Ross ROSS = Recommend OSS · open-source software intelligence for agents

maester365/maester

Maester is a test automation framework to help you stay in control of your Microsoft security configuration. observed · 2026-09-03

github.com/maester365/maester · homepage · HTML · MIT (permissive) observed · 2026-09-03

Health v2 · maintenance only

88/100

  • Activity 100
  • Release rhythm 83
  • Longevity 72
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 86
  • age_days: 1021
  • days_rel: 37
  • days_push: 0
  • n_releases_24m: 8

Full methodology

Adoption not part of the score

1080 stars · 278 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Maester is a PowerShell-based test automation framework that monitors and validates the security configuration of Microsoft 365 and Entra ID tenants. It ships 360+ built-in tests mapped to compliance baselines (CISA SCuBA, CIS, EIDSCA, ORCA) and runs them via Pester in CI/CD pipelines or locally.

Use cases

  • audit my microsoft 365 tenant security configuration
  • run CISA SCuBA baseline tests against Entra ID
  • monitor conditional access policy drift in CI
  • test m365 security posture as code with Pester
  • check Exchange Online configuration against ORCA baseline
  • generate security compliance reports for Microsoft 365

When to choose

  • you manage a Microsoft 365 or Entra ID tenant and want automated security configuration checks
  • you need to prove compliance against CISA, CIS, EIDSCA, or ORCA baselines
  • you want security tests running in GitHub Actions, Azure DevOps, or GitLab pipelines
  • you want to write custom Pester tests for your own tenant policies

When to avoid

  • your infrastructure is not Microsoft-centric (AWS, GCP, on-prem Linux)
  • you need runtime threat detection or SIEM rather than configuration auditing
  • you want a GUI-only tool without PowerShell familiarity

Facets

framework · maturity active

testing security monitoring configuration-management ci-cd cli security cloud-computing legal cli windows cloud powershell microsoft-365 entra-id pester security-posture compliance-baselines cisa-scuba cis-benchmark conditional-access microsoft-graph devops automation macos linux docker

10 sources

Member repositories

RepositoryRoleHealth v2
maester365/maestermain88

For agents

markdown · JSON · MCP: product_card(name="maester365/maester")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem