Maester Cloud
by Jozra
Track what changed in your Microsoft 365 security posture. Runs in your own Azure subscription.
Know what changed in your Microsoft 365 security posture.
Maester Cloud is the history, drift detection, and evidence layer for Maester and Microsoft Zero Trust Assessment results. It runs in your own Azure subscription: it tests your tenants on a schedule, keeps the history, highlights what changed between runs, and alerts you from your own Microsoft 365 mailbox.
Built for Microsoft 365 security admins, identity and Entra teams, MSPs, and compliance stakeholders who need to answer one question with confidence: what changed, why did it change, who accepted it, and can I prove it later?
What Maester Cloud does
- 5+ years of evidence: every run is kept, including the raw JSON and HTML reports, so you have an audit trail to point to later.
- Drift detection: see exactly what changed between runs, with tests that fail after previously passing surfaced front and center.
- Built-in runner: scheduled daily runs against each connected tenant, with no machine of your own to maintain.
- Alerts from your own mailbox: change summaries are sent from a shared mailbox in your own Microsoft 365 tenant, not from a third-party service.
- Entra-authenticated portal: your team signs in with their existing Microsoft work accounts. No separate identities, and no client secrets anywhere in the product.
- Test decisions and accepted risks: record accepted risks alongside the results, so the context survives staff changes and audits.
- Upload API: send results from your existing pipelines too, authenticated with Microsoft Entra ID.
Your data stays in your subscription
Maester Cloud deploys into an Azure subscription and region you choose, and your results never leave it. It reaches your Microsoft 365 tenants only through an Entra app registration that you create and control, which trusts your deployment's managed identity, so there is no certificate or client secret to store or rotate.
Guided setup
After purchase, a setup wizard guides you through deploying Maester Cloud into your Azure subscription and connecting your first tenant. No infrastructure work to figure out. Upgrades are one rerun of the same wizard.
Billing
Buying here puts Maester Cloud on your existing Azure invoice: no new vendor onboarding and no separate payment setup. Monthly or annual. The Azure resources Maester Cloud runs on are billed to your subscription separately, at standard Azure rates.
Open source, sustained
Maester remains open source and community-driven. The runner and the tests are free, and running Maester locally will always be free. Maester Cloud is the commercial service around the open core, and every subscription helps keep the Maester tests open, accurate, and aligned with evolving Microsoft 365 security standards.
Learn more at maester.cloud. Open-source project: maester.dev.