Does Aegis Eight support Google Workspace?

Yes. Aegis Eight supports both Microsoft 365 and Google Workspace with the same Essentials assessment and continuous monitoring. Google Workspace customers configure domain-wide delegation in the Admin Console; Microsoft 365 customers use admin consent.

Does Aegis Eight read our emails?

No. Assessments use read-only security configuration metadata only — never email, file, chat, or calendar content.

How long does a free assessment take?

Usually 2–5 minutes after read-only access is granted. The Essentials PDF report is emailed when the scan completes.

Can I revoke access after connecting?

Yes. Remove the Aegis Eight app from Microsoft Entra or revoke Google domain-wide delegation at any time. Scanning stops immediately.

A free one-off Essentials assessment per tenant. Continuous monitoring is A$59/month (intro; A$99/month list) or A$590/year designed for up to 50 users; A$299/month or A$2990/year designed for up to 250 users with configurable scan cadence; custom pricing for Enterprise. MSPs pay per managed tenant from A$25/tenant/month with a free 60-day pilot on request.

No long-term contract. Pay monthly or annually (annual saves two months). Cancel anytime from the dashboard. On cancellation scanning stops immediately and customer data is purged within 30 days on request.

Australian SMEs running Microsoft 365 or Google Workspace (up to ~250 users) and MSPs managing Essentials posture across multiple cloud tenants.

Pricing

Continuous Essentials posture monitoring

Daily Essentials scans of your cloud tenant, with hash-anchored evidence retained and an email when something material to your posture changes — a new privileged admin, MFA regression, a device falling out of compliance, backup protection weakening.

Same pricing for Microsoft 365 and Google Workspace. Platform-specific connection and counting details ↓

Annual billing saves two months (A$118 on Business vs paying monthly).

Cloud platform for monitoring

Admin consentDomain-wide delegation

Free assessment

One Essentials maturity report per cloud tenant.

A$0

✓One full Essentials scan
✓Maturity report (ML0 / ML1 / ML2 / ML3) emailed as PDF
✓Per-control findings with remediation guidance
✓Read-only access — permissions shown before you connect
✓Upgrade planner: see what each remediation lifts you to

Assess my cloud tenant

No card. One per tenant (Microsoft 365 or Google Workspace).

Most teams start here

Business

Continuous Essentials monitoring for a single tenant up to 50 users.

A$99A$59/month

✓Daily Essentials drift scans
✓Drift alerts: new privileged admin, MFA regression, device compliance loss, backup weakening
✓Dashboard maturity trend after each scan (optional weekly or monthly all-clear digest)
✓90-day full evidence retention (raw API responses, sha256-hashed)
✓Per-finding hash-anchored evidence packs and CSV finding export — suitable for insurer / assessor review
✓Email support

Designed for orgs up to 50 users. Contact us if you need a larger single-tenant plan.

Growth

Single tenant up to 250 users, with longer evidence retention for board / cyber-insurance reviews.

A$299/month

✓Everything in Business
✓Configurable scan cadence: daily, every 6 hours, or hourly
✓Designed for up to 250 users
✓12-month full evidence retention
✓Quarterly board-ready summary email
✓White-label report branding (logo and colours)
✓Priority email inbox

Enterprise

For organisations above 250 users, regulated industries, or anyone needing custom retention / DPA terms.

Custom

✓Everything in Growth
✓Unlimited users — pricing scales by tenant size
✓Unlimited evidence retention
✓Custom alert triggers for material posture changes
✓API access to scans, findings, and evidence pack metadata
✓Signed DPA, custom security schedule, named contact

Talk to us

What’s in each plan

Every paid plan includes drift scans on the plan cadence, the alerting pipeline, dashboard maturity trend, and the hash-anchored evidence chain. Differences are scan frequency (Growth+), retention, board summaries, branding, and tenant sizing guidance.

