Aspenfy

Security software for managed service providers

Help every client prove they're secure.

Aspenfy builds focused, read-only security products for MSPs. Connect a client's Microsoft 365 in one click, see exactly where they stand, and hand over evidence your clients — and their assessors — can trust.

Explore HalberdBook a demo

Built for UK MSPs · Read-only by design · No agents to install

app.aspenfy.com — Clients

4

Clients

10

Open fails

2

Renewals due

  • Contoso Bakery Ltd

    Cert expires in 21 days

    5 failsNot ready

  • Fabrikam Legal LLP

    Cert expires in 200 days

    1 failNearly ready

  • Tailspin Engineering

    Certificate lapsed

    4 failsNot ready

  • Litware Dental

    Cert expires in 310 days

    0 failsReady
Illustrative example with demo data
Read-only access to client tenants
Transparent, deterministic checks
White-label reports for your brand
No AI on client data

The challenge

Security expectations keep rising. Your team doesn't grow with them.

Small businesses rely on their MSP to keep them secure — and, increasingly, to prove it. That proof is slow, manual and out of date the moment it's written.

01

Requirements keep rising

Cyber Essentials v3.3 brings every cloud service into scope and makes missing MFA an automatic fail. Insurers and supply chains ask for proof, not promises.

02

Evidence eats your week

Screenshots, spreadsheets and chasing client admins for answers — repeated for every client, every year, by your most expensive engineers.

03

Good configurations drift

A new admin account, an app someone consented to, an MFA policy switched off for a test. What passed in spring can fail by summer.

Products

Focused products on one secure platform

Each Aspenfy product solves one job well. Together they share one login, one read-only connection to Microsoft 365 and one place to manage your clients.
Available nowCyber Essentials v3.3

Halberd

Get Microsoft 365 clients ready for Cyber Essentials v3.3: MFA, user access, cloud services in scope and device patching — checked read-only, reported under your brand and monitored for drift.

  • 17 checks across all five control areas
  • White-label PDF and CSV reports
  • Drift alerts and renewal reminders
  • Free Cloud scope & MFA check
Explore HalberdStart the free check

More on the way

New Aspenfy products are in development on the same platform, so they will work with the clients and connections you already have. Tell us what would save your team the most time.

Share your ideas

Our approach

Built the way MSPs actually work

We design every product around six commitments. They are also why our products ask for so little access.

Read-only, never invasive

Our products request read permissions only and are built so they cannot change anything in a client's environment.

Transparent rules, no black boxes

Every result comes from a documented, deterministic rule with plain-English fix steps. No AI guesses on client data.

Made for multi-client work

One dashboard for all your clients, roles for your team, and plans priced per MSP — not per end user.

Your brand comes first

Reports carry your logo, colours and footer, so the value you deliver is visibly yours.

Privacy by design

Strict separation between MSPs, minimal data stored, configurable retention, and no stored Microsoft access tokens.

Honest about limits

What can't be checked automatically becomes a guided manual item. We help you prepare — we never claim to certify.

How it works

From first connection to ongoing assurance

No agents, no scripts on client machines, no change requests — just one consent link approved by the client's administrator.
  1. 1

    Connect

    Add a client and send a one-click, read-only Microsoft 365 consent link to their administrator.

  2. 2

    Assess

    Automated checks run in minutes against the requirements that matter, with clear reasons for every result.

  3. 3

    Report

    Share a white-label PDF and CSV with prioritised, plain-English fix steps and an evidence checklist.

  4. 4

    Monitor

    Scheduled re-scans, alerts when something drifts, and reminders before certificates expire.

Security

We hold ourselves to the standard we help you reach

You trust us with insight into your clients' environments. Here is how we protect it.

  • No stored client tokens

    App-only certificate credentials; tokens live in memory only.

  • Strict tenant isolation

    Every query is scoped to your organisation and tested.

  • Private evidence storage

    Files are served only through short-lived signed links.

  • Full audit trail

    Connections, exports, role and billing changes are logged.

  • Read about our security

Become a launch partner

We are working closely with a small group of UK MSPs as we launch. Partners get a direct line to the people building the product and a real say in what we build next.

Apply to be a launch partnerTry the free check first

See where your clients stand today

Free Cloud scope & MFA check for one client. No card needed.

Start the free checkTalk to us