AIRM + Microsoft · additive, not competing

Microsoft builds AI. Sabiki governs it.

Microsoft delivers world-class productivity, identity and security. Sabiki extends that investment with a dedicated Non-Human Identity Control Plane, discovering, understanding and governing the non-human identities operating across your tenant. The two work alongside each other; Sabiki helps you get more value from Microsoft, not replace it.

✓ Full capability Basic / Partial / Limited Varies by tier ✕ Not available Blue Where Sabiki adds value

Most organisations already spend US$39-99 per user, per month on Microsoft licensing, yet still have no independent view of the AI agents, non-human identities and cross-platform AI risk operating inside their tenants. Sabiki AIRM adds exactly that missing layer, on top of the Microsoft investment you’ve already made, and it’s priced per tenant, not per user.

Additive, not competing

Sabiki works with Microsoft, not against it.

AIRM is an independent Non-Human Identity Control Plane that sits on top of E3, E5, E7, Copilot, Agent 365, Entra and Purview. It makes those investments safer and more valuable to your clients, it never replaces them.

But doesn’t Microsoft Agent 365 already do this?

Agent 365 governs Microsoft’s own agents inside a single tenant, and it discovers them by Microsoft’s naming conventions. AIRM adds what it doesn’t: it finds every non-human identity by behaviour and real Graph permissions, including the third-party and rogue agents that don’t follow Microsoft’s naming, the ones Agent 365 can’t see. On top of that: cross-vendor coverage, multi-tenant management across your whole client base, a Sabiki NHI Risk Score^™ scored the same way in every tenant, evidence you can hand to an auditor, a board or an insurer, and white-label delivery. Better together, AIRM makes Agent 365 and E7 easier to sell and safer to run.

📈

It grows your Microsoft business

When clients can adopt Copilot, E5 and E7 safely, they adopt more. AIRM helps you sell more Microsoft, not less.

💰

New recurring margin

A per-tenant service line at 25 / 33 / 40% partner margin, additive revenue that never touches your Microsoft margin.

🤝

You own the AI relationship

You become the trusted AI adoption partner for every tenant, deepening and defending the client relationship.

Scope, stated plainly

Microsoft Entra manages your people. Sabiki governs everything that isn't one.

Sabiki does not do human identity. We do not touch single sign-on, MFA, conditional access or joiner-mover-leaver. Entra does that, and it does it well. Sabiki governs the non-human identities in the tenant, the service accounts, app registrations, OAuth-connected apps, service principals, connectors, Copilots and AI agents, which now outnumber your people and which no one is watching.

Not usHuman identity, SSO, MFA, conditional access, password policy, joiner-mover-leaver. That is Microsoft Entra.

✓

UsEvery identity that isn't a person. Discovered, scored and governed, whichever platform created it.

Capability	Microsoft 365 E3	Microsoft 365 E5	Microsoft 365 E7	Sabiki AIRM
Public list price (US · per user / mo)	$39	$60	$99	from $149 / tenant / mo
Microsoft platform & integrations
Microsoft 365 Productivity	✓	✓	✓	Complements Microsoft
Microsoft Identity Platform	✓	✓	✓	Uses Microsoft identity data
Microsoft Security Controls	Basic	Advanced	Advanced + AI	Complements existing controls
Microsoft Defender Integration	Limited	✓	✓	Integrates with Defender insights
Microsoft Entra Integration	Basic	Advanced	Advanced	Extends Entra visibility
Microsoft Purview Integration	Basic	Advanced	Advanced	Complements governance
non-human identity discovery
Discover AI Agents	Limited	Partial	Advanced	✓ Continuous discovery
Discover Non-Human Identities (NHIs)	Limited	Partial	Partial	✓ Comprehensive discovery
Service Principal Discovery	Basic	Basic	Basic	✓ Deep visibility
Enterprise Application Visibility	Basic	Basic	Advanced	✓ Enhanced inventory
Managed Identity Visibility	Limited	Partial	Partial	✓ Comprehensive
Microsoft Graph Permission Analysis	Basic	Partial	Partial	✓ Deep analysis
non-human identity intelligence
NHI Relationship Mapping	✕	✕	Limited	✓
NHI Lifecycle Monitoring	✕	Partial	Partial	✓
Dormant NHI Detection	✕	✕	Limited	✓
NHI Ownership Tracking	Limited	Partial	Partial	✓
non-human identity governance & observability
NHI Governance	Basic	Advanced	Advanced	✓ Continuous governance
non-human identity governance	✕	Limited	Partial	✓ Core capability
Executive AI Posture Dashboard	Limited	Partial	Partial	✓
Multi-Tenant MSP Dashboard	✕	✕	Limited	✓
AI Deployment Risk Insights	✕	Limited	Partial	✓
Continuous NHI Monitoring	✕	Partial	Partial	✓
Independent, cross-vendor assessment	✕	✕	Limited	✓ Independent of Microsoft
Overall NHI Risk Score	✕	✕	✕	✓ Core capability
Peer benchmarking vs similar organisations	✕	✕	✕	✓
Risk scoring & blast radius
Shadow AI agent detection	—	Limited	Partial	✓ Cross-vendor
AI agent & NHI risk scoring (behaviour + blast radius)	—	—	—	✓
Blast radius analysis (permission-based)	—	—	—	✓
Credential age monitoring & alerts	—	—	—	✓
Anomaly detection
Approved-agent behaviour monitoring	—	Defender signals	Defender signals	✓ Seventeen behavioural signals
Scan-over-scan anomaly accumulation	—	—	—	✓
Permission scope drift detection	—	—	—	✓
Compliance & channel
AI governance framework mapping (EU AI Act, ISO 42001, NIST AI RMF)	—	—	—	✓ 11 frameworks
Per-framework compliance reports	—	—	—	✓
PSA integration (ConnectWise, HaloPSA, Autotask)	—	—	—	✓
Per-tenant pricing (not per user)	—	—	—	✓
Reporting & operational intelligence
Executive Reporting	Basic	Advanced	Advanced	✓ Tailored for non-human identity
MSP Customer Reporting	✕	✕	Limited	✓
NHI Operational Intelligence	✕	✕	Limited	✓ Core capability