	Free	Business	Growth	Enterprise
Essentials maturity report (ML0–ML3)	One (PDF)	Dashboard after each scan	Dashboard + quarterly board summary	Dashboard + quarterly board summary
Drift scan cadence	—	Daily	Daily, every 6 hours, or hourly	Daily, every 6 hours, or hourly
Change-triggered alerts (MFA / admins / devices / backup)	—	✓	✓	✓ + custom triggers
Hash-anchored evidence packs + CSV export	—	✓	✓	✓
Evidence retention (full API response bodies)	n/a	90 days	12 months	Unlimited
Quarterly board-summary email	—	—	Quarterly email	Quarterly email
White-label report branding	—	—	✓	✓
API access	—	—	—	✓
Custom alert triggers	—	—	—	✓
Tenant size (guidance)	Any	Designed for ≤50 users	Designed for ≤250 users	Unlimited
Support	Self-serve	Email	Priority inbox	Named contact + DPA

Platform details

Plans and pricing are identical. Expand a platform below for connection steps, how users are counted, example alerts, and MSP onboarding.

Microsoft 365

Connect:a Global Administrator grants read-only access via Microsoft’s one-click admin consent flow. Start from the free scan (choose Microsoft 365) or share an admin-consent link for MSP clients.

Users counted: active Entra ID members and external members — the same count Microsoft uses for licensing. Guests and disabled accounts are excluded.

Example alert: “Alex Chen was assigned the Global Administrator role on 2026-05-31 14:22 UTC. MFA registration: not yet completed. Evidence: snapshot 8c4f… SHA-256 a91d…”

MSP onboarding:share your tenant’s admin-consent URL — no new contract per client tenant.

Full Microsoft Graph permission list →

Google Workspace

Connect: a Super Admin adds our service account Client ID and read-only OAuth scopes under Admin Console → Security → API controls → Domain-wide delegation, then verifies the connection in the portal. Start from the free scan (choose Google Workspace).

Users counted: active Directory users from Admin SDK. Guests and disabled accounts are excluded.

Example alert: “Alex Chen was assigned the Super Admin role on 2026-05-31 14:22 UTC. 2-Step Verification: not enrolled. Evidence: snapshot 8c4f… SHA-256 a91d…”

Honest parity: some sub-controls have limited Google API signal (e.g. Windows desktop patching, native Google Docs macros). Those are scored as no visibility or not applicable — not guessed.

MSP onboarding: share the Google connect wizard — Client ID, scopes, and DWD steps — no new contract per client tenant.

Full Google Workspace scope list →

Managed Service Providers

Per-tenant pricing for MSPs

If you manage cloud tenants for multiple clients, the fleet dashboard ranks who needs attention (recent material changes and maturity) and shows a cross-tenant change feed — e.g. a new privileged admin or MFA coverage gap on a specific client. Billed per managed tenant (Microsoft 365 or Google Workspace) rather than per seat. MSP overview → Platform-specific onboarding →

1 – 20 tenants

A$25 per managed tenant / month

21 – 50 tenants

A$22 per managed tenant / month

51 – 200 tenants

A$18 per managed tenant / month

200+ tenants

Custom — talk to us

Multi-tenant fleet dashboard

Needs-attention ranking across managed tenants (change count and maturity) plus a cross-tenant feed of recent material changes — drill into any client’s change history.

White-label on Growth+

Optional branded PDF reports (logo and colours) on Growth or Enterprise managed tenants. Contact sales for volume MSP billing; white-label is a Growth+ feature, not a separate Stripe SKU.

Bulk onboarding

Connect tenants via your existing partner relationship — admin-consent link for Microsoft 365, DWD wizard for Google Workspace. No new contract per tenant.

Per-tenant alerts and digests

Change-triggered alerts per tenant, plus optional weekly or monthly all-clear heartbeats. There is no separate fleet-wide daily digest email today.

