Secure Microsoft Azure with Mondoo

Mondoo finds misconfigurations and vulnerabilities across your Microsoft Azure environment: compute instances, databases, networks, key vaults, and more. You can continuously monitor your subscriptions, scan in your build pipeline, or run ad hoc scans from your workstation.

Continuously scan

For ongoing security and compliance assessment of your Azure subscriptions, set up a continuous integration:

• Automated setup: The fastest path. Runs a generated command in Azure Cloud Shell to provision everything.
• Manual setup: For large environments, management group integrations, or key vaults using the legacy access policy permission model.

Stuck? See Test or Troubleshoot an Azure Integration.

Scan during build

• Assess risk in the Azure Container Registry
• Build VM images with Packer

Scan at runtime

• Scan an Azure subscription from your workstation with cnspec
• Install cnspec via cloud-init
• Terraform deployment
• Verify instances managed by Chef Infra
• Verify instances managed by Ansible

After you connect

Once your Azure subscriptions are connected and scanning, explore your asset inventory, then assess and improve your security to review and prioritize your findings.