CIPP vs Inforcer for Microsoft 365 multi-tenant management
CIPP and Inforcer both help an MSP manage many Microsoft 365 tenants from one place: apply security standards across clients, catch drift, and handle users without logging in to each tenant. They are built and sold very differently. CIPP is an open-source project you can host yourself for the cost of Azure, or have its maintainers host for a flat monthly fee. Inforcer is a commercial platform with per-tenant pricing, minimum commitments and a threat detection add-on. This page compares the two on what each publishes, with Augmentt as a third option, checked on 21 October 2026.
Key facts, October 2026
- CIPP is free to self-host, at roughly €25 a month in Azure costs, or €99 a month hosted by CyberDrain, month to month.
- Inforcer doesn't publish prices. 365 Manager is priced per tenant with a 20-tenant minimum, TDR per mailbox user with a 50-user minimum, and both need a 12-month commitment.
- CIPP doesn't offer demos or trials. Inforcer offers a two-week free trial.
- Inforcer announced a $50 million Series C led by Insight Partners on 30 July 2026.
The short version
| CIPP | Inforcer | Augmentt | |
|---|---|---|---|
| Model | Open source; self-hosted or hosted by CyberDrain | Commercial SaaS | Commercial SaaS |
| Price | Free self-hosted (about €25 per month in Azure); €99 per month hosted | Not published; custom quote | Not published; $250 per month quoted as an estimated entry point |
| Billing unit | Per hosted instance | Per tenant (365 Manager); per mailbox user (TDR) | Per user |
| Minimum | None stated | 20 tenants (365 Manager); 50 users (TDR) | Not published |
| Term | Month to month, cancel any time | 12 months | Set in written quote |
| Trial | No demos or trials (self-hosting is free) | Two weeks | 7 days, no card |
| Onboarding | Optional, $750 one-time for a 90-minute session | Included onboarding and training | Hands-on onboarding |
| Standards | 150+ | Policy baselines for Intune, Conditional Access, Teams, Entra ID and Defender; CIS, Essential 8, NIS2 and CMMC assessments | CIS, NIST, SCuBA, Secure Score baselines |
| Threat detection | Alerting | TDR module contains compromised accounts and removes malicious email | Breach monitoring with one-click remediation |
| Support | Unlimited on hosted; Discord | Vendor support | Phone and chat |
CIPP
CIPP was created by Kelvin Tegelaar in 2021 as an open-source multi-tenant management tool for Microsoft 365. It handles user management, including onboarding, offboarding, calendar permissions and shared mailboxes, and deploys standards across your client base, with more than 150 available. New standards usually apply within zero to three hours, or immediately with "Run Now". Its documentation covers an API and custom scripting.
You can run it in your own Azure subscription; CIPP's FAQ puts the click-to-deploy configuration at roughly €25 a month. Or CyberDrain hosts it for €99 a month, month to month, cancellable at any time. Hosting includes automatic updates, unlimited support, weekly training and a Have I Been Pwned API key, and CIPP says the hosted version is faster than self-hosting. If you start self-hosted, you can back up and move to hosted later. Optional professional onboarding is $750 for a 90-minute live session.
Two points to know. CIPP doesn't run demos or trials, on the basis that self-hosting is free. And integrations with other vendors get built when that vendor sponsors CIPP at the integration level, so check that the PSA or documentation tool you use is on the list.
Best fit for: MSPs comfortable with a community-driven tool who want low, flat costs and no contract. Check first: that the integrations you need exist, and whether your team can support itself through the docs and Discord.
Inforcer
Inforcer is a multi-tenant platform with two modules. 365 Manager sets and enforces policy baselines across tenants, covering Intune, Conditional Access, Teams, Entra ID and Defender for Business and Defender for Office 365, and runs tenant assessments against CIS, Essential 8, NIS2 and CMMC. TDR monitors for threats, contains compromised accounts and removes malicious email across customers. It integrates directly with PSAs, and it's cloud-hosted with nothing to install.
Pricing is by custom quote, but the request-pricing page sets out the structure. 365 Manager is priced per tenant with a minimum of 20 tenants. TDR is priced per person with a mailbox, with a minimum of 50 users, and doesn't charge for admin, service, guest or shared mailboxes. TDR licences are pooled across your MSP, can move between tenants and can scale back down to your contracted minimum. Both products need a 12-month commitment. Volume and partner growth discounts are available, and there's a two-week free trial covering management, monitoring and TDR. Inforcer says more than 1,400 MSPs use it.
On ownership, Inforcer is venture-backed: it announced a $50 million Series C led by Insight Partners on 30 July 2026, after raising its Series A and B in the preceding 18 months.
Best fit for: MSPs with at least 20 Microsoft 365 tenants who want vendor-supported baselines, compliance assessments and threat response in one product. Check first: the per-tenant and per-user price, and whether you'll stay above both minimums for the full 12 months.
Augmentt
Augmentt sells Microsoft 365 security and management in modules (Secure, Engage, Intune and Discover), priced per user. Its pricing page gives $250 a month as the lowest entry price for one subscription at the minimum seat volume, but calls that an estimate, not a quote. Final price depends on seats, tenants, modules, term and channel. It offers a 7-day trial with no card, and in 2024 announced a freemium programme for auditing and managing clients' MFA and security. Augmentt is based in Ottawa.
Best fit for: MSPs that bill clients per user and want baselines plus licence and app discovery. Check first: your written quote, since the published figure is an estimate.
What to check before switching
- Tenant count and minimums. Count your active Microsoft 365 tenants and licensed mailboxes. Inforcer's minimums are 20 tenants and 50 TDR users for 12 months.
- Partner permissions. Ask each vendor which Microsoft partner relationships and admin roles it needs in your clients' tenants, and how it handles tenants you add or remove.
- Standards mapping. Export your current baseline and compare it against what each tool can enforce. A tool that can't set a policy you rely on leaves a gap.
- Running both. Applying standards from two tools to the same tenant can cause conflicts. Move tenants in batches and switch off the old tool's standards for each batch.
- Who supports it. CIPP self-hosted relies on community support; hosted includes unlimited support from CyberDrain. Inforcer and Augmentt are commercial vendors with their own support teams.
- Logs and evidence. CIPP keeps logs for 90 days by default and can export them for a SIEM. If clients need compliance evidence, check how each tool stores and exports reports.
Frequently asked questions
How much does CIPP cost?
CIPP is free to self-host; its FAQ estimates about €25 a month in Azure costs. Hosted CIPP from CyberDrain is €99 a month, month to month, and you can cancel at any time.
How much does Inforcer cost?
Inforcer doesn't publish prices; you request a quote. Its pricing page says 365 Manager is priced per tenant with a 20-tenant minimum, TDR is priced per mailbox user with a 50-user minimum, and both need a 12-month commitment.
Does CIPP have a free trial?
No. CIPP doesn't offer demos or trials, because you can self-host it for free. Inforcer offers a two-week free trial and Augmentt a 7-day one.
Who owns Inforcer?
Inforcer is venture-backed. On 30 July 2026 it announced a $50 million Series C led by Insight Partners.
Is CIPP open source?
Yes. CIPP is an open-source project created by Kelvin Tegelaar in 2021. CyberDrain offers a paid hosted version.
Prices, minimums and terms come from CIPP's documentation, Inforcer's and Augmentt's own websites, and Inforcer's funding announcement, fetched on 21 October 2026 and listed in our sources file. Related: M365 Tenant Management, Microsoft 365 backup for MSPs.