Cloud posture (CSPM)
The Cloud posture (CSPM) module shows pass and fail configuration results for the cloud and identity services you connect, such as Microsoft 365, mapped to framework controls, and tracks a fix or an exception for each failing check to a decision.
Who it is for
- Organisations that run on cloud and identity services such as Microsoft 365, and want to know whether their configuration is sound.
- Security leads who want failing checks turned into work someone owns, not a list in a console.
What you get
| Capability | Where in the app | Guide |
|---|---|---|
| A connection to a cloud or identity service, such as Microsoft 365 | Cloud posture › Connectors | Connectors |
| Identities and devices brought in from each connection | Assets › Inventory | Connectors |
| Pass and fail results for configuration checks, mapped to framework controls | Cloud posture › Checks | Configuration checks |
| Requests for a fix or an exception on a failing check, decided in Tasks › Inbox | Cloud posture › Checks | Configuration checks |
| Remediation actions for approved fixes | Tasks › Actions | Actions |
| A configuration report to print or share | Assurance › Reports | Reports |
From setup to result
- Connect and sync a serviceCloud posture › Connectors
- Review failing checksCloud posture › Checks
- Decide fixes and exceptionsTasks › Inbox
- Configuration reportAssurance › Reports
Good to know
Who can use it?
Cloud posture, connecting a service included, needs an administrator on the main project; see roles and permissions.
Do I need to run a scan?
No. Results come from the services you connect.
Plans
The number of connectors you can add depends on your plan; see pricing.
Did this answer your question?
Identity exposure & dark-web monitoring
The Identity exposure module finds leaked credentials, breached passwords and exposed account addresses tied to your domain, for you to resolve once the account is secured.
Pentest
The Pentest module records each penetration test as an engagement, from scope to findings to an approved report, and tracks its findings to a fix.