New CIS & NIST baseline comparison now available in the Managed tier — talk to us
Open-source · GitHub Actions · Your repo

Intune config
as code.
Not as SaaS.

Automated backup, drift detection, cross-tenant comparison, and point-in-time restore for Microsoft Intune — powered by GitHub Actions, stored in your own repo.

4
Pipelines
80%+
Cost reduction
0
Per-user fees
LIVE
intune-backup — GitHub Actions
# Nightly drift detection — 01:00 PT Running Intune backup... 847 policies backed up to IntuneBackup/ Detecting configuration drift... Drift detected — 3 file(s) changed   # Graph audit log enrichment 📌 deploy_automation (service principal) 📌 j.martinez (console change) 📌 unattributed — Settings Catalog   Branch drift/2026.03.18_01.00 pushed Teams notification sent
Built for teams that manage Intune at scale
ENTERPRISEHEALTHCAREFINANCEEDUCATIONMSP

Stop paying SaaS tax on your own configs

Enterprise backup tools charge per-user, per-month for functionality
that belongs in your CI/CD pipeline.

Typical SaaS Vendor

  • $20K+/year subscription
  • Your configs live in their cloud
  • Black-box diff engine
  • Snapshot-only version history
  • Restore = open a support ticket
  • Cross-tenant compare = enterprise add-on
  • Per-user pricing scales with headcount
vs

IntuneGuard

  • Flat annual fee — no per-user pricing
  • Your repo, your data, your audit trail
  • Open-source — inspect every line
  • Full git history with field-level diffs
  • One-click restore with dry-run preview
  • Cross-tenant comparison built in
  • Price never changes as you grow
80%+

average cost reduction vs. enterprise SaaS alternatives

Capabilities

Everything you need. Nothing you don't.

Six capabilities that give you complete Intune lifecycle management.

🔄

Automated Daily Backup

Every policy, profile, script, and app config backed up to JSON in your GitHub repo. Runs nightly, zero manual effort.

🔍

Drift Detection & Attribution

Know exactly who changed what in the Intune console — enriched from the Microsoft Graph audit log with UPN-level attribution.

📊

Change Reports

Field-level diff reports in HTML and Excel. Filter by policy type, platform, author, or assignment group. Per-commit timelines.

⚖️

Cross-Tenant Comparison

Compare Dev, Test, and Prod side by side. Deep-diff JSON configs, spot missing policies, flag assignment discrepancies.

Point-in-Time Restore

Roll back to any git commit, tag, or branch. Dry-run mode previews every change. Environment approval gates protect production.

💬

Teams Notifications

Drift alerts, pipeline results, and restore confirmations pushed directly to your Teams channels. Stay informed without the noise.

How it works

Four pipelines. One repo. Complete lifecycle coverage.

Pipeline 01

Backup & Drift

Nightly backup with audit-enriched drift detection

Pipeline 02

Change Report

Field-level diff reports in HTML + Excel

Pipeline 03

Compare Tenants

Cross-environment deep JSON comparison

Pipeline 04

Restore

Dry-run, selective restore, approval gates

Pricing

Predictable pricing. No per-user tax.

Your configs shouldn't cost more just because your company grew.

Community
$0
Open-source forever
  • All four pipelines
  • Unlimited tenants and policies
  • Your own GitHub Actions runners
  • Community support via GitHub

Built by The Kelsicks

IntuneGuard is developed and maintained by The Kelsicks — an endpoint automation and infrastructure delivery practice based in Seattle. If you manage Intune at scale and want this running in your org, we'll deploy it, configure it, and make it yours.

Your configs deserve
version control.

See IntuneGuard running against your tenant in under 30 minutes. No credit card. No vendor lock-in. Just your policies, in your repo, under your control.

Schedule a 30-min Demo → About The Kelsicks