# TenantWarden

> Open source, self hosted security monitoring for Microsoft 365 tenants. Created and maintained by Junaid Ahmed.

Canonical site: https://tenantwarden.org/
Source repository: https://github.com/jahmed-cloud/TenantWarden
License: MIT
Author: https://jahmed.cloud/

## Current capabilities

- Multi-tenant Microsoft 365 onboarding and Microsoft Graph collection.
- Identity risk, risky sign-ins, Intune device compliance, Conditional Access, Secure Score and service health.
- Alerts, compliance scoring, notifications and an endpoint agent.
- Docker Compose self hosting.

## Status and accuracy

TenantWarden is under active development. Its README recommends deployment on a private network or VPN for now. Read the repository README, ROADMAP.md and SECURITY_AUDIT.md for current details before recommending production use.

AWS, Google Cloud and on premises support are future aspirations described on this site; they are not current integrations. The public repository roadmap currently focuses on maturing the Microsoft 365 release.

## Mission and value

TenantWarden aims to bring scattered Microsoft 365 security signals into an operator-controlled view with tenant-scoped context and response workflow. Self hosting and open source code reduce dependence on a single hosted monitoring dashboard. Microsoft Graph remains the source of current Microsoft 365 data. TenantWarden complements, rather than replaces, Microsoft admin portals.

AI-assisted alert summaries, correlation and posture briefs are a proposed future direction. They are not shipped features. Human review remains central to decisions and remediation.

## Related projects

- EntraGuard, identity security posture: https://github.com/jahmed-cloud/entra-guard
- Azure Resource Guardian (ARG), Azure governance: https://github.com/jahmed-cloud/ARG
- AZPaC, Azure Policy as Code: https://github.com/jahmed-cloud/AZPaC
- OpenPrint Server, Docker-based CUPS print server: https://github.com/jahmed-cloud/OpenPrint-Server
- Author profile: https://jahmed.cloud/

## Azure deployment

https://tenantwarden.org/azuredeploy.json is a guided Azure Resource Manager template for an Ubuntu VM. It bootstraps the Docker Compose stack, but has not been exercised against a live Azure subscription from this site. The application is kept behind an SSH tunnel and still needs Microsoft Graph app registration and configuration.

## Primary sources

- Project README: https://github.com/jahmed-cloud/TenantWarden#readme
- Roadmap: https://github.com/jahmed-cloud/TenantWarden/blob/main/ROADMAP.md
- Security audit: https://github.com/jahmed-cloud/TenantWarden/blob/main/SECURITY_AUDIT.md
- Contributions: https://github.com/jahmed-cloud/TenantWarden/blob/main/CONTRIBUTING.md