KloudRecon reads your Azure, or for partners every customer's billing, and turns it into an inventory, diagrams, security findings, compliance mapping, cost insight, statements and reports. Here is what happens, where to find each part, and who can do what.
Six steps, no agents and no write access. Most teams see their first results the same day they are approved.
Start the free trial with your work email (we send a one-time code) or with your Microsoft or Google account, then fill in a short profile.
Where:kloudrecon.com › Start free trial
We review every new organization to keep the platform safe. You get an email the moment your account is approved.
Where:Your inbox
Follow the portal or Cloud Shell steps on screen: one app registration with the Reader role. Paste the tenant ID, client ID and secret, press Validate, and the checklist shows exactly what KloudRecon can read. The secret goes straight into Azure Key Vault.
Where:Settings › Connections › New connection
The first scan starts by itself and you can watch every stage live. After that KloudRecon scans daily at the hour you pick, and Scan now is always there.
Where:The progress drawer in the top bar
The Overview gives your KloudRecon Score, top risks, attack paths and savings. Open a finding for the fix as portal steps, Azure CLI, PowerShell, Bicep or Terraform, plus an Azure Policy to keep it fixed. Assign it, resolve it, or accept the risk until a date.
Where:Overview · Security › Findings · Recommendations
Make PDF or Word reports with your logo, schedule them by email, send alerts to email, Teams or Slack, and invite colleagues with the role they need.
Where:Reports · Settings › Alerts · Settings › Team
Every scan runs the same stages in order. Each stage is read-only and is retried on its own, so one slow API never costs you the whole picture.
The sidebar follows the way teams work: see what you have, secure it, keep it running, save money, and share the results.
The live demo opens a read-only tour of a sample company with made-up data, with every part of the workspace switched on.
One Partner Center sign-in, every customer. From the first import to the monthly billing run, nothing is ever bought, cancelled or changed for you.
Partner sign-inOn the sign-in page choose CSP & MSP and continue with Microsoft, using a Partner Center user who is an Admin agent or Billing admin, with multi-factor sign-in. Microsoft asks once for read-only access.
Where:kloudrecon.com › Sign in › CSP & MSP
Confirm the account, and the first import reads every customer, tenant, reseller and subscription with 13 months of billing. After that the last days are read again every day.
Where:Partner Console › Partner Center
Extra read access adds Microsoft 365 licence lines and GDAP relationships without uploading files. Buying through Pax8? Connect its read-only API key pair too.
Where:Partner Center page › Extra read access · Pax8
Price books from list price, your cost, or your cost while keeping earned credit, with markups, discounts and volume tiers. Add fees, a statement currency per customer, and a target margin.
Where:Prices & margin
The dashboard opens with what needs you, in money order: cancel windows closing, unused seats about to renew, earned credit lost, misuse signs, access ending, overdue customers and budgets over.
Where:Dashboard
Make all statements for the month in one click, check and finalize them, email them, and export to QuickBooks, Xero, NetSuite, a PSA tool or CSV. Record payments and send reminders for overdue ones.
Where:Statements · Payments
Grouped the way partners work through a month.
Dashboard and billing analysis
This period against the last, by customer, service or any filter, as what you pay, what customers pay or list price.
Cost reasons
Twelve reasons that add up exactly: new subscriptions, usage, prices, reservations, earned credit, exchange rate and more.
Organizations
Every customer with trend, reseller, plan type, access status, groups and account manager.
Customer access
GDAP relationships, end dates, auto-extend and Global Admin roles, plus seats bought against seats used.
Earned credit and misuse
The day Partner Earned Credit stopped and what it costs, and signs of crypto mining or fraud.
Customer security
A full KloudRecon workspace per customer, and one security view across all of them.
Prices and margin
Price books, tiers, fees, margin per customer, service and reseller, and below-cost warnings.
Statements
One per customer per month in their currency, PDF and Excel, numbered and frozen when final.
Licences and renewals
Seats per product and why they changed, renewal calendar and cancel windows with the hours left.
Payments
Paid, part paid and overdue, ageing, credit risk, billing leakage and the Microsoft invoice check.
Staff access and resellers
Account managers see only their customers; each reseller’s share of the bill and margin.
Budgets and alerts
Budgets, cost jumps, new subscriptions, renewals and access ending, to email, Teams, Slack or a webhook.
Reports and Ask KloudRecon
Partner monthly report, customer review pack, and answers to “Why did Contoso go up?”.
When your IT partner invites you, you sign in on the Workspace tab and land in your own tenant, managed by them.
Your workspace follows your partner's plan, so you never get a separate bill from KloudRecon.
Invite people under Settings › Team with one of four roles. In the Partner Console, staff access limits members and viewers to the customers they look after.
Workspace
See everything in the workspace
Workspace
Run scans, work findings and recommendations, make reports
Workspace
Connections, settings, alerts, branding and team
Workspace
Audit log
Workspace
Billing and plan, delete the organization
Partner Console
See customers and their billing
Partner Console
Price books, fees, statements, licences and payments
Partner Console
Make and open customer workspaces, staff access
KloudSchool, which runs KloudRecon, approves new organizations. For support it can open a read-only view of an organization; every such view is time-limited and written to your audit log. "Assigned": members and viewers of a partner see the customers staff access gives them, or every customer when none is set.