Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
Public Resources
53 controls
19 services covered
Surfaces Azure resources with public network access enabled — storage accounts, SQL/MariaDB servers, Key Vaults, AKS clusters, container registries, Cognitive Services and Azure AD groups — so you can lock down anything that should be private.
What we check
Network Security Groups24
- Network Security Group HTTP Service Restricted
- Network Security Group HTTPS Service Restricted
- Network Security Group RDP Access Restricted
- Network Security Group SSH Access Restricted
- Network Security Group UDP Service Restricted
- Network Security Group Restrict Inbound ICMP Port
- Network Security Group Restrict Inbound TCP Port 135
- Network Security Group Restrict Inbound TCP Port 1433
- Network Security Group Restrict Inbound TCP Port 20
- Network Security Group Restrict Inbound TCP Port 21
- Network Security Group Restrict Inbound TCP Port 23
- Network Security Group Restrict Inbound TCP Port 25
- Network Security Group Restrict Inbound TCP Port 3306
- Network Security Group Restrict Inbound TCP Port 4333
- Network Security Group Restrict Inbound TCP Port 445
- Network Security Group Restrict Inbound TCP Port 53
- Network Security Group Restrict Inbound TCP Port 5432
- Network Security Group Restrict Inbound TCP Port 5500
- Network Security Group Restrict Inbound TCP Port 5900
- Network Security Group Restrict Inbound UDP Port 137
- Network Security Group Restrict Inbound UDP Port 138
- Network Security Group Restrict Inbound UDP Port 1434
- Network Security Group Restrict Inbound UDP Port 445
- Network Security Group Restrict Inbound UDP Port 53
Storage Accounts3
- Storage Accounts Public Access Blocked
- Storage Accounts Blob Containers Anonymous Access Disabled
- Storage Accounts Default Network Access Denied
Cognitive Services Accounts2
- Cognitive Service Account Restrict Public Access
- Cognitive Service Account Public Network Access Disabled
Virtual Machines2
- Virtual Machine Remote Access Restricted on All Ports
- Virtual Machine TCP/UDP Access Restricted from Internet
Container Registries2
- Container Registry Public Network Access Disabled
- Container Registry Restrict Public Access
AKS Clusters2
- AKS Cluster Nodes Restrict Public Access
- AKS Cluster Disable Public Access
Databricks Workspaces2
- Databricks Workspace No Public IP Enabled
- Databricks Workspace Public Network Access Disabled
Key Vaults2
- KeyVault Vault Public Network Access Disabled
- KeyVault Firewall Enabled
PostgreSQL Servers2
- PostgreSQL Server All IP Access Disabled
- PostgreSQL Servers Public Network Access Disabled
PostgreSQL Flexible Servers2
- PostgreSQL Flexible Server All IP Access Disabled
- PostgreSQL Flexible Servers Public Network Access Disabled
SQL Servers2
- Databases Servers Public Network Access Disabled
- SQL Database Allow Internet Access Disabled
Azure Active Directory Groups1
- Azure AD Group Not Public
Function Apps1
- Function App Restrict Public Access
Managed Disks1
- Compute Disk Public Access Disabled
Data Factories1
- Data Factory Public Network Access Disabled
Event Grid Domains1
- Event Grid Domain Public Network Access Disabled
MariaDB Servers1
- MariaDB Server Public Network Access Disabled
Search Services1
- Search Service Public Network Access Disabled
Service Bus Namespaces1
- Service Bus Namespace No Overly Permissive Network Access
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.