Helpdesk console · AD · Microsoft 365

One search.
Every answer.

A caller's entire identity in front of your Tier-1 team in seconds: Active Directory, devices, and Microsoft 365 in a single widget dashboard, with the most common privileged fixes built in and fully audited.

Request a demo Evaluate offline, today

Evaluates in five minutes, fully offline. In production, your directory data never leaves your network.

03:50:06CONTOSO\mreyesSearchbsmithTrueAD 1 match(es).

Every search and privileged action writes a line like this. Recreated from the built-in mock mode; all identities are sample data.

The first call

"Hi, my password isn't working."

Tier-1 lives or dies on the first sixty seconds of a call. Here is how that minute goes when everything the technician needs is already on one screen.

01

The caller says a name

The technician types it once: bsmith. No portal hopping, no second console, no "let me just load one more admin center."

02

The diagnosis is already on screen

Problems surface first, flagged and readable at a glance, next to the caller's manager, groups, and machines.

03

The fix is one click, behind a prompt

Unlock and reset run under an admin credential entered for that action, held in memory only, and executed against the PDC emulator.

04

The receipt writes itself

Actor, target, action, result. Exportable from the Session tab, with optional persistence to a Windows Event Log channel for your SIEM.

Product

The dashboard your first call deserves

A technician types an account name or a hostname. SwiftAssist answers with everything relevant: status, lockout, password policy, groups, manager, devices, licenses, MFA, mailbox, and Intune compliance, laid out as widgets that surface problems first.

Unified lookup

User and computer search in one window, plus a session tab with the running audit trail. More than two dozen widgets cover both directories, and each one is independently error-isolated, so one failure never blanks the others.

Account Info Account Expiry Recent Activity Manager & Org Home Dir & Profile Password Policy Group Membership Assigned Devices BitLocker Recovery Key M365 Account & Licenses MFA Methods Mailbox OneDrive Shared Mailbox Access Entra Devices M365 Groups & DLs Teams Sign-In Logs Intune Compliance

Highlighted widgets require per-action elevation.

Privileged fixes, audited

Account unlock, password reset, group changes, and BitLocker key retrieval are one click away, behind an in-memory admin credential prompt, run against the PDC emulator, and recorded actor-target-action to the audit trail.

Native Windows desktop

WPF on .NET 8: fast, keyboard-friendly, light and dark themes, and no browser tab sprawl. Deploys as a signed MSI with AppLocker and WDAC guidance for locked-down estates.

Evaluate in five minutes

Mock mode is the default configuration: the full application runs offline against a bundled sample directory of users and devices. Your security team can review every workflow before a single credential is issued.

Click-through navigation

A manager, a direct report, or an assigned computer is one click from its own full lookup. The caller's context follows the technician instead of the other way around.

Tour

See the whole workflow

Every view below is drawn from the application's built-in mock mode: the same bundled sample directory, accounts, and audit lines an evaluation build ships with.

The Graph side. Licenses, MFA methods, mailbox, OneDrive, shared mailbox access, and Teams sit beside the AD widgets: one search covers both directories.
Group membership. Direct versus effective membership at a glance. Add and remove are one click, behind per-action elevation and a primary-group guard.
Computer Search. Directory record, assigned user, BitLocker recovery keys (elevation required), Entra and Intune state.
Session audit. Every search and privileged action in the running session: actor, target, action, timestamp. Never secrets.
Sample Accounts. Evaluation builds ship a browsable scenario directory: locked accounts, expiring passwords, offboarded users, ready to click through.
Settings. Runtime configuration and theming. Administrators control the rest centrally via appsettings.json.

Every name, machine, and audit line on this page is mock-mode sample data, exactly what you get in the first five minutes of an evaluation.

Security

Built for the people who say no

SwiftAssist assumes your security team reviews everything, so the security model is documented, testable, and deliberately boring. Boring enough that this section is typeset like the review pack itself.

