Skip to main content

Pricing

Reporting, management, auditing and alerting. Free, forever.

Community includes reporting and insights, every management action, auditing with unlimited retention, event alerting, all scheduling and every export format — for one tenant, free with no user limit and no expiry. Pro adds licence optimization, posture and compliance baselines, automation, white-label and unlimited tenants and operators. Defend stacks on Pro with threat detection, investigation and supervised response. Every install starts with 30 days of all of it, then drops to Community with your data intact. Paid tiers are priced by the total users you look after, with unlimited tenants and operators — not again for every client you add.

· Annual billing, offline licence key · 30-day trial of every feature, no card · Soft limits with a 30-day grace period
Founding customers

30% off the first year of Pro or Defend for anyone who converts from their trial before 31 December 2026. Multi-year: 20% off two years, 30% off three.

Community

Reporting, management, audit and alerts

Free forever · no user limit
Get notified
Users
No limit
Tenants
1
Operators
1 · extra seats $49/yr
Audit history
Unlimited
  • Every report and dashboard — M365 Overview, Identity & Access
  • Every admin action — MFA and TAP, JIT elevation, offboarding, app consent, mailbox and quarantine operations
  • Bulk user import from CSV
  • Audit collection and search across Entra, Exchange, SharePoint, Teams and DLP — unlimited retention
  • Custom event alert rules with email and Teams notifications
  • Scheduled collections and scheduled report delivery
  • Every export format — CSV, HTML, Excel and PDF
  • Breach-exposure checks (Have I Been Pwned)
  • Role-based delegation
  • Posture and compliance baselines
  • Automation, playbooks and multi-tenant operations
  • White-label branding
  • Threat detection and response
Most popular

Pro

Insight, posture and automation at scale

$490 /year, from · $41/mo
Get notified at launch or buy now, no sales call →
Users
Banded
Tenants
Unlimited
Operators
Unlimited
Audit history
Unlimited
  • Everything in Community, plus:
  • Licence and cost optimization — dormant and underused assignments
  • Posture analysis and executive-ready summaries
  • CIS Microsoft 365 and CISA SCuBA baselines — findings, drift trends and history
  • Automated playbooks and remediation
  • Approval queues and policy guardrails
  • Work queues and cross-tenant operations
  • Audit compaction and rollups
  • White-label — logos, colours, product name, report and email headers
  • Threat detection, investigation and response

Defend

Detect, investigate, contain

$990 /year, from · $83/mo
Get notified at launch or buy now, no sales call →
Users
Banded
Tenants
Unlimited
Operators
Unlimited
Audit history
Unlimited
  • Everything in Pro, plus:
  • Security Threats dashboard
  • MITRE ATT&CK mapped detection catalog
  • Incident workbench and investigation
  • Session timeline reconstruction
  • Blast-radius analysis
  • Watchlists and suppressions
  • Supervised containment actions

Price by users under management

Total licensed users across every tenant you connect. Unlimited tenants at each band. List prices, per year.

Users under management Pro Defend
Up to 150 users $490 /yr · $41/mo $990 /yr · $83/mo
Up to 500 users $990 /yr · $83/mo $1,900 /yr · $158/mo
Up to 1,000 users $1,800 /yr · $150/mo $3,600 /yr · $300/mo
Up to 2,500 users $2,900 /yr · $242/mo $5,900 /yr · $492/mo
Up to 5,000 users $4,500 /yr · $375/mo $8,900 /yr · $742/mo
Up to 10,000 users $6,900 /yr · $575/mo $13,900 /yr · $1,158/mo
Over 10,000 users Custom quote Custom quote

Monthly figures are the annual price divided by twelve; billing is annual. Defend stacks on Pro — it cannot be purchased on its own. Community includes one operator; extra operator seats are $49/year each. Pro and Defend include unlimited operators.

Every capability, side by side.

Community covers reporting and insights, every management action, auditing with unlimited retention, event alerting, all scheduling and every export format — for one tenant, free with no user limit. Pro adds insight reports, compliance baselines, automation, white-label and unlimited tenants and operators. Defend stacks on Pro with threat detection, investigation and supervised response.

