Find your tool
Grouped as in the menu on the left. Each card goes straight to the pages people use most.
Identity and privileged access
New · v3
Auth-Onboard#
Passkey and MFA campaigns for Entra ID: find who's still on SMS or codes, invite them in batches in your branding, follow up automatically and report progress. Installs into your own Azure from the browser.
New · v1
Access Baseline#
Check sign-in security in your tenant against a best-practice, Zero Trust baseline: break-glass access, Conditional Access, passkeys first, and admin accounts. The assessment is read-only and needs only Global Reader; then deploy the core Conditional Access policies, report-only, with device-bound keys only for privileged accounts, after reviewing every value. Runs in your browser.
Before you start Run the assessment Deploy the baseline Findings
Framework
Privileged Path#
The framework from the book: a quick assessment, the Trust Levels, and privileged access workstations.
Microsoft 365 security
v2
Tenant Audit#
Read-only security and compliance assessment for Microsoft 365 tenants: three scoring dimensions, eight analysers, four compliance frameworks, and PDF and PowerPoint reports.
Beta · v1.0
AKC AUP#
Put your acceptable use policy in front of every user and guest as Microsoft Entra Terms of Use, enforced by Conditional Access: report-only first, break-glass always left out, and a deployment record for your audit file. A Windows app.
Cloud desktops
New · v2
AVD Deploy#
Design, check and deploy Azure Virtual Desktop into your own subscription step by step, then finish the Entra and Conditional Access setup. Runs in your browser.
New · v2
W365 Deploy#
Set up Windows 365 Cloud PCs in your own tenant step by step: the provisioning policy, user settings, groups and licences. Runs in your browser; no Azure subscription needed.
Windows and Intune
Windows app
Win11 Image Prep#
Slipstream drivers into Windows 11 ISOs, strip bloatware, choose editions and build bootable USB drives.
Beta · v1.0
AKC AppDeploy#
Package, test, upload and update Win32 apps for Intune with a least-privilege account: installer recognition, a local test run, detection, the Company Portal listing, assignments, and supersedence. A Windows app.
Beta · v0.3
AKC BlobDrive#
Azure Blob, Cloudflare R2 and S3 storage as folders in File Explorer, like OneDrive: everything listed, files downloaded when you open them, and a cache size you choose. A Windows app.
Exchange and network
Windows app
Exchange Certificate Manager#
Request, renew, import and deploy Exchange certificates across every server, health-check them, and use Let's Encrypt with automatic renewal.
Ubuntu server
HAPMan#
Run several servers behind one public IP: a free, Entra-protected web admin for HAProxy on Ubuntu that routes by hostname, with staged changes, history, health checks and Drain for patching.
Web UI and CLI
DNS Migrator#
Move DNS zones from any provider to Cloudflare cleanly, without mangling records. DNS-over-HTTPS scanning, Azure DNS export, a web UI and a PowerShell CLI.
Business
Early access
Scan to Save#
A digital business card people save in one tap: photo, company logo, badges, WhatsApp and links, behind a QR code that also goes in Apple Wallet. Sign in with your free Andy Kemp account.
Legacy
Legacy · v2
MFA-Onboard-Tool#
The previous, script-deployed MFA onboarding tool (SharePoint and Logic Apps). Replaced by Auth-Onboard.