Siemserva by Senserva + Claude.

Claude becomes an agentic security analyst for Microsoft 365. Siemserva ships the market-leading MCP, so you run all 650+ checks, compliance mapping, and agentic remediation from Claude, or the AI of your choice, in plain language. No KQL, no clicking through portals. Or hand the AI the full Senserva security data model and let it build its own audits and threat-hunting exercises.

A quick install puts the real Claude on a rich simulated tenant at no cost, so you can try the whole thing free. It stays low cost in production, too: you bring your own model, so there is no AI markup, and the rich data model means the AI answers from real findings with fewer calls. Run your own tenant with a key. One longtime customer retired their home-grown PowerShell scripts and now lets Siemserva and Claude handle remediation, reclaiming around 80 percent of the hours they used to spend on hand-rolled tooling.

Under the hood, Siemserva builds your tenant as a living graph, 110+ node tables and 70+ edge tables capturing identity, devices, apps, roles, Conditional Access, patches, and CVEs, and the relationships between them. That structure is why scans are richer and the AI is smarter: it reasons across how your environment actually connects, not a flat checklist, so answers and remediations reflect real blast radius and root cause. The same graph drives continuous security drift management, and the platform comes from founder Mark Shavlik, who built HfNetChk and MBSA at Shavlik Technologies.

Register

Siemserva MCP and Claude in Action

One question against the demo tenant. One real finding.

You
Anything sensitive shared anonymously on SharePoint right now?
Claude
Read SharePoint sharing · Classify sensitive content
Yes. The Marketing Assets site has 11 active anonymous share links. Three point at folders with sales contracts and a partner pricing deck. All 11 were created by the same user with default expiry Never, so anyone with the URL can read forever.

That is one finding in the demo tenant. Hundreds more wait inside. Get a key →

Discover. Audit. Report. Fix.

One MCP. Four modes. From plain-English exploration to validated remediation, with AI-written reports along the way.

INTERACTIVE SECURITY DISCOVERY

Explore your tenant in plain English.

Conversational discovery across users, devices, apps, sharing, sign-ins, and policies. Claude follows the threads you care about, joins evidence across surfaces, and surfaces anomalies before you know to ask for them.

AUDITOR MODE

Scope to any framework, one question.

Vertical defaults for credit unions (FFIEC, NCUA Part 748), banks (NYDFS Part 500), healthcare (HIPAA, HITRUST), and K-12 (FERPA). Claude bridges NIST 800-53/171, ISO 27001, SOC 2, PCI-DSS, FedRAMP over the MCP.

AI-ENHANCED REPORTS

Six report types. Self-contained HTML.

Exec briefing, IT playbook, board summary, auditor evidence pack, MSP scorecard, technical deep dive. Senserva Trustworthy AI writes the narrative, every figure cited to source data.

AUTOMATED REMEDIATION

Production Graph PowerShell. You approve.

Drafts ship with dry-run, change summary, and rollback notes. Approve in Claude, the script runs against your tenant, Siemserva validates the change before the finding is closed.

First-time Claude Desktop users will see a permission prompt the first time Siemserva runs a tool. Choose "Always allow" so subsequent queries run without interruption.

Try the Advanced Microsoft 365 Security Simulator

See exactly what Siemserva finds on a rich, realistic simulated tenant, no access to your environment needed. Launch it right after install, or ask for an evaluation key. Teams report cutting Microsoft 365 and Azure hardening time by up to 80 percent.

Launch the Simulator, free