CIPP is an open-source, self-hosted console for managing Microsoft 365 tenants at scale, with no per-tenant licence fee beyond the MSP's own Azure hosting cost, covering user and licence administration, security baselines and drift detection with 150+ standards.
There is a free version. Listing updated . Checked by MSP Software .
CIPP, the CyberDrain Improved Partner Portal, is an open-source, self-hosted console from CyberDrain for MSPs to manage Microsoft 365 tenants at scale. It provides a unified interface for user and licence administration, security baseline templates covering 150+ industry standards with drift detection across many clients simultaneously, conditional access policy management, and GDAP permission assignment. The frontend is built with React and Core UI, while the backend API uses PowerShell, running on Azure Functions and Azure Static Web Apps that the MSP manages on their own Azure subscription. CIPP is freely available under the AGPL-3.0 open-source licence with no per-tenant licence fee, though MSPs must budget and manage their Azure hosting costs separately from the software itself.
CIPP suits MSPs comfortable hosting their own application on Azure who want deep access to Microsoft Graph APIs without paying per-tenant licence fees for a commercial multi-tenant console, and who have the internal skills to run, patch and maintain the software themselves. It integrates directly with Microsoft Graph and Partner Center APIs, and with PSA and RMM platforms through webhooks, so policy drift alerts can automatically open tickets in an MSP's existing ticketing workflow. CyberDrain reports 9,000+ active MSPs using CIPP with a community of 7,000+ members on Discord providing peer support and troubleshooting help. Because CIPP is self-hosted and community-maintained rather than backed by a vendor support contract, MSPs should verify they have the Azure infrastructure and DevOps skills to manage it reliably in production, budget the underlying Azure hosting cost separately from the software licence cost, understand the time commitment for keeping patches current, and plan time to read community documentation and engage with support channels before deploying to production clients. The open-source model means support operates differently than commercial platforms, relying on community contributions rather than dedicated vendor support staff.
Microsoft Defender for Business Endpoint security for small businesses, from $3 per user per month or included in Microsoft 365. No reviews yet · from US$3.00 vs Microsoft Defender for Business| Feature | Supported | Note |
|---|---|---|
| Tenant and user provisioning | yes | |
| Licence assignment | yes | |
| Security baseline templates | yes | Includes 150+ security standards and drift detection |
| Conditional access management | yes | |
| Multi-tenant console | yes | |
| Shadow SaaS discovery | no | |
| Automated offboarding | unknown | Not explicitly documented by vendor |
| Reporting and QBR exports | unknown | Not explicitly documented by vendor |
| Microsoft Graph API integration | yes | |
| PSA integration | yes | Via webhooks to PSA and RMM platforms |
| Backup integration | unknown | Not explicitly documented by vendor |
| Delegated admin (GDAP) support | unknown | Partner Center API integration present but GDAP support not explicitly confirmed |
| Feature | Supported |
|---|---|
| Network vulnerability scanning | unknown |
| Authenticated scanning | unknown |
| Missing patch detection | unknown |
| Compliance framework mapping | unknown |
| Risk scoring | unknown |
| Dark web monitoring | unknown |
| External attack surface scanning | unknown |
| PSA integration for remediation tickets | unknown |
| Scheduled recurring scans | unknown |
| Client-facing reports | unknown |
| Multi-tenant console | unknown |
| Automated evidence collection | unknown |
No, CIPP is free and open source with no per-tenant licence fee, unlike commercial multi-tenant Microsoft 365 consoles. The only cost is the underlying Azure hosting the MSP runs it on, plus the optional paid support some MSPs choose to buy from its maintainers for a safety net beyond community help.
CIPP requires an MSP to be comfortable hosting its own application on Azure and managing ongoing software updates. An MSP needs real Azure infrastructure skills and DevOps comfort to run it reliably in production. MSPs without that internal capability should weigh the licence-fee savings against the operational risk of running unsupported infrastructure themselves.
Yes, CIPP integrates with PSA and RMM platforms through webhooks, so alerts about a Microsoft 365 tenant falling out of policy, such as failing a conditional access or MFA check, can open a ticket automatically. This lets policy drift feed directly into an MSP's normal ticketing workflow rather than requiring a technician to check CIPP separately.
CIPP's maintainers offer optional paid support beyond the community contributions that fund the open-source project generally. MSPs who want a vendor-style support relationship despite CIPP being free and self-hosted should contact its maintainers directly to ask what that paid support covers, costs and includes in terms of response times and guaranteed availability.
CIPP offers deep access to Microsoft Graph APIs and manages 150+ security standards and drift detection at no licence fee, making it a cost-effective option for MSPs with Azure expertise. The trade-off is operational responsibility: with commercial consoles you pay per tenant but get vendor support, whereas CIPP is free but requires your own infrastructure and update management skills.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
