Every Microsoft 365 tenant.
One pane of glass.
The console MSPs and IT teams use to run users, MFA, licenses and security across every client tenant, without logging into a single portal.
14-day free trial · No GDAP required · Connect a tenant in minutes
The problem
Thirty clients. Zero overview.
Managing Microsoft 365 across a book of business with native tooling means context-switching all day, and paying for what you can't see.
Tab-hopping is the job
Entra, Exchange, Intune, Defender, the admin center, multiplied by every client. Your techs spend the first hour of an incident just signing in.
Licenses bleed silently
Disabled users keep their licenses. Dormant users hide in plain sight. Microsoft bills either way, and no portal is built to make you notice.
Security drift is invisible
MFA gaps, missing Conditional Access, sliding Secure Scores. Each tenant drifts in its own direction, and nothing shows them side by side.
Everything in one pane
Eight arms around every tenant
The everyday jobs that used to mean five portals each, now one screen apiece, across your whole book of business.
Every user, real MFA state
One directory across all tenants, registration state and the actual methods per user, even without Entra ID P1.
License waste, in dollars
List prices plus your negotiated overrides, disabled and 90-day-dormant seats, priced per month and per year.
Coverage matrix, one-click baseline
Conditional Access across every tenant in one grid, and your standard policies deployed wherever they're missing.
Fix it everywhere at once
Password resets, session revokes, enable/disable, MFA enforcement, per-item results, every action in the audit log.
Two postures, one screen
Octopane's own checks next to Microsoft Secure Score, with Microsoft's own recommended actions ranked by the points they're worth.
Ask cross-tenant questions
Notion-style filters on every table and a global tenant switcher. 15-minute auto-sync keeps every answer fresh.
Spot a spoofable domain
Every tenant domain graded on SPF, DKIM, DMARC, MX and MTA-STS, resolved live from public DNS. See at a glance which clients anyone could impersonate.
Microsoft's outages and changes
Active Microsoft 365 incidents and Message Center actions across your whole book, so you hear it from Octopane before your client calls.
Stop paying for apps nobody opens
Octopane reads 90 days of Microsoft 365 Apps usage: who only works in the browser, who never installed the desktop apps, who holds a Visio or Project license they never activated. It shows the exact seats you can move to a cheaper tier, with the saving per seat.
Security & trust
Reach every tenant, without becoming the risk
A console that touches all your clients can't be your weakest link. By design, it isn't.
Encrypted, always
Every client's data is encrypted at rest and in transit, on AWS. Backups included.
No passwords, no global admin
App-only Microsoft access your client grants and revokes in one click. We never hold a credential to leak.
Every change on the record
Bulk actions run as tracked jobs in an immutable audit log: who did what, on which tenant, and when.
It pays for itself
One sync found $4,500.
In our beta, one 150-seat tenant was overpaying on two fronts: 13 dead seats nobody had touched in 90 days, and 37 active users on Business Standard who only ever open Outlook in a browser. Octopane prices the dead seats and right-sizes the rest to the tier they actually use, so the whole find is a five-minute conversation with your client, not an audit.
One reclaimed tenant pays for your whole subscription.
Find your numberComparison
Why not Lighthouse or CIPP?
Fair question. Lighthouse assumes you're a CSP partner. CIPP assumes you'll run the infrastructure. Here's the honest breakdown.
| Octopane | Microsoft Lighthouse | CIPP | |
|---|---|---|---|
| Microsoft partner status required | No, one consent link | Yes, CSP + GDAP enrollment | GDAP relationships + SAM setup |
| Setup time | Minutes | Days–weeks | Hours–days, plus self-hosting |
| Hosting | SaaS, nothing to run | SaaS | Self-host Azure, or sponsored hosted |
| License waste in $, incl. dormant seats | Disabled + 90d-dormant, priced at your rates | License view, no $ or dormancy | |
| Usage-based right-sizing | Downgrade suggestions from 90-day app usage | Not available | Not available |
| Last activity without Entra ID P1 | Via M365 usage reports | Sign-in data needs P1 | Needs P1 sign-in logs |
| MFA state per user | Methods + one-click enforce | Basic status | Status view |
| Email auth monitoring (SPF/DKIM/DMARC) | Every domain graded, live from DNS | Not available | Not available |
| CA baseline deployment | One click from coverage matrix | View-centric | Standards engine, genuinely good |
| Column filters & saved views | Notion-style, on every table | Limited | |
| UX your techs enjoy | Built 2026, Zona-grade UI | Admin-center familiar | Functional, utilitarian |
| Price | Free 2 tenants · Pro $39/mo | Included with partner program | Free self-host · $99/mo hosted |
CIPP is a great open-source project. Octopane is for teams who want it turnkey, with cost analytics built in.
Pricing
Simple pricing that scales with your tenants
Every paid plan starts with a 14-day free trial. Card required, nothing charged until day 15, cancel in two clicks.
Free
Kick the tires with up to 2 client tenants. No time limit.
- Up to 2 client tenants
- Unified users, MFA & security posture
- Email auth monitoring (SPF/DKIM/DMARC)
- Manual sync
Pro
For growing MSPs managing up to 25 client tenants. 14-day free trial.
- Everything in Free, plus:
- Up to 25 client tenants
- Bulk actions & Conditional Access drift
- Secure Score actions & service health
- Shareable client reports (PDF)
- 15-min auto-sync + priority support
Business
For large MSPs and support centers. Unlimited tenants. 14-day free trial.
- Everything in Pro, plus:
- Unlimited client tenants
- Conditional Access templates & baseline
- White-label client reports
- Octopane MCP server (chat from any AI)
- Technician seats, roles & full audit log
Enterprise
For large MSPs and IT teams that need dedicated billing, contracts and support.
- Everything in Business
- Dedicated invoicing & purchase orders
- Custom contract, SLA & security review
- Dedicated onboarding & named support
- Volume pricing
Compare plans in detail
| Free | Pro | Business | Enterprise | |
|---|---|---|---|---|
| Client tenants | 2 | 25 | Unlimited | Unlimited |
| Unified users & MFA | ||||
| License cost analytics | ||||
| Security posture, Secure Score & Microsoft recommended actions | Dashboard | |||
| Email auth monitoring (SPF/DKIM/DMARC) | ||||
| Microsoft service health & Message Center | ||||
| Auto-sync | Manual | 15-min | 15-min | 15-min |
| Bulk actions across tenants | ||||
| Conditional Access drift detection | ||||
| Audit log & exports | ||||
| Shareable client reports (PDF) | ||||
| Conditional Access templates & deployment | ||||
| Technician seats & roles | ||||
| Octopane MCP server (chat from any AI) | ||||
| White-label report branding | ||||
| Dedicated invoicing & purchase orders | ||||
| Custom contract, SLA & onboarding | ||||
| Support | Community | Priority email | Priority + onboarding | Dedicated |
All plans include every core feature during the trial. Cancel anytime from settings, no calls, no emails.
Prefer an invoice to a credit card? We offer quote-based and annual invoicing for teams that need it — just reach out. support@octopane.io
FAQ
Questions, answered
Anything else? Write to support@octopane.io, a human replies.
Give every tenant eight arms.
Connect your first client in minutes, no GDAP, no PowerShell, no partner paperwork. 14 days free, all features unlocked.
Octopane · Every Microsoft 365 tenant. One pane of glass.