Azure cost optimization for teams & MSPs
Every wasted euro in your tenant, priced, with the fix next to it. Read-only, revocable, connected in about three minutes.
What lands in your inbox
The report is the product. Here is a real one from a demo tenant: same layout, same numbers, same findings you get after your first scan. No connection, no sign-up, no email.
Everything below is in every plan
Finding the money is the easy half. These are the parts that get it off your bill and keep it off.
Every finding comes with the exact command, ready to review and run yourself, plus the safer routes to the same saving.
How fix guidance is built →az disk delete \ --resource-group rg-old-project \ --name disk-old-p30-01 # unattached 94 days · no VM reads it · €140/mo
Waste comes back. Scans run daily, weekly or monthly, alerts reach your team when new waste appears or spend jumps, and a PDF report follows every scan.
Scheduling & reports →Savings over time across every scan, a cost explorer by subscription, resource group or tag, and a Reservation & Savings-Plan planner built from your real VM usage.
Cost explorer & commitments →Invite whoever owns the bill as Admin, Editor or Reader. Everyone sees the same findings. MSPs connect every customer tenant under one login.
Roles & access →Azure isn’t the only bill with waste. The optional Microsoft 365 module finds licenses you pay for but nobody uses: shelfware, seats on disabled accounts, overlapping SKUs. Counts and costs only, never a name.
Enable the module →Why not just use the built-in tools?
Cost Management reports the bill. Advisor lists generic suggestions with no price tag. TenantThrift prices every finding from your real Azure Cost Management data (not list prices, not guesses) and shows you how to fix it.
| Capability | Cost Management | Azure Advisor | TenantThrift |
|---|---|---|---|
| Shows what you spent | yes | no | yes |
| Findings priced from your real costs | no | partly, partly | yes |
| Orphaned disks, IPs, NICs & snapshots | no | some, partly | yes |
| Real VM runtime vs 24/7 billing | no | no | yes |
| Reservation / Savings-Plan comparison from real usage | no | partly, partly | yes |
| Microsoft 365 license waste (shelfware, inactive, overlap) | no | no | yes |
| Exact fix command for every finding | no | no | yes |
| Scheduled PDF report to your inbox | no | no | yes |
All three are read-only against your tenant. Advisor findings are still included: TenantThrift surfaces them alongside its own checks, de-duplicated and priced.
Setup · 3 steps · about 3 minutes
A guided setup with your Azure admin. No agents to install, no secrets to hand over, and you can revoke it all from your own tenant.
Continue with Microsoft, or a work email and password if you prefer. No credit card either way.
Then a tenant admin approves a one-time admin consent. That is a separate step from signing in: it creates a TenantThrift identity in your tenant, under your control. The consent dialog asks for exactly one permission, User.Read (sign you in, read your profile). Nothing is installed, no secrets are exchanged, and Reader on your subscriptions is granted by you in step 02.
Assign the built-in Reader role to that identity on each subscription you want scanned. The app walks you through the Azure-portal steps (no terminal needed), or use the one command below, then it verifies access with one click.
az role assignment create --assignee <app-id> --role Reader --scope /subscriptions/<subscription-id>
The first scan starts right after verification and takes a few minutes. You get prioritized findings with fix guidance, the cost explorer, commitment comparisons and a PDF report. Then scans continue on your schedule, with the report mailed to your team.
Reader role)The complete list of what we store, table by table, is public: what TenantThrift stores. If it’s not on that list, we don’t collect it.
Pricing
Every feature, unlimited subscriptions, 14 days free. What you pay follows your monthly Azure spend — and goes down when we bring it down.
Early access pricing.
45 % off for your first 24 months. First 50 organizations, 30 seats held for MSPs.
Early access means a young product: it runs end to end on real tenants, but you will meet rough edges. Tell us and we fix them fast — the rate is our thanks.
For a company running its own Azure — one tenant or several, all yours.
€89 / month−45 %
Founding rate: 45 % off for your first 24 months.
Unlimited subscriptions and own tenants
Every product feature included
No plan to pick. After your first scan the app shows your price, based on your actual spend.
Running Azure for other people? Every client tenant in one login.
