Skip to main content

From the creator of T-Minus 365

The Microsoft 365 security platform Nick built for MSPs.

Every tactic you’ve seen on the channel — CIS Controls, NIST CSF, Conditional Access, drift hunting — turned into a single platform that assesses any tenant in 60 seconds and helps you fix what matters first.

Built by someone who’s lived inside MSPs

CloudCapsule isn’t a side project. It’s the product Nick Ross — host of T-Minus 365 and a 3× Microsoft MVP — built after years of watching MSPs fight the same M365 security problems.

3× Microsoft MVP

Recognised three years running for community contributions in Microsoft 365 security.

20,000+ MSPs on YouTube

Weekly videos on Microsoft 365 security, Intune, Conditional Access, and Copilot governance.

Built inside MSPs, not a lab

VP of Product and CTO roles at two MSPs, plus product time at Pax8 — every workflow comes from real client books.

6+ years writing for SMB IT

Long-form blog, newsletter, and courses unpacking Microsoft 365 for the SMB and MSP space.

From channel to console

Every T-Minus 365 best practice, automated.

Stop running scripts. Start running a security practice.

If you’ve followed along with the CIS Controls deep-dives, the Conditional Access blueprints, or the multi-tenant PowerShell videos — CloudCapsule is what happens when you turn all of that into a platform.

  • Connect a tenant with a least-privilege Graph app and get a full posture read in 60 seconds.
  • See findings mapped to CIS, NIST CSF 2.0, Essential 8 and Microsoft’s own baselines.
  • Fix issues with 100+ one-click Quick Fixes and guided workflows — across every tenant at once.
  • Catch drift the moment a setting reverts, without writing a single line of PowerShell.

Trusted by MSPs and MSSPs worldwide

848AtechBezaluBizwayCCNSCURAitConXioNDigital 323Fluent2InterconnektGCSIteonXDCRavnITAgilitec IT
We were running the T-Minus 365 playbooks manually across every tenant. CloudCapsule collapsed two days of audit work into about an hour, every Monday.
MSP partner · Director of Security Operations — placeholder, replace before publish

What you get when you start free

Analyze is the free starting point. Connect as many tenants as you want, run as many assessments as you want — no credit card to begin.

Full-stack M365 assessment

Identity, email, devices, apps and data — scored across 250+ controls in 60 seconds per tenant.

Framework mapping

Every finding mapped to CIS, NIST CSF 2.0, Essential 8 and Microsoft baselines.

Brandable client reports

White-label executive PDFs with your logo, ready to send to the client before you hang up.

Cyber-insurance readiness

Surfaces insurer-relevant gaps before the renewal questionnaire lands.

Licensing gap detection

Flags paid security features the client already owns but hasn’t turned on.

Unlimited tenants

Run Analyze across every tenant in your book. No per-tenant fees on the free tier.

Questions from the channel, answered

Is this just a paywalled version of the T-Minus 365 scripts?

No. The scripts are still free — Nick keeps publishing them on the channel and the blog. CloudCapsule is the platform he built for MSPs who’d rather not run, maintain, and stitch together those scripts across every tenant. Same philosophy, vastly less PowerShell.

Do I need a credit card to start?

No. The free Analyze plan is the entry point. Connect a tenant, run an assessment, see the report — no card required.

What permissions does it need on a tenant?

Analyze uses a least-privilege, read-only Microsoft Graph app registration. Manage requests only the narrow write scopes needed to apply the specific fixes you approve, and nothing more. The full permission list is shown during setup.

Will it work on tenants without M365 Business Premium?

CloudCapsule works best with Microsoft 365 Business Premium or above. Lower SKUs leave key security signals and controls unavailable, so assessments and fixes can only cover what the tenant actually licenses. Those gaps are flagged on every report.

Where is my data stored?

Choose your data region at signup — EU (Belgium) or US (East). Data is encrypted in transit and at rest, retention is configurable, and access is role-based and audited.

How big is the platform’s footprint with MSPs today?

CloudCapsule is deployed across MSPs and MSSPs in EMEA, North America, and APAC — see the partner logos above for a sample. Most start with Analyze across their whole book and add Manage on tenants where it earns its keep.

For the T-Minus 365 community

Run your first tenant assessment in 60 seconds.

Free to start. Unlimited tenants on Analyze. Nick’s team gets you onboarded personally if you want a walkthrough.

  • No credit card to start
  • Connect any M365 tenant in minutes
  • 60-second first assessment
  • Brandable client reports

Monthly, cancel anytime — no long-term contract.