Capability Community Pro Defend
Price Free From $490/yr From $990/yr · includes Pro
Reporting & insights
Reports — tenant inventory, directory, mailboxes, licenses, apps ✓✓✓
Dashboards — M365 Overview, Identity & Access ✓✓✓
Security Threats dashboard ——✓
Licence & cost optimization reports —✓✓
Posture analysis & executive summaries —✓✓
Management
All interactive admin actions — users, groups, mailboxes, quarantine ✓✓✓
Bulk user import from CSV ✓✓✓
MFA enforce/disable, Temporary Access Pass ✓✓✓
Just-in-time elevation, offboarding workflow ✓✓✓
App consent approve/reject ✓✓✓
Automated playbooks & remediation —✓✓
Approval queues & policy guardrails —✓✓
Work queues & cross-tenant execution —✓✓
Auditing
Audit collection — Entra, Exchange, SharePoint, Teams, DLP ✓✓✓
Audit search — unlimited local retention ✓✓✓
Audit compaction & rollups —✓✓
Alerting & threat center
Custom event alert rules ✓✓✓
Email & Teams alert notifications ✓✓✓
MITRE ATT&CK mapped detection catalog ——✓
Incident workbench, session timeline, blast radius ——✓
Watchlists & suppressions ——✓
Supervised containment actions ——✓
Scheduling
Background sync — audit, directory, enrichment ✓✓✓
Scheduled report delivery ✓✓✓
Compliance & posture
CIS Microsoft 365 v6/v7 & CISA SCuBA baselines —✓✓
Compliance findings & drift trends —✓✓
Data & exports
Exports — CSV, HTML, YAML, NDJSON ✓✓✓
Exports — Excel & PDF ✓✓✓
Breach-exposure checks (Have I Been Pwned, own key) ✓✓✓
PowerShell Gateway collection ✓✓✓
Branding
White-label — logos, colours, product name —✓✓
Remove "Powered by" attribution —✓✓
Report & email headers, sign-in background —✓✓
Scale & access
Users under management No limitBandedBanded
Connected tenants 1UnlimitedUnlimited
Operators 1UnlimitedUnlimited
Extra operator seats Add-on · $49/yr——
Role-based delegation — roles, expiry, justification ✓✓✓
Virtual tenants / multi-workspace —RoadmapRoadmap
Governance — access reviews & ownership RoadmapRoadmapRoadmap
Platform
Local-first execution — no vendor cloud ✓✓✓
Offline licence key, no phone-home ✓✓✓
Microsoft 365 sign-in (Entra ID OAuth) ✓✓✓
Support CommunityEmailEmail

Community includes one operator; extra operator seats are $49/year each. Estates over 10,000 users under management are quoted — talk to us.

Pricing FAQ

Direct answers on price and value.

Why is Community Edition free with no user limit? What's the catch?

There is no catch and no expiry. Community includes every report and dashboard, every management action, audit collection and search with unlimited local retention, custom event alert rules with email and Teams notifications, all scheduling and every export format — for one tenant. We charge for licence optimization, posture and compliance baselines, automation at scale, white-label, unlimited tenants and operators, and the Defend threat-detection layer.

How does the 30-day trial work?

Every install starts with every feature switched on for 30 days, with no card and no sales call. On day 31 the paid features switch off and the application becomes Community Edition. Nothing you collected is deleted — Community retention is unlimited, so every audit record stays searchable, and the full archive is still there if you later license Pro or Defend.

How do I buy, and do I need to talk to sales?

No sales call. Pick your band on the buy page, pay by card through a hosted checkout that handles tax and issues an invoice, and the licence key arrives by email within minutes. Paste it into Settings → Licence; it is verified offline. Purchase orders and invoices are available on request for larger orders and for public-sector buyers. Only estates over 10,000 users are quoted.

Why price by users under management instead of per user, per admin, or per tenant?

