Tensor AIPurchase to first alert in ten minutes.
Welcome. This guide walks you from Azure Marketplace purchase to the moment your first real-time security alert lands in your inbox.
Before you start
You need a Microsoft 365 admin account with either the Global Administrator or Privileged Role Administrator role. That is the one place we ask for elevated access, and only for the one-time consent that lets TenantGuard read your Graph security data.
1 · Subscribe on Azure Marketplace
Open the TenantGuard listing, click Get it now, sign in with your Microsoft 365 admin, choose the Pro plan (£7.99 per user per month, 14-day free trial), enter your seat count, and confirm. Azure redirects you to our landing page.
2 · Activate
On the landing page you will see your plan, seat count and monthly total. Enter your contact email and company name, then click Activate & grant admin consent. Microsoft will show you the read-only permissions TenantGuard needs:
AuditLog.Read.AllDirectory.Read.AllSecurityEvents.Read.AllIdentityRiskyUser.Read.AllSecurityActions.Read.All
3 · Wait five minutes
Our worker polls your tenant every five minutes. On the first cycle your dashboard populates with Secure Score, sign-in volume for the last 24 hours, and anything Entra Identity Protection has flagged as risky.
4 · Set your alert recipients
In the app, go to Alert rules. Four rules ship enabled by default:
| Rule | What it catches |
|---|---|
| Risky sign-ins | Any sign-in flagged low, medium or high risk |
| MFA changes | Authentication methods added, removed, or reset |
| Privileged role changes | Role assignments, PIM activations, admin role membership |
| Secure Score drop | Score falls more than 5% below the 7-day average |
Enter your recipient emails per rule. Alerts fire within five minutes of the underlying event.
Common questions
Where is my data stored? Azure UK South only. Nothing leaves the UK region in normal operation.
How long is data kept? 90 days of sign-in and audit events. Secure Score snapshots for the life of the subscription.
How does billing work? Azure bills you monthly by seat count. Counts toward your MACC. Change seat count in the Azure portal and TenantGuard updates within five minutes.
How do I cancel? Unsubscribe in the Azure portal. Polling stops within the hour. Data is deleted 30 days after cancellation.
Adding more admins. Any user in your M365 tenant who signs in at /app gets an admin account automatically.
Help
Email support@tensorsoftai.io. Response times are on the support page. Live status at tenantguard.tensorsoftai.io/healthz.