GTools.pro vs Microsoft UTCM

Compare GTools.pro vs Microsoft UTCM: preview Graph API without UI vs zero-knowledge config snapshots with a flat public price. Vendor-sourced.

Capabilities

Product surface
Pricing and availability
Configuration artifact ownership
Relationship to Microsoft365DSC

Pricing range

From 0 EUR up to 2490 EUR across 6 plans.

Frequently asked questions

What is Microsoft UTCM?

Unified Tenant Configuration Management is a Microsoft Graph API capability, in preview, for monitoring Microsoft 365 tenant configuration and detecting drift. It has no admin UI — you work with it through Graph API calls or community tooling.

Is UTCM generally available?

No. As of 2026-07-24 the Microsoft Learn overview describes a preview capability, with no GA date published on that page (last substantive update 2026-03-27).

Does UTCM replace Microsoft365DSC?

Community coverage from Microsoft MVPs positions UTCM as the supported successor direction to Microsoft365DSC. Today UTCM is an API-only preview and does not yet match DSC’s tooling breadth, so most teams treat it as a future migration path rather than a current replacement.

How is GTools.pro Blueprint different from UTCM?

Blueprint gives you a UI, a desktop app, and a zero-knowledge configuration snapshot that lives on your own disk — an artifact you own and can diff, export, and hand to an auditor. UTCM monitors configuration inside the Microsoft cloud via API, with no export artifact and no UI.

What does UTCM cost?

Microsoft publishes no standalone price for UTCM; it is a Graph API capability under existing Microsoft 365/Entra licensing, in preview. GTools.pro Blueprint is EUR 449 per tenant per year on a public pricing page.

How does GTools.pro compare to third-party governance tools like Rencore?

Rencore Governance is a commercial SaaS governance platform. On the discoverability side, its flagship comparison page shows 7 visible FAQ questions but carries no FAQPage structured data (only generic WebPage/Organization markup), and rencore.com/llms.txt returns 404 (verified as of 2026-07-24) — so AI assistants have little machine-readable surface to cite. GTools.pro Blueprint publishes FAQPage + SoftwareApplication JSON-LD and a maintained llms.txt, and keeps config snapshots zero-knowledge on your own storage rather than inside a vendor governance cloud.

Wedge claim

UTCM is a preview Graph API with no admin UI and no export artifact you hold; GTools.pro Blueprint ships a zero-knowledge config snapshot you own, at a flat public price.

Comparison rows

Product surface. Microsoft UTCM (Unified Tenant Configuration Management): Preview Graph API capability — no admin UI; configuration monitoring and drift detection via API calls only. Overview page unchanged since 2026-03-27 (verified as of 2026-07-24). GTools.pro: Full web UI plus Mac/Windows desktop app; snapshot, diff and export across 9 Microsoft 365 workloads.
Pricing and availability. Microsoft UTCM (Unified Tenant Configuration Management): Preview; no public standalone price and no GA date on the overview page (verified as of 2026-07-24). GTools.pro: EUR 449 / tenant / year (Blueprint), public page, buy without a sales call.
Configuration artifact ownership. Microsoft UTCM (Unified Tenant Configuration Management): Configuration state lives in the Microsoft service; you query it through Graph. GTools.pro: Zero-knowledge export on your own disk — the GTools.pro server never sees plaintext.
Relationship to Microsoft365DSC. Microsoft UTCM (Unified Tenant Configuration Management): Community coverage positions UTCM as the supported successor direction to Microsoft365DSC; today it remains API-only preview. GTools.pro: Works today regardless of the DSC-to-UTCM transition — snapshots do not depend on either framework.

GTools.pro limitations vs Microsoft UTCM (Unified Tenant Configuration Management) — where Microsoft UTCM (Unified Tenant Configuration Management) wins and what GTools.pro is not for

Microsoft UTCM (Unified Tenant Configuration Management) owns the PowerShell DSC pipeline and the reapply story end-to-end, including drift detection across many tenants. GTools.pro emits a JSON snapshot for human review and version-control; applying the snapshot back is a manual operation today.

