Everything you need to know

No, never. EntraGUARD performs a strictly read-only audit: it reads your tenant's configuration but never changes it. The permissions requested are read-only (Graph *.Read.All). No writes, no changes, no risk to your production.

Audit results are stored locally, on the Windows machine where the application is installed. EntraGUARD is a desktop application: your data does not transit through any third-party server and is not hosted in the cloud. You keep full control of your reports.

Yes. Because the application runs locally and neither collects nor transmits your audit data to third parties, it naturally fits into a GDPR-compliance approach. You remain the data controller for your own data, stored on your machines.

Only read-only Microsoft Graph permissions (for example Directory.Read.All, Policy.Read.All), plus a dedicated read permission for Exchange. The application registered in your tenant has no write or admin rights. This is the principle of least privilege applied to the auditor.

EntraGUARD runs 283 automated security controls across 9 Microsoft frameworks: Entra ID, Active Directory, Azure, Exchange, SharePoint, OneDrive, Teams, Defender and Purview.

The controls are aligned with widely recognised frameworks: the CIS Microsoft 365 Benchmark, ANSSI recommendations, NIST and ISO 27001, as well as Microsoft Secure Score. You can also define a custom baseline suited to your context.

A baseline lets you adapt the standard framework to your organisation: exclude controls that don't apply to you, and adjust the criticality (level 1 or 2) of the rest. The score then reflects your real requirements rather than a generic standard. The applied baseline is traced in your reports.

The score is weighted by criticality: core controls (level 1) weigh more than hardening controls (level 2), and a warning counts as an intermediate value. The result reflects real risk rather than a simple count of ticked boxes.

Yes. EntraGUARD keeps a history of your audits and lets you compare two of them: change in the overall score and per framework, controls that improved or regressed. You can measure your progress concretely.

EntraGUARD generates an executive PDF report (structured like a consulting report: cover page, summary, priorities, detail) and its shareable HTML version by email. An action plan is also exportable in Excel with tracking columns (owner, due date, status), plus CSV and JSON exports.

Yes. You can apply your logo, company name and contact details to every report. This is particularly suited to service providers and MSPs who audit several clients under their own brand.

No. EntraGUARD is a standalone Windows application. No agent to deploy on your machines, no server to maintain, no infrastructure to manage. You install the application, connect your tenant, and you're operational within minutes.

Yes. The demo is free and standalone: it runs on a fictitious tenant, with no sign-up and no connection to your real environment. It lets you explore every feature before deciding.

It depends on your plan. Each plan covers a set number of organisations (tenants). Providers auditing several clients can manage several organisations in the application. See the Pricing page for details, or request a quote for a larger volume.