Senserva makes security posture management software for organisations and service providers running Microsoft 365. It helps IT and security teams find the misconfigurations, risky identities and exploitable weaknesses in their Microsoft cloud tenants, covering identity, devices, email, data protection and endpoints, and then fix them in a controlled way.
It serves both single organisations auditing their own tenant and service providers looking after many.
At A Glance
| Vendor | Senserva, LLC |
|---|---|
| Category | Security posture management for Microsoft 365 and Entra ID |
| Identities covered | Entra ID users, privileged roles, service principals, authentication methods |
| Deployment | Local binary for Windows and macOS (Siemserva); Azure-hosted multi-tenant service (Drift Manager) |
| Agentic AI | Optional AI with the customer’s own model, Senserva MCP for Claude |
| Founded | 2019 |
| Market classification | Identity Security Posture Management |
What Senserva Does
A single tenant carries hundreds of security settings, and they change over time. Senserva checks them deterministically, read-only, through Microsoft’s own APIs, links what it finds to CVEs present in the tenant, reads sign-in and audit logs, and maps the results to compliance frameworks. The next scan confirms whether a fix held.
The software runs on the customer’s own systems rather than in someone else’s cloud. It works completely without AI; when AI is switched on, it proposes changes and a person decides.
Products
Siemserva
Siemserva suits administrators and consultants who need a full picture of a tenant’s security in one run, and a defensible report for auditors afterwards.
- More than 650 read-only checks in a single scan
- Findings ranked with CISA KEV, FIRST EPSS and related exploitation data
- Analysis of Entra sign-in logs, the Microsoft 365 unified audit log, directory audit logs and security alerts
- PowerShell remediation with change logs and rollback scripts
- Mapping to CMMC Level 2 (NIST SP 800-171), Microsoft Cloud Security Benchmark and CISA SCuBA
- HTML reports, CMMC and NIST 800-171 readiness reports with an SPRS estimate, and an SDK for C#, PowerShell and Python
Senserva Drift Manager
Drift Manager is for MSPs, MSSPs, SOCs and enterprises that look after many tenants and need to know when a secure configuration quietly changes.
- Continuous monitoring of Entra, Intune, Defender, Exchange Online Protection and Sentinel settings
- CIS-based baselines out of the box, plus custom baselines per tenant or across all tenants
- Drift events scored for risk and classified by severity
- Tickets that show the configuration difference, its impact and how to fix it
How It Works
| Component | What it does |
|---|---|
| Siemserva binary | Siemserva is one small signed binary with no installer, no agents and no cloud service. It is available as a signed Windows 11 executable and a notarized macOS build for Apple silicon. |
| Data access | Audits read the tenant through Microsoft’s APIs and never write to it. |
| Storage | Results go to a local SQLite file by default. Teams can instead use Azure Table storage in their own subscription. |
| Drift Manager service | Drift Manager is deployed from the Azure Marketplace. Data stays in the customer’s tenant, and the service flags drift without changing the tenant itself. |
| Multi-tenant deployment | Azure Lighthouse is used to deploy into each customer’s Azure tenant, with one instance per tenant to keep data local, which lets MSPs and MSSPs onboard many customers. |
Identities And Systems Covered
| Privileged access | 34 Privileged Identity Management checks (PIM needs Entra ID P2 or E5). |
|---|---|
| Service principals | 34 checks on application and service identities. |
| Authentication | 42 authentication method checks, plus Conditional Access analysis. |
| Users and accounts | 35 user and account checks. |
| Systems | Microsoft 365, Entra ID, Intune, Defender, Purview, Azure, Exchange Online Protection, Sentinel settings and endpoints. |
Agentic AI Capabilities
AI-Assisted Remediation
AI is an optional layer. When enabled, it drafts fixes that are validated and must be approved before anything changes, and nothing is applied silently.
Own Model And Data Handling
Customers can bring their own model and key, and Senserva never trains on customer data. Prompts are scrubbed before they leave, using tenant aliases and leaving out object IDs and raw Graph payloads.
Senserva MCP
The Senserva MCP lets users query a scan from Claude Desktop or the Claude CLI. Claude asks permission before it uses a Senserva tool, and a demo mode works against a simulated tenant.
Integrations
| Area | Integrations |
|---|---|
| Assessment tools | Maester, Microsoft Zero Trust Assessment, ScubaGear (CISA SCuBA) |
| Ticketing | ServiceNow, ConnectWise, Autotask |
Company Background
| Founded | 2019, by Mark Shavlik and TJ Dolan. |
|---|---|
| Leadership | Mark Shavlik, CEO and CTO. |
| Recognition | 2024 Microsoft Security Excellence Awards finalist. |
Note: This overview is compiled from Senserva’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.