Inforcer's $50M: who actually runs your Microsoft 365?

London-based Inforcer announced a $50 million Series C on July 30, led by Insight Partners. The product is unglamorous and extremely relevant: one console where a managed service provider configures, hardens, and monitors Microsoft 365 across every small-business client at once. Investors are betting the SMB Microsoft 365 tenant is now too complicated for the business that owns it — and they're mostly right.

What actually happened

Per the company's announcement and TechCrunch, Insight Partners led, with Dawn Capital and Meritech Capital participating. That's $110 million raised across three rounds in 18 months for a company founded in 2023, growing 300% year over year, with valuation undisclosed (TechCrunch reports it doubled between the B and C). Founders Jamie Daum and William Connor are pointing the money at two things: Inforcer TDR, a threat detection and response layer for MSPs, and shadow AI detection — finding the AI tools employees signed up for that nobody approved.

Pricing is shifting too, from per-client to per-user, with the company signaling consumption or token-based models for future products. Read that as the honest version: AI features cost the vendor per call, and that cost is coming to your invoice one way or another.

Why MSP consolidation matters for your business

If you outsource IT, someone you've met twice has global admin on the system holding your email, your files, your customer contracts, and your identity provider. That's usually fine. It stops being fine at exactly the moment you need to switch providers, respond to an incident, or prove to an insurer what your controls are — and discover you can't see any of it yourself.

The shadow AI part sharpens this. Your team is already pasting customer data into whatever chatbot loads fastest. A tool that inventories that is genuinely useful. But detection reports go to your MSP's console, not yours, unless you ask.

So ask, in writing, and keep the answers:

• Do you hold a global admin account in your own tenant, separate from your MSP's? Break-glass, MFA'd, credentials in your safe. If the answer is no, fix that this week.
• Which baseline policies are applied, and can you get the export? Conditional access, MFA enforcement, retention, external sharing.
• Where do alerts land, and do you get a copy? Including shadow AI findings.
• What's the offboarding process? Get it before you want it.
• What's the AI surcharge? Per-user, per-seat, per-token — get it named before the renewal.

Outsourcing the work is smart. Outsourcing the visibility is how a routine provider change becomes a two-month outage.

Sources: Inforcer, TechCrunch.