Microsoft tier capabilities are indicative and evolve with licensing; confirm specifics against current Microsoft documentation. Sabiki is designed to complement, not replace, any Microsoft 365 tier.

Sabiki AIRM is priced per tenant, across five tiers by identity volume, Basic $149 · Core $299 · Professional $499 · Business $899 · Enterprise $1,599 /tenant/month (annual). See full pricing →

Where we stand with Microsoft

Microsoft secures the platform. AIRM delivers independent, cross-vendor governance of the non-human identities inside the tenant.

AIRM is additive, not a replacement. It reads through Microsoft Graph, it changes nothing on its own, and it scores identities the same way whoever created them. An identity is governed regardless of the platform that issued it, which is precisely what a Microsoft-native control cannot be asked to do.

The Microsoft AI portfolio

Where Sabiki fits across the Microsoft stack.

Each Microsoft product solves part of the picture. Sabiki adds the independent, tenant-wide non-human identity posture and a Sabiki NHI Risk Score that spans all of them, Microsoft-native and third-party.

Product	List price*	Primary purpose	AI agent coverage	NHI visibility	Where Sabiki complements it
Microsoft 365 E3	$39	Productivity + baseline security	✕	Limited	Foundation only, most customers need additional AI governance.
Microsoft 365 E5	$60	Advanced security & compliance	Partial	Partial	Strong security, but limited tenant-wide non-human identity posture.
Microsoft 365 E7	$99	AI-first enterprise suite	✓	Better	Excellent Microsoft-native governance, independent posture management still adds value.
Microsoft Copilot	$30	AI productivity assistant	User AI	✕	Generates new non-human identities and permission risks to govern.
Agent 365	$15	AI agent lifecycle management	✓	Partial	Governs Microsoft-ecosystem agents in one tenant, AIRM adds independent, cross-vendor, multi-tenant scoring.
Entra Suite	$12	Identity governance	Partial	Partial	Governs identities, doesn't produce an overall Sabiki NHI Risk Score.

*Indicative Microsoft list prices, USD per user / month, subject to change. Sabiki is priced per tenant and complements every tier.

At a glance

Microsoft delivers the platform. Sabiki extends it for AI.

Microsoft delivers

Sabiki extends

Productivity

AI adoption confidence

Identity platform

non-human identity governance

Security controls

AI operational intelligence

Threat detection

non-human identity discovery

Identity management

non-human identity governance

Compliance

AI posture visibility

Security platform

AI enablement platform

See what Sabiki finds that Microsoft doesn't surface.

Run a free scan on one Microsoft 365 tenant and read the non-human identity inventory the same day. Agentless, agentless, complements your existing Microsoft investment.

Start free trial, 14 days

Where native tooling stops

AIRM classifies what native tooling may not surface as an AI agent.

Microsoft Agent 365 discovers agents by its own naming conventions. AIRM discovers every non-human identity by behaviour and real Graph permissions, so third-party and non-conforming agents that do not follow Microsoft's naming conventions are still classified and surfaced.

Naming-based discoveryMicrosoft Agent 365

What Microsoft surfaces

Copilot-Studio-AgentSeen

Power-Automate-FlowSeen

OpenAI-ConnectorMissed

svc-openai-prod-07Missed

Behaviour-based discoverySabiki AIRM

What AIRM surfaces

Copilot-Studio-AgentSeen

Power-Automate-FlowSeen

OpenAI-ConnectorSurfaced

svc-openai-prod-07Surfaced

Same tenant, two very different pictures. AIRM surfaces the identities Microsoft's naming-based discovery leaves invisible, then scores their blast radius and hands your team the fix. Additive to Microsoft, never a replacement.

How AIRM differs from enterprise NHI platforms →