CSPM
The configuration of your six clouds, read through their APIs
Storage, network, compute, databases, encryption, logging, managed Kubernetes and AI services enter a graph; the rules are queries on it. Scaleway, OVHcloud and OUTSCALE at the same level as the hyperscalers.
- What is read
- Storage, network, compute, databases, encryption, logging, managed Kubernetes, AI services.
- How
- Read through the cloud APIs; every resource and its properties enter the graph, rules are queries over it.
- In the application
- Cloud configuration and AI-SPM pages. Each finding carries the resource, the rule, the detection logic, the fix and the compliance references.
What it cannot see. A property the cloud API does not return is not evaluated: the corresponding rule is disabled rather than guessed.
Example detections
- Publicly accessible bucket
- RDS database reachable from the internet
- Network security group allowing RDP from the internet
- Kubernetes API server exposed to 0.0.0.0/0
The other modules
Ready to see this module on your accounts?
The public demonstration runs on fictitious data. For an instance on your own accounts, request a demonstration.