€179 / month−45 %
+ from €15 per client tenant, by that tenant’s spend. Founding rate: 45 % off everything for your first 24 months.
Every new tenant free for 30 days — win the deal first
White-label reports per client
Connect links for clients’ admins (GDAP-friendly)
Resell it at your own rate
| Azure spend | Per month |
|---|---|
| up to €5,000 | €29 |
| €5,000 – 25,000 | €89 |
| €25,000 – 100,000 | €249 |
| €100,000 – 250,000 | €599 |
| more than €250,000 | Let’s talk — info@simonvedder.com |
| Tenant’s Azure spend | Per month |
|---|---|
| up to €5,000 | €15 |
| €5,000 – 25,000 | €39 |
| €25,000 – 100,000 | €89 |
| more than €100,000 | €149 |
Founding rate. 45 % off every figure above for 24 months from the day you subscribe, whatever tier you are in; after that the regular price of your tier applies. The app shows your exact amount before you subscribe.
How your tier is set. By the amortized Azure spend of your connected subscriptions in the previous month — before tax, Azure services only (third-party Marketplace charges excluded), converted to euro at the ECB rate. Amortized means a reservation you buy is spread over its term, not counted in the month you bought it. A tier changes only after two consecutive months in a new range, we email you seven days before it applies, and it goes down automatically when your spend does. Your own tenants are never counted or limited — tenants you run for clients are what the MSP plan is for.
Waste checks and fix guidance · Scheduled scans and alerts · PDF reports · Cost explorer · Team roles · Commitment comparison · Optional Microsoft 365 module. Your spend decides the price, never which features you get.
Prices exclude VAT. Founding rates run for 24 months from the day you subscribe, then the regular price of your tier applies, so there is nothing to discover later. Your tier is shown in the app before you subscribe and every month after. Cancel anytime; your data stays readable and scans pause at the end of the paid period. By subscribing you agree to our Terms, Privacy Policy and DPA.
I’m Simon, an Azure engineer working in cloud security who has spent years cutting cloud bills across real estates. Every check in TenantThrift is one I used to run by hand: idle VMs, orphaned disks, the reservation math nobody has time for. I built the tool I always wished I had.
Because security is my day job, safety was the starting point, not a bolt-on: read-only, least-privilege, revocable in one click. And it’s an independent Swiss product, not a faceless platform. Email support means you reach me.
No. Every figure is an estimated potential, not a guaranteed reduction in your bill. Review the cost basis, the workload’s requirements and any existing commitments before you act on a finding, and ignore the ones that don’t apply, so they stay out of your totals.
Every finding is priced from your real Azure Cost Management data, not list prices or generic estimates. VM runtime savings come from actual usage metrics, not assumptions.
No. The only role it ever holds is built-in Reader. Every fix is guidance: the exact command, shown for you to review and run yourself, with options like Azure’s native auto-shutdown where they exist.
Never. Admin consent creates a service identity in your tenant that points at our app. Nothing is generated by or collected from you. Revoke it anytime by deleting the enterprise app or removing the Reader assignment.
Findings (with resource names), bounded cost aggregates, tenant and subscription IDs, your scan schedule and report recipients, plus one PDF per scan, hosted in the EU (Frankfurt). Never credentials, never metrics or logs, never a full resource inventory. The complete table-by-table list is in the docs.
Yes. It’s optional and off by default. Turning it on grants a separate read-only Microsoft Graph consent, kept apart from your Azure connection so it’s only ever asked for in tenants that opt in. It stores counts and costs only: no names, emails or user IDs.
Cancel: scans pause at the end of the paid period, your data stays readable. Delete a connection or the whole organization: findings, scans and stored PDF reports are removed immediately, and the identity in your tenant stops working the moment you revoke it on your side.
TenantThrift is an independent Swiss product (Simon Vedder, registered near Zurich). Your data is hosted in the EU (Frankfurt) and handled under the GDPR and Swiss data-protection law (revDSG). A real company with a named founder and a public imprint.
Azure only, on purpose. TenantThrift goes deep on Azure’s specific waste patterns and commitment options rather than spreading thin across three clouds.
Start with one tenant. Review the findings. Decide what to act on.