Contact sales — no self-serve MSP checkout. Minimum spend A$299 / month (roughly 12 managed tenants at the entry tier). Above that, the per-tenant rate applies. Full MSP overview →

Talk to us about an MSP plan

Frequently asked

Which cloud platforms do you support?

Microsoft 365 and Google Workspace — same plans, same pricing, one managed tenant per cloud estate. Hybrid organisations with both count as two tenants. Connection steps, user counting, and alert examples differ by platform; see platform details below or jump to Microsoft permissions / Google permissions.

Why isn’t this $19/month?

A single useful alert — for example, that a privileged admin was added without MFA — is worth far more than $19. A typical Australian Essentials engagement with a cyber consultant runs AUD $1,500–$5,000 for a point-in-time review, and that snapshot goes stale the moment a policy drifts. Aegis Eight monitors the same control surface every day, retains hash-anchored evidence, and emails you when something material changes. Business monitoring starts at A$59/month (introductory; A$99 list) or A$590/year — priced to sustain daily scans, evidence retention, and support, not a stripped-down checklist.

How are users counted?

Active directory users in your connected tenant, excluding guests and disabled accounts. We read the count on each scan for sizing guidance (Business is designed for up to 50 users, Growth for up to 250). Plans do not auto-change — if you need a larger or multi-tenant arrangement, email [email protected]. Microsoft 365 uses Entra ID membership; Google Workspace uses Admin SDK Directory — see platform details.

Is there a contract?

No long-term contract. Pay monthly or annually (annual saves two months). Cancel anytime from the dashboard or by replying to any Aegis Eight email. On cancellation we stop scanning immediately and purge customer data within 30 days on request — see the security page for detail.

What does an alert look like?

Plain-English email with the change, the timestamp, hash-anchored API evidence, and which Essentials control it affects. No noise from routine activity — alerts fire when something material to posture changes. Platform-specific examples (Global Admin vs Super Admin wording) are in platform details.

Will I get an email every day even when nothing changed?

No. Drift alerts are change-triggered, not scheduled. On a scan day where the diff against the previous snapshot finds nothing of severity highor above, nothing arrives in your inbox — the dashboard just shows “no changes since last scan”. Maturity trend is always available in the dashboard after each daily scan. You can optionally enable a weekly or monthly “all clear” heartbeat digest in dashboard settings — it is off by default.

Do you sell this through partners / MSPs?

Yes — see the MSP page or the MSP section below. MSP is volume billing (contact sales): per managed tenant, multi-tenant fleet dashboard, and optional white-label reports on Growth+ managed tenants. Microsoft 365 and Google Workspace tenants count equally. There is no self-serve MSP checkout — email [email protected].

How do I pay?

Card payment via our PCI-compliant payment processor at checkout. Prices are in AUD; if you need USD or NZD invoicing, email [email protected] and we’ll set it up.

Will Aegis Eight ever change my cloud settings?

No. Every permission we request is read-only — there is no write surface in the product. We never read email, files, chat, or calendar content. Scope lists and connection methods for each platform are in platform details and on the permissions pages.

How does Aegis Eight work with Microsoft Defender and Intune?

Aegis Eight reads posture signals from your tenant — Conditional Access, Intune device compliance, admin role assignments, and related configuration metadata. It is a read-only posture-evidence layer that sits alongside Defender, Intune, and your SIEM; it does not replace EDR or antivirus.

What export formats are available for auditors?

The free scan delivers a PDF maturity report by email. Subscribers (Business and above) can download PDF reports, JSON evidence packs with hash-anchored API snapshots, and CSV finding bundles from the dashboard. Growth and Enterprise add longer retention and quarterly board-summary PDFs. Aegis Eight is not IRAP-certified; packs are suitable for insurer and assessor review. Signed RFC3161 timestamping remains on the roadmap.

Questions about pricing or invoicing? [email protected] · Security & data handling · Microsoft 365 permissions · Google Workspace permissions