Tools

Utilities and products from Virtual Caffeine IO for running Microsoft endpoint and identity estates.

Sentura

Email spoofing is quiet until it isn’t: a forged invoice from your own domain landing in a customer’s inbox is how trust erodes. We built Sentura to make DMARC, SPF, and MTA-STS something you can actually understand, not just report on. It looks at every source sending mail on your domain and tells you what it is (legitimate, forwarded, unknown, or a likely impersonator) in plain language instead of raw XML you have to decode yourself. It sits alongside Microsoft 365 or Google Workspace with nothing to migrate, and if you want more hands-off protection, Sentura can host and manage your records directly, keeping SPF under its lookup limits and your DMARC policy moving safely toward full enforcement.

MDO (Modern Device Ops)

Most Intune tools solve one problem and leave you juggling the rest. MDO is the platform we wished existed for running day-to-day Intune operations across every client tenant from one place: continuous drift detection with full policy history, one-click app deployment packaged straight from Winget, a real audit log with off-hours and anomaly detection, and a fleet-wide device inventory. It’s multi-tenant by design, your data stays in your own storage, and there’s no Azure Automation Account or per-tenant compute fee eating into the margin. Where most competitors are a point solution, MDO is meant to be the operational home base.

AMT (AuditMyTenant)

Compliance work usually means picking one framework and running a script per device. AMT runs a full multi-framework audit (CIS, NIST, and Microsoft’s own baselines) across an entire tenant in about sixty seconds, no scripts or installs required. It’s built for MSPs who need to answer “is this tenant actually configured securely” during quarterly reviews, new client onboarding, or a renewal pitch, and because it’s multi-tenant from the start, you can run it across every client from a single screen instead of one at a time.