Services in this catalog
- blockstorage - 7 checks
- compute - 8 checks
- image - 6 checks
- networking - 6 checks
- objectstorage - 7 checks
blockstorage
7 checks.| Check ID | Title | Severity |
|---|---|---|
blockstorage_snapshot_metadata_sensitive_data | Block storage snapshot metadata does not contain sensitive data | CRITICAL |
blockstorage_snapshot_not_orphaned | Block storage snapshots reference existing volumes | LOW |
blockstorage_volume_backup_exists | Block storage volumes have at least one backup | MEDIUM |
blockstorage_volume_encryption_enabled | Block storage volumes have encryption enabled | HIGH |
blockstorage_volume_metadata_sensitive_data | Block storage volume metadata does not contain sensitive data | CRITICAL |
blockstorage_volume_multiattach_disabled | Block storage volumes do not have multi-attach enabled | MEDIUM |
blockstorage_volume_not_unattached | Block storage volumes are attached to instances | LOW |
compute
8 checks.| Check ID | Title | Severity |
|---|---|---|
compute_instance_config_drive_enabled | Compute instances have config drive enabled | LOW |
compute_instance_isolated_private_network | Compute instances are isolated in private networks | MEDIUM |
compute_instance_key_based_authentication | Compute instances use SSH key-based authentication | HIGH |
compute_instance_locked_status_enabled | Compute instances have locked status enabled | MEDIUM |
compute_instance_metadata_sensitive_data | Compute instance metadata does not contain sensitive data | CRITICAL |
compute_instance_public_ip_exposed | Compute instances are not exposed to the internet | MEDIUM |
compute_instance_security_groups_attached | Compute instances have security groups attached | HIGH |
compute_instance_trusted_image_certificates | Compute instances use trusted image certificates | HIGH |
image
6 checks.| Check ID | Title | Severity |
|---|---|---|
image_hw_mem_encryption_enabled | Images have hardware memory encryption enabled | MEDIUM |
image_not_publicly_visible | Images are not publicly visible to all tenants | HIGH |
image_not_shared_with_multiple_projects | Images are not shared with an excessive number of projects | MEDIUM |
image_protected_status_enabled | Images have deletion protection enabled | MEDIUM |
image_secure_boot_enabled | Images have Secure Boot set to required | MEDIUM |
image_signature_verification_enabled | Images have cryptographic signature verification enabled | HIGH |
networking
6 checks.| Check ID | Title | Severity |
|---|---|---|
networking_admin_state_down | Networks are administratively enabled | MEDIUM |
networking_port_security_disabled | Port security is enabled on networks and ports | HIGH |
networking_security_group_allows_all_ingress_from_internet | Security groups do not allow all ingress traffic from the Internet | CRITICAL |
networking_security_group_allows_rdp_from_internet | Security groups do not allow RDP from the Internet | HIGH |
networking_security_group_allows_ssh_from_internet | Security groups do not allow SSH from the Internet | HIGH |
networking_subnet_dhcp_disabled | DHCP is enabled on subnets | MEDIUM |
objectstorage
7 checks.| Check ID | Title | Severity |
|---|---|---|
objectstorage_container_acl_not_globally_shared | Object storage container read ACL is not globally shared | HIGH |
objectstorage_container_listing_disabled | Object storage container listings are not publicly accessible | MEDIUM |
objectstorage_container_metadata_sensitive_data | Object storage container metadata does not contain sensitive data | CRITICAL |
objectstorage_container_public_read_acl_disabled | Object storage containers do not grant anonymous read access | HIGH |
objectstorage_container_sync_not_enabled | Object storage containers do not have container sync enabled | MEDIUM |
objectstorage_container_versioning_enabled | Object storage containers have versioning enabled | MEDIUM |
objectstorage_container_write_acl_restricted | Object storage container write ACL is restricted | CRITICAL |
What’s next
Cloud Security overview
Connect a provider, see findings end-to-end.
All checks
Index across every provider.
Compliance frameworks
How check IDs map to SOC 2 / PCI / HIPAA / ISO controls.
Reports
Per-framework PDF scorecards.