SwiftAssist · Security model, summary of claims Reviewable before install

§1In-memory elevation

Privileged actions prompt for an admin credential held as a SecureString, never written to disk, and run impersonated against the PDC emulator.

§2Session hygiene

The admin credential and M365 session are discarded on 15-minute idle, Windows lock, exit, and crash paths. The clipboard is cleared on exit.

§3Complete audit trail

Every search and privileged action is recorded and exportable, with optional persistence to a dedicated Windows Event Log channel for SIEM forwarding. No passwords or key material are ever recorded.

§4Locked-down ready

Code-signing, AppLocker, and WDAC guidance ship with the product. Sovereign-cloud aware M365 sign-in: WAM broker, browser, or device code.

§5No standing service account

The application runs with the technician's normal rights. There is no always-on delegated account for an attacker to target, because elevation exists only per-action, in memory.

The security review pack: the security model, hardening guide, audit trail design, and AppLocker/WDAC rollout guidance, available before anything is installed. We also complete vendor security questionnaires.

Request the pack

Architecture

Your directory data never leaves your network. There is no middle tier, so there is nowhere for it to detour.

There is no vendor backend and no telemetry pipeline. Outside the optional license check-in (license identity and app version only, never directory data), the only data we receive from you is what you type into the forms on this website.

Compare

How SwiftAssist fits your stack

Most Tier-1 teams juggle native consoles, or stand up a web-based AD management suite with its own server, database, and standing service account. SwiftAssist takes a third path: a native desktop console with no middle tier at all.

Native consolesADUC, Entra & Intune portals Web-console suitesServer-hosted AD management SwiftAssistNative desktop console
Caller context per call 4 to 6 separate consoles and portals Per-module pages in a browser One search, one widget dashboard
Infrastructure to run it None Dedicated web server + database to host, patch, and secure None. The app runs on the technician's workstation
Standing privileged account Technicians hold broad rights directly Always-on delegated service account None. Elevation is per-action and in-memory
Where your data flows Direct to Microsoft Through the console server Workstation to your DCs and Microsoft Graph. No vendor cloud.
Audit trail Scattered across event logs Console-side logging Actor-target-action trail, exportable, Event Log / SIEM
Licensing Included with Windows / M365 Typically per technician or per object Flat per tenant, unlimited technicians

Web-console suites are a fair choice for provisioning automation and self-service workflows at scale. SwiftAssist is built for the first call. If you run both, they coexist cleanly.

Pricing

Simple, per-tenant, annual

One flat price per Entra tenant or AD domain, per year, with every technician included. No per-seat counting, no surprise true-ups.

Team

Everything a single IT team needs

$2,400/tenant/year

  • Unlimited technicians
  • Full AD + Microsoft 365 lookup dashboard
  • Audited privileged actions, exportable
  • Signed MSI for Intune / SCCM / GPO
  • Email support
Get started

Most popular

Enterprise

SwiftAssist in your organization's colors

$4,900/tenant/year

  • Your name, logo, and accent color across the app
  • Branded, signed MSI built for your rollout
  • Theme defaults (light / dark / system) managed per deployment
  • Hosted license check-in: renew without reinstall
  • Priority support with SLA, setup assistance as needed
Get started

Government & Regulated

For public sector and high-compliance estates

Custom pricing

  • Everything in Enterprise
  • Sovereign-cloud M365 support
  • Air-gapped / offline licensing
  • Hands-on security review & questionnaire support
  • Procurement vehicles & multi-year terms
Talk to us

One license covers your whole tenant: a ten-technician desk on Team pays $20 per technician, per month. Annual invoicing, purchase orders, multi-year terms, and public-sector procurement vehicles supported. Contact us for a quote.

Deployment & licensing

From MSI to managed in an afternoon

Deploys the way your endpoint team expects

A signed MSI that rolls out with the tools you already run: Intune, SCCM, or Group Policy. Every workstation reads a single admin-managed appsettings.json, with no per-seat setup, no local mystery state, and a documented key for every behavior.

