Ranger · by Forest Integrations

One honest view of your Microsoft 365 security, and the path to strengthen it.

Microsoft gives you powerful security controls and no easy way to see how they fit together. Ranger reads Conditional Access, Privileged Identity Management and the rest of your estate as you, explains what it finds in plain language, and shows how to close each gap, with automation and AI carrying the heavy lifting. It changes nothing without your approval: every improvement arrives as a detailed plan for you to review before anything is implemented.

Talk with us about Ranger Security reviews

In preview Runs in your own tenant, on Windows and macOS. Your data stays yours.

What Ranger makes easyAs you

Conditional Access, read and explainedEvery policy, what it covers, and what still slips through

Privileged Identity Management, auditedStanding admins, eligible roles, what expires and when

Gaps found, explained and closedThe setting, the command or the link for each one

The urgent gaps first, then no driftHigh-priority items called out to address right away, and repeat audits that keep your posture steady

Microsoft does not make this easy. Ranger does.

What it does

The complicated parts of Microsoft security, made simple.

Conditional Access, made plain

Ranger reads every policy and tells you in plain words who it covers, what it requires, and where a sign-in can still get through. Phishing-resistant sign-in, device requirements, legacy protocols: each one checked and explained.

Privileged Identity Management, audited

Who holds standing admin roles, who is eligible, what expires and when, and which roles should move from permanent to just-in-time. When a check needs a role you hold, Ranger activates it from the desktop for as long as the check takes.

Gaps found and closed

Every finding carries what Ranger saw, why it matters, and the improvement: the setting, the command or the link. You apply it, or we apply it with you, and the next run shows it closed.

The rest of the estate, the same way

Authentication, Azure, Defender, Sentinel, Intune and Purview, each scored against the same written checks with a plain reason for every mark.

A watchful eye on the logs

Sign-in and audit logs are read for anything worth a second look: impossible travel, new admin consents, unusual clients. Log files on your own machine can be analysed too, locally.

Research and plans with your AI

Ask about any finding, or have a remediation plan written for your team, using the AI subscription you already hold. Claude is our recommendation; OpenAI's Codex, the Claude and OpenAI APIs and local models are on the way. Nothing is posted anywhere.

How it's built

Delegated, read-only, and bounded by your own roles.

The desktop app signs you in with Microsoft Entra and talks only to the Ranger server. It holds no secrets, only public identifiers.
The server exchanges your token for delegated Microsoft Graph, Azure Resource Manager and Log Analytics access, so what an assessment sees is bounded by your own Entra and Azure roles.
Every read is delegated and read-only. Ranger guides the improvements, and your tenant stays exactly as you left it.
Traffic passes a firewall, a gateway and a client certificate before the server, which validates the token again before any tool runs.
The server app is guarded by its own Conditional Access policies: phishing-resistant sign-in, sign-in frequency, managed device, risk blocks.
Runs and findings are kept in a database in your own Azure subscription, deployed from code you can read by scripts that explain what they do.
You choose the AI that helps with research and plans: the subscription you already hold, an API key, or a local model on your own machine. What you send it is yours to see, and that provider's privacy terms apply to that step. Everything else stays in your tenant.

Want an honest read of your tenant?

Posture tooling of this kind has been priced for the largest enterprises. Ranger is built to be affordable for every business, whatever its size. We run it as the first pass of our security reviews today, and we're welcoming a few early organisations as the console grows.

Book a free call All products