Azure

VMs, Managed Disks, VNets/NSGs, Storage Accounts, and SQL Servers, with Cost Management and Monitor metrics.

What's collected

Virtual Machines, Managed Disks, Virtual Networks and Network Security Groups, Storage Accounts, and SQL Servers — plus Cost Management spend data and Azure Monitor CPU metrics.

Security & reliability rules

Open NSG rules, public blob access, storage accounts not enforcing HTTPS, SQL Servers with public network access or outdated TLS, and production VMs with no Availability Zone configured.

Access without a standing secret

The in-account collector option authenticates via Azure Managed Identity — no client secret is ever created, stored, or transmitted for it at all.