Findings
Every finding ranked by dollar loss. Click filters to re-sort.
Sum of per-finding ALE (mode)
Storage account allows public blob access
Storage account 'nwcustexports' has public blob access enabled AND contains data tagged data_class=pii.
SQL Server firewall allows 0.0.0.0/0
nw-orders-db firewall rule permits all inbound IPs on port 1433. Public internet can attempt authentication.
Key Vault purge protection disabled
Production Key Vault lacks purge protection. Soft-deleted secrets could be permanently destroyed before recovery window expires.
Stale user account with active SSH key on jump host
User account has not signed in for 187 days but retains SSH key authorization on nw-jumphost-01.
CloudTrail logs retained for only 30 days
Audit logging retention below SOC 2 CC7.2 minimum of 1 year.