Connect the systems behind your controls.

Checks account access, CloudTrail, GuardDuty, S3 public-access blocking, RDS protection, and security-group exposure.

• Root account MFA status
• Root account access key status
• IAM account password policy
• 5 more supported observations

Checks public IAM bindings and audit logging configuration in a Google Cloud project.

• Public IAM policy bindings
• Audit log configuration

Checks Defender for Cloud plan coverage and activity logging in an Azure subscription.

• Defender for Cloud plan status
• Activity log configuration

Inventories Vercel projects and deployment environments through read-only API requests.

• Project inventory
• Deployment environment inventory

Inventories Supabase projects and records reported project health through the Management API.

• Project inventory
• Project health summary

Checks organization access defaults, repository controls, and high-risk Dependabot alert coverage.

• Organization two-factor authentication status
• Default repository permission policy
• Visible repository inventory
• 2 more supported observations

Checks top-level group two-factor authentication enforcement and public visibility.

• Group two-factor authentication status
• Group visibility status

Collects paginated user inventory and verifies required authenticator enrollment settings in Okta.

• Paginated user inventory
• Required authenticator enrollment settings

Collects account security, access policy, administrator, and activity evidence from Microsoft Entra ID.

• Conditional Access and security defaults
• MFA registration report
• User security inventory
• 2 more supported observations

Collects account security, external sharing activity, and administrator evidence from Google Workspace.

• Two step verification report
• External sharing activity
• User account inventory
• 1 more supported observations

Collects current employee and workforce account inventory counts from BambooHR without persisting personal records.

• Current employee inventory
• Workforce account status summary

Collects device enrollment, encryption, and update compliance evidence from Jamf managed Apple devices.

• Device enrollment inventory
• Disk encryption compliance
• OS update status
• 1 more supported observations

Collects monitoring coverage, alerting, and log retention evidence from Datadog.

• Monitor and alert configurations
• Log retention settings

Collects WAF and minimum TLS configuration evidence from Cloudflare zones.

• WAF rule configuration
• TLS settings report

Inventories workspace users and administrators using a scoped, read-only Slack app token.

• User inventory
• Administrator inventory
• Workspace identity

Collects Jira user inventory and administrative visibility evidence from Atlassian Cloud.

• User inventory
• Administrative permission check
• Account identity