Appearance
What is Watchmont
Watchmont is a Microsoft 365 security management platform for managed service providers and internal IT teams. It gives you one console to monitor, report on and manage security across every Microsoft 365 tenant you look after, whether that is a whole client base or your own organisation, without switching between admin centres.
What you can do with it
- Monitor security posture, alerts, sign-in risk and Secure Score across all managed tenants from a single dashboard.
- Manage users, groups, Conditional Access, SharePoint access, Intune devices and Azure resources per tenant.
- Report with branded PDF exports, on demand or scheduled by email to your clients.
- Integrate external tooling and correlate that data alongside Microsoft 365.
How it works
Each customer tenant is connected once through a Microsoft admin consent. From then on, Watchmont talks to that tenant using an app-only token, so the customer never has to log in and no standing credentials sit in the browser.
Your engineers log into the portal; customers do not. Everything a customer sees is a report you send them.
Key concept
Watchmont is an operator console, not an end-user app. Your team manages tenants through it; the people you answer to (clients for an MSP, leadership for an internal IT team) receive branded reports but never touch the portal.
A tour of the portal
| Area | What lives here |
|---|---|
| Overview | Cross-tenant dashboard, alerts, action items, clients, cross-tenant insights and GDAP access. |
| Manage | Act on a tenant: Exchange (trace, quarantine, transport rules), Secure (Conditional Access, endpoint, phishing, mailbox rules), SharePoint, engineer tools, users & groups. |
| Operational | Internal staff tooling: time tracking and stock. |
| Reports | Security assessments, the combined Management Report, Cloud Discovery, M365 usage, Teams Phone and more. |
| Infrastructure | Backups, Meraki and UniFi network posture per client. |
| Finance | Licence and billing reconciliation (SuperAdmin only). |
| Admin | Tenant provisioning, master reports and settings: staff users, integrations, report & sync scheduling. |
Nearly every page is scoped by the tenant picker at the top. Pick a client and the page reloads for that tenant.
Branded, white-label reporting
Watchmont is built to be re-branded. Apply your own logo, colours and report styling, and every report exports as a branded PDF. Reports can be scheduled to email clients automatically, weekly or monthly, with a full send history. The flagship Master Report combines any sections you choose (security assessment, licence optimisation, phishing, vulnerabilities, and more) into one document, and the Management Summary gives leadership an executive one-pager.
Integrations
Beyond Microsoft 365, Watchmont connects external tooling and folds it into the same dashboards and reports:
HaloPSA (tickets & invoices) · Giacom (licence costs & renewals) · RoboShadow (vulnerabilities & dark web) · Heimdal (endpoint threats) · uSecure (phishing simulations) · Acronis (backup) · Cisco Meraki & UniFi (network) · 3CX (hosted PBX call reporting) · Status Pages (public status monitoring).
Each is configured once and mapped per client. See the full Integrations catalogue.
Where to go next
- Onboarding a customer? Start with Connecting a Tenant.
- Need the permission list for a customer? See App Permissions.
- Running the platform day to day? See Operations.