Deploy Maester Cloud for $99 a month.
Run Maester Cloud in your own Azure subscription, set up from your account in minutes. You also get a direct line to the roadmap and an optional place on the supporters wall. Cancel any time.
Your support helps keep the Maester core tests open source, free, and current as Microsoft 365 and security threats evolve.
I'm Merill Fernando, the creator of Maester. I grew up in Sri Lanka and know what it feels like when useful technology exists but is priced out of reach. Backing Maester Cloud helps keep the Maester core tests open, maintained, and free for admins, schools, nonprofits, and small teams everywhere.
Self-host today, hosted next
Run it in your own Azure
Subscribe, sign in to your account, and set up Maester Cloud in your own Azure subscription, under your governance and in the region you choose. Cancel any time.
We run it for you
A dedicated, isolated instance we operate, with updates, storage, monitoring, and backups handled. Join the waitlist and we will get in touch as it opens.
Every subscription funds the open core
Self-hosting is in private preview. Subscribing gets you the product and funds the work that keeps the Maester core framework and tests open, free, and current: new checks, better CIS and CISA coverage, docs, bug fixes, and security updates.
Two paths. Self-host Maester Cloud in your own Azure subscription today, or join the waitlist for hosted cloud, enterprise procurement, compliance, or support needs.
Deploy Maester Cloud in your own Azure subscription
Deploy Maester Cloud into your own Azure subscription today, guided end to end from your account. Your subscription also funds keeping the Maester core open and free for everyone.
- Funds on-going Maester Core (tests) development
- Deploy Maester Cloud in your own Azure subscription
- Guided setup, no infrastructure work to figure out
- Basic deployment support
- Switch to Hosted Maester Cloud at any time
- Influence feature requests and backlog priority
- Unlimited users and tenants
- Optional place on the Supporters wall
- Self-host setup portal, guided end to end from your account
- Deploy the Maester Cloud MVP into your own Azure subscription
- Run Maester Cloud using the built-in runner
- Microsoft Graph tenant connection
- Drift view in the portal
- Raw and daily reports in the portal
- Upload reports through the API
- Email alerts
- Non-Microsoft Graph connections (e.g. Exchange Online)
Hosted cloud, procurement, compliance, or support
Hosted Maester Cloud is coming soon. Join the waitlist if you want us to run it for you, or if either hosted or self-hosted needs enterprise purchasing, compliance, or support.
Hosted Maester Cloud
- Up and running in minutes, no infrastructure to deploy
- We run updates, storage, monitoring, and backups for you
- 5+ years of tenant history, evidence, and drift tracking
- Runs in an Azure region aligned to your data residency needs
Enterprise readiness
- Purchase orders and procurement support
- SOC 2 / ISO 27001 and vendor review support
- Priority support
Maester AI
optional add-onOff by default. Opt-in guided remediation, arriving later.
Maester MCP
optional, freePlug Maester tests into any MCP-compatible agent. No add-on.
Join the hosted waitlist
Want us to run Maester Cloud for you instead? Leave your email and we will get in touch as hosted opens. If you need enterprise purchasing, compliance, or support on either hosted or self-hosted, the optional details help us plan.
Common questions
Data, security, residency, and how change detection works. See plans and pricing →
What is Maester?
Maester is the open-source PowerShell security test framework for Microsoft 365, with hundreds of community-maintained checks across Entra, Intune, Exchange, Teams, and more. Maester Cloud is the service built around it: the hosted history, drift detection, and evidence layer for your Maester and Zero Trust Assessment results.
What am I paying for?
Self-hosted: Maester Cloud running in your own Azure subscription, set up from your account, with updates and deployment support. Your subscription also funds keeping the open-source Maester core free and current, and you get a direct line to the roadmap.
When am I charged?
You are charged $99 today and then monthly, and you can cancel any time from the customer portal. You also get a direct line to the roadmap and an optional place on the Supporters wall.
What happens when hosted arrives?
Your $99/month simply continues as your self-hosted subscription: deployment in your own Azure subscription, updates, and support. If you would rather move to Hosted Maester Cloud, you can switch at any time and stop paying the $99 when you do. Either way you can cancel whenever you like.
Does Maester Cloud run Maester for me?
Your choice. Keep running Maester and Zero Trust Assessment in your own environment and add one cmdlet to send the results, or let the hosted Maester Runner run everything inside Maester Cloud, no separate steps. Either way it stores, compares, alerts on, and preserves the results.
Where does my data live?
An isolated instance in the Azure region you choose. Send results from your own CI and Maester Cloud never connects to your tenant at all. Use the hosted Maester Runner and it reaches your tenant only through an Entra app you create and control (managed identity or federation, no secrets or certificates).
How does data residency work?
You choose an Azure region at setup. All report data (JSON, HTML, and history) is stored and processed in that region and stays there. Billing metadata may live in our central control plane, but security report data stays regional.
What data is actually stored?
Only Maester and Zero Trust Assessment results. When you send results yourself, Maester Cloud never connects to your tenant. You run the tests and export the output. If you use the hosted Maester Runner, it reaches your tenant only through an Entra app you create and control (managed identity or federation, no secrets or certificates).
Is AI on by default?
No. Maester Cloud ships with AI disabled. Maester AI is an opt-in add-on you turn on only if you want it, and it arrives later. Separately, the Maester MCP is free for everyone: a Model Context Protocol server you can plug into any agent, including Microsoft Foundry, Microsoft Copilot, and Microsoft Security Copilot, so your own copilots can query Maester tests and results.
How are changes detected?
Each export is diffed against your previous run for the same tenant, surfacing new failures, fixes, and accepted risks, pinned to a date and run ID across 5+ years of tenant history.
How do alerts reach me?
Through your own Microsoft 365 shared mailbox, connected at setup. Notifications come from your tenant with a familiar sender identity, not from us.
How much tenant history is kept?
Maester Cloud retains tenant history for 5+ years, with one retained run per tenant per day. Custom retention can be discussed during onboarding.
How does Maester Cloud authenticate users?
Portal access is Entra-only after setup. You control access by assigning users to your own Entra app role. V1 treats users as a single access level; granular roles can come later.
How does the subscription support open source?
Every paid plan helps keep the Maester tests open, maintained, and aligned with CIS, CISA, and evolving standards. You receive a real service while funding better security for the whole community.