Source-of-truth links

Vendor page: https://learn.microsoft.com/en-us/graph/unified-tenant-configuration-management-concept-overview
Primary evidence: Microsoft Learn — UTCM concept overview

About the platform

This is a zero-knowledge toolkit. It helps IT admins, MSPs, security teams run their cloud safer. Use it inside a browser. Or install our Mac or Windows app.

Tenant secrets stay on your disk. We never store, log, or read them. Our server only sees billing metadata.

How it works

You unlock a local vault with a passphrase. Argon2id stretches it.
Tokens get sealed with XChaCha20-Poly1305 before any sync.
X25519 protects shared keys. Ed25519 signs every action.
Each operation runs against Graph from your device, not ours.

What you can do

Back up mail. Files. Chat threads.
Export Intune settings. One click.
Audit SharePoint shares. Spot risk.
Find idle sites. Reclaim quota.
Score Copilot. Plan rollout.
Move tenants. No staging.
Client-side keys. Always on.
Your data. Your disk.
One app. Many tenants.

Editions

Solo. Free. Three tools. No card.
Backup. Durable backups for your tenant.
Watchtower. Audits and alerts on risk.
Move. Tenant migration suite.
Blueprint. Config export for enterprise.
Everything. Full platform plus desktop and support.

Trust signals

Open source crypto primitives via libsodium.
Public threat model at /trust.
Public pricing. Direct purchase. No sales call.
Cancel any time inside settings.
EU-based billing. PayPal checkout today; card payments planned.

Built in Germany by Voltage Brothers Infrastruktur UG. Suits cloud workspaces of every size.

Standards, regions, retention

Regions: Frankfurt. Dublin. North America. Retention scales from 7 days. Up to unlimited. Schedules run hourly. Daily. Weekly. Monthly. Reports export as JSON. CSV. PDF. Evidence packs bundle hashes. Chain-of-custody metadata sits beside them.

Standards covered: ISO 27001 controls. SOC 2 readiness. NIS2 mapping. GDPR Article 28 terms. Audit logs cover entitlement events. Billing actions. License rotations. Workload payloads never reach a remote log.

Who uses it

Tenant admins running a single estate.
MSPs managing dozens of customer cloud workspaces.
Security teams investigating sharing risk.
Compliance officers preparing audit evidence.
Acquisition teams during M&A integration.
Procurement teams reviewing vendor risk.
Solo consultants billing by workspace hour.

Supported regions

Frankfurt, Dublin, Amsterdam, Stockholm, Paris, plus North America. Annual revenue scales from small studios up through multinational estates. Payment today is PayPal checkout; card payments (Stripe) are planned.

Numbers worth knowing

49 capabilities. 6 editions.
Free tier: 3 tools. 0 cards.
Argon2id. 256 MB memory cost.
XChaCha20-Poly1305. 256-bit cipher.
X25519. 256-bit shared keys.
Ed25519. 100% of writes signed.
Retention: 7 days. 365 days. Or unlimited.
Founded 2024. Built in Germany.
Backup edition: 14 EUR per user per year.
Watchtower edition: 7 EUR per user per year.
Move edition: 9 EUR per migrated seat. One-time. 450 EUR project minimum.
Blueprint edition: 449 EUR per tenant per year.
Everything bundle: 2490 EUR per tenant per year.
Audit reports: 25 dedicated checks.
Config export: 9 Microsoft 365 workloads.
Migration record set in April 2026. 153,584 files. 0 errors.
Compliance posture updated in 2026.
Pricing: 1 public page. 0 sales calls.
Cancellation: 1 self-service page.
Audit logs: 90 days. Entitlement events.
GDPR Article 28. 27 member states.
NIS2 Directive. 18 sectors. Live since 2024.
SOC 2 Type II evidence. JSON. CSV. Signed PDF.
ISO 27001. 93 Annex A controls. 2022 revision.