Commercial stewardship for an open-source project.
Maester Cloud is the hosted history, drift detection, sharing, configuration, and evidence layer for Maester and Zero Trust Assessment results. It's one commercial product built around an open core — not a company-owned control point.
Maester stays open source
Maester is the open-source runner and test ecosystem for Microsoft 365 security. It remains community-driven and MIT-licensed.
- The core runner stays free.
- The tests stay free.
- Running Maester locally stays free.
- MIT license and broad reuse stay intentional.
What Maester Cloud is (and isn't) in v1
You run the assessments in your own environment, then send JSON and HTML results to a hosted portal. Maester Cloud keeps the history, detects drift, and alerts you.
- It does not run Maester for you.
- It does not host scheduled assessment execution.
- It does not access your tenant to perform checks.
- It does not provide granular portal roles yet.
A managed daily runner is planned as a future add-on.
Every plan keeps the tests honest.
Microsoft 365 security standards keep evolving. CIS, CISA, and Microsoft baselines change, and the tests have to keep pace. The subscription — hosted or Sponsor — primarily funds that open-source maintenance work.
Every plan helps keep Maester tests open, accurate, and aligned with evolving security standards.
This isn't a donation. You receive a real hosted service or support plan while also helping improve security for the broader community.