TrueConfig

TrueConfig is a Desired State Configuration platform purpose-built for Microsoft 365 identity and access security. Unlike one-time security audits or manual reviews, TrueConfig runs a continuous DSC loop: you define your desired security baseline once (using templates from CIS, Microsoft, or custom controls), and TrueConfig monitors your tenant around the clock for configuration drift.

The platform detects deviations across critical security surfaces including Conditional Access policies, privileged role assignments, MFA enforcement, legacy authentication protocols, and application credential expiry. When drift occurs—whether from manual changes, temporary exceptions that became permanent, or policy gaps as new apps and users are added—TrueConfig alerts your team and enables one-click auto-remediation with safety guardrails.

Designed for IT managers at SMBs (100-1000 employees) and MSPs managing multiple client tenants, TrueConfig eliminates the hours spent manually reviewing logs during audits or incident response.