Atliso ProFirst scan free

Intune says compliant. Your devices say otherwise.

Atliso Pro connects to your tenant in two minutes and checks what the Intune dashboards don't: BitLocker keys that never reached Entra ID, LAPS passwords that stopped rotating, Windows versions out of support, Apple certificates about to lapse. Then it deploys the tested fix.

First scan free, no card. Daily checks and fixes: 30-day trial, card required. Read-only, no agent. Already using it? Sign in

Connects directly to

  • Microsoft Intune
  • Microsoft Entra ID
  • Microsoft Graph
atliso.com/app
Atliso Pro overview for a sample tenant: health score 55 out of 100, score trend, and failing checks including Windows versions out of support and BitLocker keys missing from Entra ID
Open the live demo →

Ten checks, every morning

Each one is a problem admins write to us about, the kind Intune reports as fine.

BitLocker keys missing from Entra ID

Encrypted devices whose recovery key never reached Entra. The ones nobody can unlock.

Drives not encrypted or protection off

Including drives stuck on "waiting for activation".

LAPS passwords not rotating

Intune shows compliant, the password has not changed in months.

No LAPS password at all

Devices with an unmanaged local admin account.

Remediations failing quietly

Scripts that error or fix nothing, per script, with counts.

Devices that stopped checking in

Lost, broken or forgotten machines skewing every report.

Non-compliant devices

Who Conditional Access is already blocking, and why.

Windows versions out of support

Windows 10, and Windows 11 releases at or near their end date. Checked by edition, because Pro and Enterprise on the same build end a year apart.

Apple certificates expiring

The push certificate and enrolment tokens, 30 days before they lapse and break enrolment.

Licensing for Remediations

Whether your licences include Remediations at all.

Everything a team needs around it

Instant alerts

Email, Microsoft Teams or Slack the moment a high-severity check gets worse, the score drops, or access is lost. You set the rules.

Daily or weekly digest

Score, what changed and what is still open, on the day you choose.

Fix tracking

Each deployed fix shows how many devices it has cleared since, scan by scan.

Notification centre

Every change from every scan in one feed, with an unread count.

Team roles

Owners and viewers, invite by email, sign in with Microsoft. No shared logins.

Audit log

Who connected, deployed, changed a setting or invited someone, and when.

Tune the checks

Your own thresholds, turn checks off, and exclude kiosks or lab machines by name.

Reports

Score trend, CSV export of every finding, and a printable report for the next review.

Connected in two minutes

  1. 01

    Sign in with Microsoft

    Use your work account. No new password to manage.

  2. 02

    Approve read access

    A Global Admin approves Atliso Pro on Microsoft's consent screen. Revoke it any time in Entra ID.

  3. 03

    Get your free report

    About a minute, free, no card. The 30-day trial (card required) adds daily re-checks and alerts when things get worse.

Fix it, don't just report it

Every finding comes with the Atliso fix that was built and lab-tested for it. One click adds it to Intune Remediations, unassigned, so you pilot it on your terms. The next morning's scan shows which devices dropped off the list.

Stuck on something unusual? The AI fix plan turns a finding into numbered steps using your numbers, with the exact Intune and Entra paths.

What it can see

  • DeviceManagementManagedDevices.Read.All

    List Intune devices, encryption and compliance state

  • BitlockerKey.ReadBasic.All

    See which devices have a recovery key in Entra ID (never the key itself)

  • DeviceLocalCredential.ReadBasic.All

    See when LAPS passwords were last backed up (never the password)

  • DeviceManagementScripts.ReadWrite.All

    Read remediation results, and add Atliso fixes when you click Deploy

  • Organization.Read.All

    Tenant name and licences, to know whether Remediations are available

  • DeviceManagementServiceConfig.Read.All

    Expiry dates of the Apple push certificate and enrolment tokens

  • DeviceManagementApps.Read.All

    Expiry dates of Apple Apps and Books tokens

  • ProfilePhoto.Read.All

    Show your team's Entra profile photos in Atliso Pro

Pricing

Your first scan is free, with no card. For daily checks, fixes and alerts, every plan starts with 30 days free: add a card, nothing is charged until day 31, and you can cancel any time before.

Team

Most teams

£29/ month

One tenant, up to 1,000 devices.

  • Daily checks and score trend
  • One-click tested fixes
  • Alerts to email, Teams or Slack
  • Team roles and audit log
  • AI fix plans
Get your free scan

Free scan first. Then 30 days free with a card, cancel any time.

MSP

£12/ tenant / month

Every customer tenant from one account. Minimum five tenants.

  • Everything in Team
  • Portfolio view, worst first
  • Per-tenant alert rules
  • Invite each client as viewers
Get your free scan

Free scan first. Then 30 days free with a card, cancel any time.

Questions admins ask

What do I get for free?

One full scan of one tenant, with every finding and affected device, plus one AI fix plan. No card needed. Daily scans, one-click fixes, alerts and more AI plans come with the 30-day trial, which needs a card. Nothing is charged until day 31, and you can cancel any time before.

Do I install anything on devices?

No. Atliso Pro reads Intune and Entra ID through Microsoft Graph. Fixes run through Intune Remediations, the same way you deploy anything else.

Can it change my tenant?

Only when you press Deploy, and only by adding a remediation that is not assigned to anyone. You choose the pilot group in Intune before anything runs.

Does it read recovery keys or passwords?

No. It asks for the "ReadBasic" permissions, which show whether a key or password exists and when it was backed up, never the secret itself.

We are on Business Premium.

Everything works. Without Remediations licensing (E3/E5, A3/A5 or VDA), Atliso Pro deploys each fix as an Intune platform script instead, still unassigned.

What does the AI do?

It writes a step-by-step plan for a finding from your numbers. Device names and users are never sent, and spend is capped per tenant.

I manage several clients.

Connect each customer tenant from the same account and see them all on one portfolio page, worst first. Each tenant needs one of its own admins to approve access.

Who on my team can see it?

Invite colleagues as owners (deploy fixes, change settings) or viewers (see everything, get alerts). Every change is in the audit log.

See your tenant's score in two minutes

Your first scan and an AI fix plan are free, with no card. Sign in with Microsoft, approve read access, and the scan runs straight away.

Get your free scan