Maester

An open-source PowerShell test framework that checks a Microsoft 365 tenant's security configuration.

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About Maester

Maester turns Microsoft security best practices into runnable tests for a Microsoft 365 and Entra tenant. It ships with more than 360 built-in tests covering identity, access, devices and apps, and includes the EIDSCA, CISA SCuBA, CIS Microsoft 365 and ORCA baselines in one report.

It is built on Pester and Microsoft Graph, is installed from the PowerShell Gallery, and lets you write your own tests for internal policies. Runs can be scheduled in GitHub Actions, Azure DevOps or Azure Automation to flag drift. Each test includes remediation steps and links to the relevant admin portal.

Strengths

  • More than 360 ready-made security tests
  • Five compliance baselines in a single report
  • Custom tests written in Pester
  • Can run on a schedule in CI pipelines or Azure Automation

Limitations

  • Limited to Microsoft 365 and Entra tenants
  • Requires PowerShell and Microsoft Graph permissions

Details

Pricing
FreeFree and open source, community driven.
License
Open source, license not stated
Developer
The Maester contributors
Platforms
Command line
How it runs
Downloadable app
Best suited for
Microsoft 365 administrators who want repeatable security checks before and after changes
Last verified
Added
Provenance
Selected from the TechWalrus Resource Hub (Enterprise & Workplace IT); facts checked against the developer's own pages, 2 sources on file.

Report a wrong fact or a dead link on this listing