open and what is next.
Catch drift before the client doesPlanned
Know when a client admin enables external forwarding, creates an unapproved Global Admin or weakens SharePoint sharing, and send the alert to the channel you already watch.
Quarterly access reviewsPlanned
Run client access reviews and OAuth app audits, and hand the client a signed PDF.
Evidence that travelsPlanned
Passing checks go to Kanon as audit evidence, and newly found OAuth vendors go to Pistos for review.
The margin
A flat price means your margin follows your service, not your client’s headcount.
- A client with 300 people costs the same to cover as one with 15.
- Adding a client tenant, a contractor or a shared mailbox does not change your bill.
- Each client’s data is separated in the database with row-level security, so one client can never see another’s.
Monthly client report · Northwind Dental · example data
Microsoft 365 posture score rose from 64 to 92.
- HardenedLegacy IMAP and POP authentication blocked across all 62 mailboxes.
- ReviewedQuarterly user access review completed; 3 dormant contractor accounts disabled.
- Revoked2 unapproved third-party OAuth apps with Mail.ReadWrite access removed.
Example data, shown for illustration.
Bring your first client tenants.
Tell us how many Microsoft 365 and Google Workspace tenants you manage and we will write when early access opens.