{
  "Ad":      { "Domain": "corp.contoso.com" },
  "Graph":   { "TenantId": "…", "ClientId": "…" },
  "Audit":   { "EventLog": { "Enabled": true } }
}

Licensing that never takes you hostage

Your license is bound to your Entra tenant or AD domain with an annual term. It is cryptographically signed, verified offline (air-gapped networks included), and it never blocks launch or lookups.

Valid: full functionality, silent.

Expiring / grace: an amber banner warns; everything keeps working.

Past grace: read-only. Lookups continue, privileged actions pause until renewal.

With the optional check-in service, renewals land without a reinstall. And even if that service is unreachable, your current license keeps working exactly as issued.

FAQ

The questions procurement asks

Straight answers to what security, procurement, and IT leadership usually want to know before an evaluation.

Where does our directory data go?

Nowhere. SwiftAssist is a desktop application that talks directly from the technician's workstation to your domain controllers and to Microsoft Graph. There is no vendor backend, no telemetry pipeline, and no directory data processed on our infrastructure. If you enable the optional license check-in service, the application sends it only your license identity (the license ID and its bound tenant or domain) and the application version, over HTTPS, so renewals land without a reinstall. It never sends account, device, or audit data. Beyond that, the only data we receive from you is what you type into the forms on this website.

Do you hold SOC 2 or ISO 27001 certification?

Those attestations exist to vouch for a vendor cloud that processes your data. SwiftAssist has no such cloud, so there is nothing of yours for that kind of audit to cover. Instead we provide what actually applies to delivered software: the documented security model, hardening guide, audit trail design, and signed binaries. We also complete your vendor security questionnaire.

Does it require a standing privileged service account?

No. SwiftAssist runs with the technician's normal rights. When a privileged fix is needed, the technician enters an admin credential for that action. The credential stays in memory only and is discarded when the session goes idle, the workstation locks, or the app closes. Nothing is stored, so there is no always-on account for an attacker to target.

Can our security team review it before anything is installed?

Yes, twice over. The security review pack (security model, hardening guide, audit design, AppLocker/WDAC guidance) is available before any install, and the application's default mock mode runs the complete product offline against sample data, so reviewers can exercise every workflow with zero credentials issued.

How is it licensed and what happens if we don't renew?

One flat annual price per Entra tenant or AD domain, unlimited technicians. The license is cryptographically signed and verified offline, air-gapped networks included. If it lapses, the product degrades softly: a warning banner, then a grace period, then read-only (lookups keep working; privileged actions pause). It never blocks launch.

How do we deploy and update it?

A signed MSI rolled out with Intune, Configuration Manager (SCCM), or Group Policy. All workstations read one admin-managed appsettings.json, and every configuration key is documented. Updates are the same MSI, re-deployed with your existing tooling.

Do you support public-sector procurement?

Yes. Annual invoicing, purchase orders, W-9 and vendor onboarding, multi-year terms, and sovereign-cloud Microsoft 365 environments. Choose "Procurement & invoicing" on the contact form and paperwork goes straight to the people who can sign it.

What support do we get?

Every plan is supported by the engineers who build the product: email support on Team, priority support with an SLA on Enterprise. There is no outsourced Tier-1 queue in front of you.

Demo & contact

Talk to a human

A thirty-minute guided demo with an engineer, licensing and pricing questions, procurement paperwork, security documentation: we answer everything ourselves, usually within one business day.

Or evaluate offline, today

Evaluation builds are compiled to mock mode: the complete application runs against a bundled sample directory (about 20 users and 15 devices) with no domain, no tenant, and no credentials, and it cannot be pointed at a production directory (by construction, not by configuration). Your team can exercise every widget and every privileged workflow air-gapped.

1

Request an evaluation build with this form and we deliver a signed MSI.

2

Install and launch. Search bsmith or WS-BSMITH-01.

3

Click "Sign in to M365" for sample Graph data, still fully offline.

Security reviewers: the security model, hardening guide, and AppLocker/WDAC guidance are available on request before any install.