Maester
Continuously test and monitor your Microsoft 365 and Entra ID security configuration.
What is Maester?
Maester is an open-source, PowerShell-based test automation framework that continuously validates the security configuration of your Microsoft 365 and Microsoft Entra ID tenant. Built on Pester, it runs a growing library of security tests against your tenant and produces clear, shareable reports.
- Hundreds of ready-made tests covering Entra ID, Conditional Access, and Microsoft 365 security best practices.
- Built-in support for the EIDSCA (Entra ID Security Config Analyzer) checks, the same configuration baseline featured in the EID Security Config Analyzer chapter of this playbook.
- Human-readable HTML / Markdown reports that highlight passing and failing checks.
- Designed for CI/CD — schedule the tests in a pipeline to detect security configuration drift over time.
Relation to this playbook
Maester complements this playbook by turning its hardening and configuration recommendations into automated, repeatable tests. It ships with built-in support for the EIDSCA checks that back the EID Security Config Analyzer chapter, so the same baseline you read about here can be validated continuously in your own tenant. Where the playbook explains why a control matters and how an attack works, Maester lets you verify that the corresponding defenses are in place and stay in place — moving from one-off hardening to continuous validation.