Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
Compute Hardening
41 controls
8 services covered
Reviews VM and scale-set hardening, including guest configuration, managed identity mode, monitoring and malware agents, secure boot and vTPM, managed disks, Windows password and security policy, SSH access, and VMSS operational settings.
What we check
VM Windows Security Policy9
- Ensure Windows Virtual Machines Defender Exploit Guard is Enabled
- Windows Virtual Machines Should Meet Requirements For 'System Audit Policies - Detailed Tracking'
- Windows Virtual Machines Should Meet Requirements For 'Security Options - Accounts'
- Windows Virtual Machines Should Meet Requirements For 'Security Options - Audit'
- Windows Virtual Machines Should Meet Requirements For 'Security Options - Network Access'
- Windows Virtual Machines Should Meet Requirements For 'Security Options - Recovery console'
- Windows Virtual Machines Should Meet Requirements For 'Security Options - User Account Control'
- Windows Virtual Machines Should Meet Requirements For 'Windows Firewall Properties'
- Ensure Windows Virtual Machines Use Secure Communication Protocols
VM Guest Configuration6
- Ensure Virtual Machines Have Guest Configuration Extension Installed
- Linux Virtual Machines Should Have Guest Configuration Extension Installed
- Windows Virtual Machines Should Have Guest Configuration Extension Installed
- Add system-assigned managed identity to enable Guest Configuration assignments on virtual machines with no identities
- Virtual machines' Guest Configuration extension should be deployed with system-assigned managed identity
- Add system-assigned managed identity to enable Guest Configuration assignments on VMs with a user-assigned identity
VM Agents6
- Windows Virtual Machines Log Analytics Agent Is Connected
- Azure Monitor Agent is Installed on Linux Arc Machines
- Azure Monitor Agent is Installed on Windows Arc Machines
- Azure Monitor Agent is Installed on Virtual Machines
- Windows Virtual Machines Should Have Microsoft IaaSAntimalware Extension Installed
- Enable Microsoft IaaSAntimalware Extension Upgrade on Windows Virtual Machines
VM Windows Password Policy6
- Windows Virtual Machines Should Not Have Maximum Password Age of 70 Days or More
- Windows Virtual Machines Should Have Minimum Password Age of 1 Day or More
- Windows Virtual Machines Should Have Minimum Password Length of 14 Characters or More
- Windows Virtual Machines Have The Password Complexity Setting Enabled
- Ensure Windows Virtual Machines Do Not Store Passwords Using Reversible Encryption
- Windows Virtual Machines Should Not Allow Re Use of Previous 24 Passwords or Less
VM Linux Access4
- Linux Virtual Machines Should Not Have Accounts Without Passwords
- Linux Virtual Machines Should Not Allow Remote Connections From Accounts Without Password
- Linux Virtual Machines Should Require SSH Keys
- Linux Virtual Machines Scale Sets Should Require SSH Keys
VM Scale Set Operations4
- Virtual Machine Scale Sets Should Have Automatic OS Image Patching Enabled
- Virtual Machine scale sets boot diagnostics should be enabled
- Log Analytics Agent is Installed on Virtual Machine Scale Sets
- Resource Logs are Enabled for Virtual Machine Scale Sets
VM Boot Integrity3
- Virtual Machines Should Have Secure Boot Enabled
- Virtual Machines Should Have vTPM Enabled
- Ensure Trusted Launch is enabled on Virtual Machines
VM Disk and Platform3
- Ensure Virtual Machines are Utilizing Managed Disks
- Migrate Virtual Machines to New Azure Resource Manager Resources
- Virtual machine scale sets should use managed disks
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.