Pricing
Fair, per forest
No price per admin, because good delegation should not cost extra. Community is free and stays free. If you buy before general availability, you get the introductory price for three years.
- Unlimited adminsWe count enabled, non-expired user accounts in the forest.
- Licensed offlineThe licence is a signed file. No connection to us, no licence server.
- No lock-out after expiryWhen the subscription ends, the console keeps working as Community.
Editions
Community
Everything read-only plus a full risk assessment with remediation scripts, for your own organisation.
Freeforever, no time limit
- Target banner, explicit domain and DC choice, READ ONLY
- Paged search, saved searches, favourites, CSV export
- Attribute view with secrets filter, plain-language delegation
- Risk assessment with 130 rules (AD CS ESC1 to ESC13, tier 0 paths), TOMORIS Secure Score, maturity level, every finding explained
- Remediation script for every rule with -WhatIf, backup and undo
- Mapping to MITRE ATT&CK, CIS and NIS2, report as HTML and JSON without watermark
- Quiet read: no reconnaissance alert in Defender for Identity
- Signed updates, automatic or offline
For your own organisation only, no commercial use at customers. Lab licences for test and training forests are free as well.
Pro
RecommendedAnnual subscription, unlimited admins, tiered by enabled, non-expired user accounts.
On requestper forest and year · plus VAT
User accounts Tier per year Sup to 250 On request Mup to 1,000 On request Lup to 3,000 On request XLup to 10,000 On request XXLover 10,000 Quote - Everything in Community
- TOMORIS Secure Score history and trend, new and fixed since the last run
- Exceptions with justification per finding
- Email support (in German)
- Run remediation directly from the console, with audit log In progress
- Editing, per-OU permissions by role, applying OU templates, reports with your own logo In progress
Introductory price until general availability, locked in for 3 years. Try Pro free for 30 days, offline via licence file; afterwards you fall back to Community, with no lock-out and no data loss.
MSP
Pro scope for customer forests, billed monthly, from 5 tenants.
On requestper tenant and month · plus VAT
User accounts per tenant Tier per month Sup to 250 On request Mup to 1,000 On request Lup to 3,000 On request XLover 3,000 Quote - Full Pro scope per tenant, risk assessment included
- Cross-tenant overview In progress
- Minimum 5 tenants, billed monthly
- Reporting via a signed offline log, no phoning home
For service providers who use DirectoryOps as part of their service to customers. One tier per booking; tenants of different sizes on request.
For consultants and one-off assessments
Consultants and auditors
For risk assessments at customers: unlimited, read-only, with a report in your own branding.
On requestper consultant and year · plus VAT
- Unlimited customer assessments In progress
- White-label report without TOMORIS branding In progress
- Read-only; remediation at the customer needs the customer's Pro licence
Assessment-Pass
One full risk assessment with Pro scope, without a subscription.
On requestone-off · 30 days · one forest · plus VAT
- Pro risk assessment for 30 days
- Fully credited when you buy Pro
Prices on request via Contact. All prices net, plus VAT. Pro and Consultant are annual subscriptions, MSP is monthly. Pro applies per forest, with all domains and unlimited admins; we count enabled, non-expired user accounts. Anything the overview does not list (Pro above 10,000 accounts, MSP above 3,000 accounts per tenant, tenants of different sizes, purchase instead of subscription, bundle with PolicyOps) is available on request.
Comparison
What each edition includes
Rows marked “in progress” are committed but not yet shipped.
| Feature | Community | Pro | MSP | Consultant |
|---|---|---|---|---|
| Reading: target banner, search, attributes, delegation, CSV | ✓ | ✓ | ✓ | ✓ |
| Risk assessment with 130 rules, TOMORIS Secure Score, maturity level | ✓ | ✓ | ✓ | ✓ |
| Remediation scripts with backup and undo for every rule | ✓ | ✓ | ✓ | – |
| Mapping to MITRE ATT&CK, CIS and NIS2 | ✓ | ✓ | ✓ | ✓ |
| Report as HTML and JSON without watermark | ✓ | ✓ | ✓ | White label |
| TOMORIS Secure Score history and trend, exceptions with justification | – | ✓ | ✓ | ✓ |
| Run remediation directly from the console (in progress, Release 2) | – | ✓ | ✓ | – |
| Editing, applying roles per OU and OU templates (in progress) | – | ✓ | ✓ | – |
| Email support in German | – | ✓ | ✓ | ✓ |
| Use at customers | – | – | ✓ | Assessment |
Compared with other tools
What ADUC, ManageEngine ADManager Plus, Cayosoft and Adaxes offer and what they cost is listed with sources and date in the comparison. In short: with us, the risk assessment with remediation scripts is already part of the free Community edition.
Licence
Questions about pricing and licensing
Why per forest and not per admin?
Because good delegation should not be penalised. If you give your helpdesk its own narrowly scoped rights instead of sharing one admin account, you should not pay more for it. The licence is bound to the forest and checked offline.
What is the introductory price?
If you buy Pro before general availability, you pay the introductory price in every tier instead of the later list price. That price is locked in for three years. Current amounts are shown in the overview above.
Can I use Community at customers?
No, Community is for your own organisation. For assessments at customers there is the consultant licence or the Assessment Pass; for ongoing operations at customers, the MSP model.
Can I buy instead of subscribing?
Yes, on request with a separate quote: a perpetual right to use the purchased version with a maintenance contract. Without maintenance the purchased version keeps working, just without updates.
Can I pay by invoice?
Yes. Companies and public-sector customers get a quote on request and buy on invoice.
What happens when the subscription ends?
The console falls back to Community. Reading keeps working, nothing is locked, and saved searches and settings are kept.
Is there a bundle with PolicyOps?
Yes, as soon as PolicyOps is available we will also offer DirectoryOps and PolicyOps as a bundle. The bundle price is available on request.