Data, intelligence, and automation for Microsoft endpoint management and security
PowerStacks turns your Intune, Configuration Manager, and Defender data into one model you can report on, ask questions of, and act on. Open-source AI skills (Preview) give you a daily briefing of what to fix first. App Store for Intune packages, deploys, and updates your apps. All of it runs in your own Azure tenant. No agents, no vendor cloud, and we never see your data.
What is PowerStacks?
I ran ConfigMgr and Intune for 20 years before PowerStacks. The data was always there. Getting an answer out of it was the problem. The admin center shows you a number. It doesn't tell you what to do about it.
So we built the data model we wanted, and the reports on top of it. BI for Intune, BI for SCCM, and BI for Defender install into your own Power BI workspace and refresh on your schedule. No queries to write, no agents on devices. Now the same models feed AI skills that read them and tell you what to fix first.
App Store for Intune does the other half. It takes an app from the WinGet catalog or your own installer, deploys it through Intune, and keeps it updated. Users request, the right person approves, it installs.
That is where PowerStacks is going: from endpoint reporting to a data, intelligence, and automation platform for Microsoft endpoint management and security. The skills are step one. Remediation and automated compliance come later, and we'll say when they ship. We complement and extend Intune and Defender. We don't replace them.
Everything runs in your Azure tenant. We never see your data. Want to know exactly how it works? Ask and I'll show you.
The data model Intune should have shipped with
Three data models with reports included, and one app store. Pick what you need. They share a device key, so they join when you need more than one.
BI for Intune
Intune data, one model, reports included
- Device health and compliance
- Discovered apps and custom inventory
- Windows Update for Business reports
- Endpoint Operations Analyst AI skill (Preview)
BI for SCCM
Configuration Manager data, one model, reports included
- Software update compliance
- Hardware and software inventory
- 10+ inventory extension scripts
- No SQL to write
BI for Defender
Defender data, one model, reports included
- Vulnerabilities and exposed devices
- Secure Score and misconfigurations
- Threats and how fast you close them
- Security Operations Analyst AI skill (Preview)
App Store for Intune
Self-service app catalog with packaging and updates
- Users request apps, the right person approves
- Over 12,000 catalog titles plus your own installers
- PSADT packaging and automatic updates
- Install status straight from Intune
New: AI skills (Preview)
Ask your data what to fix first
Connect your own AI assistant to the BI for Intune or BI for Defender data model and ask for today's briefing. The skill ranks the top issues by devices affected, explains each one with Microsoft's guidance, and gives you the next step. Ask again and it builds the deck for your manager.
Open source. Read-only. Queries go through Microsoft's Power BI MCP server with your permissions. Results go only to the AI assistant you choose. Nothing comes to us.
Endpoint Operations Analyst Preview
For BI for Intune. Up to five issues to investigate today, ranked by devices affected, with check-in context, app error-code guidance, and next steps.
Security Operations Analyst Preview
For BI for Defender. The same daily briefing for your security posture. Preview scope is listed in the skill's README.
What customers say
Quoted exactly from public reviews on Microsoft Marketplace. Every one links to the original.
“A lot of work went into building this app… But even better than the app, the support provided by the power stacks team is incredible. I probably reach out more than their average user and everytime they answer my question, and pass on a bit of knowledge to help me moving forward.”
“With the BI for SCCM app we have eliminated the need to write custom sql queries.”
“A custom version of their SU report is sent weekly to our Directors. They love to get a comprehensive and simple report.”
“Makes it easy to assess and remediate our security posture.”
Why not just use what Microsoft gives you?
You should. The admin center, the ConfigMgr console, and the Defender portal are fine for today's status and for fixing one device. They are not built for the report your manager asked for, and Enterprise App Management covers a short list of apps with no self-service. That's the gap we fill.
| What you need | Native Microsoft tools | PowerStacks |
|---|---|---|
| What to fix first | You work it out across several blades | An AI skill (Preview) ranks today's issues by devices affected, with next steps |
| Intune, ConfigMgr, and Defender in one view | Three portals, manual exports | One data model per product with a shared device key |
| A report for leadership | Technical views, export to Excel first | Reports you can edit and schedule, and a model you can query yourself |
| Third-party app packaging and updates | Enterprise App Management: fixed catalog, no PSADT, no customization | Over 12,000 titles plus your own installers, PSADT, automatic updates |
| Users asking for apps | A help desk ticket | A request portal with approvals |
| Where the data lives | Microsoft's cloud | Your tenant, your subscription |
Runs inside your environment, not ours
No vendor-hosted SaaS. No agents on endpoints. No third party with a key to your tenant.
Your subscription
App Store for Intune deploys from the Azure Marketplace into your resource group: App Service, SQL, Key Vault, Application Insights.
No agents
We read the same Microsoft Graph APIs the admin center uses. Nothing to install on endpoints.
Your Power BI workspace
The data models and reports live in your workspace under your Microsoft 365 policies. Edit them however you want.
No client secret
App Store for Intune talks to Graph as a managed identity in your tenant. Nothing to rotate, nothing to leak. How it's built.
Why this matters
Two numbers from reports you can check yourself. The devices nobody is managing are where ransomware gets in, and breaches sit undetected for months. You can't fix a device you can't see.
of successful ransomware compromises originate through unmanaged devices. Over 90% of attacks that reached the ransom stage used an unmanaged device for initial access or remote encryption.
Microsoft Digital Defense Report 2023 and 2024global average time to identify and contain a data breach: 194 days to identify, 64 days to contain.
IBM Cost of a Data Breach Report 2024Questions we get a lot
What is PowerStacks?
A data, intelligence, and automation platform for Microsoft endpoint management and security. Today that means one data model each for Intune, Configuration Manager, and Defender for Endpoint with reports included, open-source AI skills (Preview) that read those models, and an app store for Intune. All of it installs into your own Azure tenant.
Does it need an agent on my devices?
No. The data models read Microsoft Graph and the Defender API, the same APIs the admin center uses. App Store for Intune deploys apps through Intune itself.
Where is my data stored?
In your tenant. The data models and reports live in your Power BI workspace. App Store for Intune runs on an App Service, SQL database, and Key Vault in your subscription. PowerStacks has no access to any of it.
What do the AI skills do?
You connect your own AI assistant to a BI for Intune or BI for Defender data model through Microsoft's Power BI MCP server and ask for today's briefing. The skill ranks the issues to fix first by devices affected and gives next steps. Read-only, open source, and nothing is sent to PowerStacks.
Does it help with an SCCM to Intune migration?
Yes. BI for SCCM and BI for Intune share a device key, so you can see co-management status, readiness, and progress for the same devices in one report.
More in the FAQ, or read how it's built.
Try it in your own tenant
Thirty-day trial, your data, your workspace. If it doesn't earn its keep, uninstall it.