Plans & Pricing
Understand. Take Command.
Or both. Both is good.
Analyze
For MSPs just getting started with Microsoft 365 Security
Unlimited tenants under 1000 users each. Contact us for Enterprise/Academic pricing.
- Assess any tenant in 60 seconds
- Client-ready reports mapped to CIS, NIST CSF 2.0 & Essential 8
- See exactly what’s wrong and what to fix first
- Cyber-insurance readiness at a glance
- Licensing gaps surfaced automatically
- Unlimited tenants, one flat price
Monthly, cancel anytime.
Manage
For MSPs & MSSPs building a VCISO-level security practice
Includes 250 users then $1/user/mo per enabled tenant. Contact us for Enterprise/Academic pricing.
- Everything in Analyze, included
- 100+ one-click Quick Fixes & guided workflows
- Capsules: deploy proven configs across every tenant
- Drift detection catches what quietly reverts
- Deep security investigations, guided step by step
- Enable or disable Manage per tenant, anytime
Monthly, cancel anytime.
How it works
Click a step.
Detailed Comparison
| Capability | Analyze | Manage |
|---|---|---|
| Assessment | ||
| Full M365 Stack Assessment | Included | Included |
| Security Framework Mapping | Included | Included |
| Findings w/ Evidence & Impacted Users | Included | Included |
| Microsoft Secure Score Tracking | Included | Included |
| Cyber Insurance Readiness Visibility | Included | Included |
| Licensing Gap Identification | Included | Included |
| Advanced Annotations & Data Exceptions | Not included | Included |
| Reporting | ||
| Brandable Executive Summary | Included | Included |
| Data Export | Included | Included |
| Custom Report Builder | Included | Included |
| Self Attestation | Included | Included |
| Historical Assessment Comparison | Not included | Included |
| Remediation | ||
| Quick Fix Remediations | Not included | Included |
| Guided Remediation Workflows | Not included | Included |
| Capsules: Deployable Security Bundles | Not included | Included |
| Policy Import & Template Mgmt | Not included | Included |
| Drift Detection & Auto-Correction | Not included | Included |
| Playbooks | ||
| Starter Security Programs | Included | Included |
| vCISO Security Programs | Not included | vCISO-level |
| Client Access & Collaboration | ||
| Risk Annotations & Audit Trail | Included | Included |
| Co-Managed Client Access | Not included | Included |
| Per-Tenant Manage Control | Not included | Included |
| Subscription Terms | ||
| Agreement Term | Monthly | Monthly |
| Cancellation | Cancel anytime | Cancel anytime |
| Try for Free | Book a Demo | |
Trusted by companies worldwide.
Questions, answered
How do I get started?
Three steps and your first tenant is assessed in minutes:
- Sign up and connect a tenant with a least-privilege app registration.
- Run your first assessment — full results in about 60 seconds.
- Share a branded report, or add Manage and start fixing.
If I manage thousands of users, won’t Manage get expensive?
No. Manage is enabled per tenant and billed only on the tenants you turn on — never your whole portfolio. The +$250/mo base includes 250 managed users pooled across those tenants; beyond that it’s $1/user/mo. Enable it where it matters now and grow at your own pace — you’re never billed for tenants you haven’t enabled.
What Microsoft licensing do my clients need?
CloudCapsule works best with Microsoft 365 Business Premium or above. Reduced licensing leaves key security signals and controls unavailable, so assessments and fixes can only cover what the tenant actually licenses. We flag those gaps for you on every report.
Do you offer Academic or Enterprise pricing?
Yes. Analyze covers unlimited tenants under 1,000 users at one flat price. Tenants over 1,000 seats, large MSP portfolios, and academic or nonprofit organizations get custom pricing — reach out and we’ll size it to your book of business.
Can I cancel anytime?
Yes — monthly billing, cancel anytime. No long-term contract and no lock-in.
What permissions does CloudCapsule need?
Analyze connects through a least-privilege, read-only Microsoft Graph app registration. Manage requests only the narrow write scopes needed to apply the specific fixes you approve, and nothing more. The full permission list is shown during setup and available on request.
How is my data secured and where is it stored?
Choose your data region at signup — EU (Belgium) or US (East). Data is encrypted in transit and at rest, retention is configurable, and access is role-based and audited.
One platform, every tenant
Take command of Microsoft 365 security
See where every client’s Microsoft 365 security really stands, and exactly what to fix. Start free, or book a walkthrough with our team.