Ekkie Guard: M365 tenant baseline & drift detection

Your M365 tenants change every day. Conditional Access policies get disabled, guest sharing gets broadened, admin roles end up on the wrong account. Most of the time, nobody notices until it shows up in an incident or an audit.

Ekkie Guard gives you a permanent answer to one question: is this tenant still configured the way I intended?

What you get

Pick the M365 resources that matter (Conditional Access, admin roles, guest settings, MFA enforcement, named locations) and baseline them. Ekkie pulls live config from Microsoft Graph, compares it to your baseline on every sync, and flags exactly what changed, down to the property level.

When something drifts, you see the old value next to the new value, and you can restore it in one click. One property, one resource, or every drifted resource in the tenant.

Highlights

• Property-level diff so you see the actual field that changed, not just "something is off"

• One-click restore back to baseline, per property or in bulk

• Optional auto-restore for resources where drift is never acceptable

• Drift alerts inside Ekkie Chat, with optional Teams, Slack, or webhook push

• Full audit log of every restore action with before/after values and timestamps

• White-labelled PDF and Word reports for client delivery

• Multi-tenant view across your full MSP portfolio, with bulk sync and cross-tenant drift export

Why we're building it

You already use ekkie to handle the tickets that come out of misconfiguration. Guard is the layer that stops those tickets from existing in the first place.