SeatReaper

Every tool SeatReaper reads

Connect the tools you already pay for. Each one adds what it bills to the same queue, so one departed person or one dead device is one item with every charge on it.

Read-only by default

Every connection except Partner Center can only read. Nothing is installed on client machines. Removing licenses or blocking sign-in (Growth and up) uses a separate Microsoft app that the client's admin approves on its own.

One item per person or device

Devices are matched across tools by name. A device that is dead in one tool but alive in another is not flagged: that is an agent or backup problem, not waste. Every threshold (60 days for devices, 30 for backups, 90 for sign-ins and phone numbers) can be changed.

Licenses and billing

  • Microsoft 365

    Connected per client

    Setup guide
    Reads
    Users, whether sign-in is blocked, last sign-in, MFA registration, and licenses bought and assigned, through four read-only Microsoft Graph permissions. It cannot read email, files, chats or calendars.
    Flags
    Blocked users who still hold licenses, licensed users with no sign-in for 90 days, and licenses bought but not assigned.
  • Google Workspace

    Service account once, then per client

    Setup guide
    Reads
    Users, suspension, last sign-in and licenses, through your own Google Cloud service account.
    Flags
    Suspended users who still hold a paid license (Google bills for them) and users with no sign-in for 90 days.
  • Pax8

    Connected once for all clients

    Setup guide
    Reads
    What Pax8 bills for each license, your cost, the billing term and when it ends.
    Adds
    Billed quantities and term end dates on unassigned-license items, and your Pax8 cost as a price suggestion.
  • Microsoft Partner Center

    Connected once for all clients

    Setup guide
    Reads
    What each client is billed for when you buy from Microsoft directly (CSP).
    Adds
    On Growth and up, lower a subscription quantity from the queue after you confirm it. Its access is not limited to reading; SeatReaper changes a quantity only when a person asks.

Remote monitoring (RMM)

  • N-able N-central

    Connected once for all clients

    Setup guide
    Reads
    Devices with their class, operating system, customer and last check-in.
    Flags
    Devices with no check-in for 60 days, when every other tool agrees they are dead.
  • Datto RMM

    Connected once for all clients

    Setup guide
    Reads
    Devices, whether they are online, when they were last seen and the last signed-in user.
    Flags
    Offline devices not seen for 60 days, when every other tool agrees.
  • NinjaOne

    Connected once for all clients

    Setup guide
    Reads
    Devices, when NinjaOne last heard from them and the last signed-in user.
    Flags
    Devices with no contact for 60 days, when every other tool agrees.

Endpoint security (EDR)

  • CrowdStrike Falcon

    Connected once for all clients

    Setup guide
    Reads
    Falcon hosts and when each was last seen.
    Flags
    Hosts not seen for 60 days, when every other tool agrees.
  • SentinelOne

    Connected once for all clients

    Setup guide
    Reads
    Agents, when each was last seen and the last signed-in user.
    Flags
    Agents not seen for 60 days, when every other tool agrees.
  • Huntress

    Connected once for all clients

    Setup guide
    Reads
    Agents and when each last called in. Products billed per user are not read yet.
    Flags
    Agents with no call-in for 60 days, when every other tool agrees.
  • Sophos Central

    Connected once for all clients

    Setup guide
    Reads
    Computers and servers, and when each was last seen.
    Flags
    Devices not seen for 60 days, when every other tool agrees.
  • Webroot

    Connected once for all clients

    Setup guide
    Reads
    Endpoints, when each was last seen and the last user.
    Flags
    Endpoints not seen for 60 days, when every other tool agrees.

Backup

  • Cove Data Protection

    Connected once for all clients

    Setup guide
    Reads
    Backup devices, workstation or server, and the last successful backup. It cannot start, stop or change backups.
    Flags
    Devices with no successful backup for 30 days, when every other tool agrees.
  • Acronis Cyber Protect Cloud

    Connected once for all clients

    Setup guide
    Reads
    Machines, their backup plans and the last successful backup. Storage charges are not read.
    Flags
    Machines with no successful backup for 30 days, when every other tool agrees.
  • Datto SaaS Protection

    Connected once for all clients

    Setup guide
    Reads
    Billed user seats for each customer.
    Flags
    Seats still billed for people who left, or who are no longer in Microsoft 365.

Training and MFA

  • KnowBe4

    Connected per client

    Setup guide
    Reads
    Training users and whether each is active, through a Reporting API key.
    Flags
    Active training users who left, or who are no longer in Microsoft 365.
  • Duo

    Connected once for all clients

    Setup guide
    Reads
    Duo users, checked against Microsoft 365.
    Flags
    Duo users of people who left, or who are no longer in Microsoft 365.

Phone numbers

  • Flowroute

    Connected once for all clients

    Setup guide
    Reads
    Phone numbers with their call and text history.
    Flags
    Numbers with no call or text for 90 days.

Start with up to 3 client tenants, free.

Create your account