Tenant Hawk

For MSPs & consultants

Every client tenant. One console. Flat rate.

Stop rotating through ten admin centers. Tenant Hawk rolls every client's health score, open findings, and reclaimable license spend into one portfolio view - with per-client scorecards ready for your next QBR. $299/month, up to 10 clients.

Get startedSee pricing

Read-only consent per client · branded subdomain + SSO · no agents

For consultants & MSPs

Every client tenant. One clear view.

Manage up to 10 client tenants from one console. Every client gets the full scan — findings with dollar impact, daily rescans, drift alerts, and shareable scorecards for your next check-in.

—
Portfolio roll-up — average score, open highs, and recoverable spend across every client at a glance.
—
Needs-attention queue — stale scans, open highs, and connection issues surface before your next check-in.
—
Per-client scorecards — shareable grades and trends, built for client updates and exec summaries.
—
Branded subdomain + SSO — your team signs in at acme.tenanthawk.io with Okta, Entra, or SAML.
See Enterprise pricing
Client portfolio8 tenants connected
Avg. score
74
Open high
23
Recoverable / mo
$1,840
N
Northwind Traders
Scanned 2h ago
2 high81 B
F
Fabrikam
Scanned 5h ago
7 high68 D
C
Contoso
Scanned 1d ago
4 high76 C
W
Wingtip Toys
Scan stale · 9d
—72 C

Built for the client conversation

The console runs your day; the scorecards run your reviews.

QBRs without the deck-building

Per-client scorecards with grades, trends, and top findings - the security slide of your quarterly review, generated instead of assembled.

Savings that justify your invoice

Reclaimable license spend per client, in dollars. Showing a client you found more waste than your management fee is the easiest renewal conversation you'll have.

Proactive beats reactive

Drift alerts and the needs-attention queue surface problems before the client calls - the difference between reporting an incident and preventing one.

Frequently asked questions

How does pricing work for MSPs?

Enterprise is flat-rate: $299/month covers up to 10 client tenants with the full platform on every one - findings with dollar impact, daily scans, alerts, exports, and scorecards. Volume tiers are available beyond 10 clients. No per-seat math.

How do I onboard a client tenant?

Each client grants standard read-only admin consent - a link you can send them, or click through together in two minutes. No agents to deploy, no credentials to collect or store, and clients can revoke access from Entra at any time. That consent model is easy to explain in an MSA.

Can I put my own brand on it?

Yes. Enterprise includes a branded subdomain (acme.tenanthawk.io) with SSO via your IdP - Okta, Entra ID, or SAML - so your team signs in under your name, and shared scorecards carry your branding to clients.

How do the scorecards work for QBRs?

Every client tenant gets a shareable scorecard: overall grade, category trends, top findings, and reclaimable license spend. It's the security-and-savings slide of your quarterly business review, generated automatically - and the recovered-spend number regularly justifies your own line item.

How do I know which client needs attention first?

The portfolio roll-up ranks clients by open high-severity findings, stale scans, and connection issues. Instead of rotating through ten admin centers, you open one console and see who needs work today.

How do you handle security and client data?

Read-only Microsoft Graph access via standard admin consent — no agents, no stored client credentials, and clients can revoke access in Entra at any time. We use HTTPS, hashed passwords, and optional 2FA for your Tenant Hawk logins. Disconnect a tenant or delete your account and we remove the associated data. See our privacy policy for retention and subprocessors.

Your next QBR is already prepared.

Connect your first client tenant read-only and see the portfolio view with real data in minutes.

Get started