Per-user pricing penalises exactly the organisations that most need posture assessment, and creates friction every time headcount moves. Per-admin pricing penalises teams for letting more than one person look at their own security data. Per-tenant pricing penalises MSPs with many small clients. SysClaw prices by total licensed users across all connected tenants, in bands, with unlimited tenants at every paid tier. A 300-user tenant and a 480-user tenant pay the same. Thirty client tenants of 80 users each are one 2,400-user band.

Do I pay for each administrator who uses SysClaw?

Pro and Defend include unlimited operators — your whole team can use it. Community includes one operator, and extra operator seats are a $49/year add-on each. Either way, we charge for the size of the estate you manage, not for how many people look at their own security data.

How does SysClaw compare on price with AdminDroid, ManageEngine, Syskit and CIPP?

Published list prices, September 2026, for a 500-user tenant: ManageEngine M365 Manager Plus is $945 a year for Standard and $1,545 for Professional, which is the edition with auditing and alerts. Syskit Point's security plan is about $1,200 a year at that size. AdminDroid starts at $198 a year and prices per licensed user. CIPP is free to self-host or $99 a month hosted, and is built for MSPs rather than a single tenant. SysClaw Pro at 500 users is $990 a year and includes posture assessment and drift history that none of those products have; Defend at $1,900 adds detection, investigation and response, which in that list only exists as a separate product such as Huntress ITDR at roughly $57 per user per year.

How does this compare to Microsoft Purview and Defender?

Microsoft's own security and compliance add-ons are licensed per user per month, so at any real headcount they represent a materially larger annual commitment than SysClaw. They are capable products and many teams run SysClaw alongside them rather than instead of them. What SysClaw adds is unified posture assessment against published baselines, a single investigation workbench, and audit history that lives on your own infrastructure rather than expiring with the platform's retention window.

What happens to my audit history when Microsoft's retention expires?

That is one of the reasons to collect it — and it is free. Microsoft retains audit records for 180 days on most licences, one year for some workloads on E5, and caps a single audit search at a 180-day range regardless of retention. SysClaw keeps every record it collects in a local database on your machine for as long as you have disk, on every tier including Community, with no per-gigabyte ingestion charge. Pro adds compaction and rollups for very large archives.

Is there a founding-customer discount?

Yes. Founding customers who convert from their trial before 31 December 2026 get 30% off the first year of Pro or Defend. Two-year licences are 20% off and three-year licences 30% off, at any time. List prices do not change; the discounts do.

Why annual billing instead of monthly?

SysClaw is a local-first application, not a cloud service. Monthly billing implies monthly online licence verification, which would contradict the promise that the product works with no connection to us. Annual licensing with an offline cryptographic key means the application keeps working offline after activation, with no dependency on our servers being available. We show the per-month equivalent next to each price so it is easy to compare.

What happens if I exceed my tier's user band?

Limits are soft, with a 30-day grace period. If your total user count crosses a band the application tells you and gives you a month to move up. Community capabilities keep working throughout; you are never locked out of data you have already collected.

Do you offer MSP or volume pricing?

Every paid tier includes unlimited tenants and unlimited operators, so an MSP managing thirty clients pays for the total number of users under management rather than per client. Thirty clients averaging 80 users is a 2,400-user band, Pro at $2,900 a year, or about $8 per client per month. White-label is included from Pro upward, so the reports and emails carry your brand. Estates over 10,000 users, multi-year commitments and MSSP deployments are quoted directly.

Competitor prices are published list prices as of September 2026 and may change; check the vendor's site before relying on them.

Get Started

Be there at launch — or talk to us about Pro.

SysClaw is in final packaging — leave your email on the launch list and you get the download the day it ships. Every install starts with 30 days of every feature, then stays free forever with no user limit — no credit card, no demo required. If you would rather see it first, schedule a 30-minute walkthrough with a SysClaw engineer for Pro or Defend.

Pro demo includes:

Live walkthrough of MITRE detection and incident workbench
Investigation of simulated OAuth grants and inbox forwarding incidents
Deep dive into the local-first architecture and the exact network access it needs
We respect your privacy. No spam. No credential requests.
Security Notice: Never include Microsoft tenant credentials, API secrets, tokens, or sensitive production configuration exports in website forms.