UnsaveInteractive tourRequest access
unsave.io/interactive/infrastructure
Sample tenant
Unsave
DashboardSecurity PostureConfiguration DriftCopilot ReadinessInfrastructureResourcesCompliancePoliciesCost & WasteFinOpsGitHubRecommendations

Identity

Role AssignmentsApp RegistrationsTag Governance

Monitor

ScansAlertsActivityReportsMSP Overview

Settings

ConnectionsSettingsIntegrations
Sample tenant

Contoso Manufacturing · Demo data. Your tenant looks like this after read-only consent.

Request access

Infrastructure Security

What to fix across your Azure infrastructure, ranked by how much each fix clears.
71%SCORE
At risk

39 of 55 checks passing

Open Fixes
8fixes

across 31 resources - most resources fail more than one check, so one fix clears several.

Identity vs infrastructure

Unsave posture 73% overall. This page is the Azure resource half - NSGs, storage, Key Vaults, SQL - not Entra.

SeverityFixAreaClearsWhere
  • critical

    Close inbound SSH from the internet

    Restrict NSG 22/3389 to known jump hosts.

    Network4 resources
    nsg
  • high

    Disable public blob access

    Set allowBlobPublicAccess = false on storage accounts.

    Storage3 resources
    storageaccounts
  • high

    Enable Key Vault purge protection

    Turn on purge protection so deleted secrets cannot be purged.

    Key Vault2 resources
    vaults
  • high

    Restrict SQL public network access

    Disable public endpoint. Use private endpoints.

    Database2 resources
    servers
  • medium

    Enable NSG flow logs

    Send flow logs to Log Analytics for the production VNets.

    Network5 resources
    networkwatchers
  • medium

    Require HTTPS on storage

    Set supportsHttpsTrafficOnly = true.

    Storage4 resources
    storageaccounts
  • medium

    Diagnostic logs on Key Vaults

    Enable audit and allLogs to the central workspace.

    Logging3 resources
    vaults
  • low

    Required tags on public IPs

    Apply owner and cost-center before the next scan.

    Governance8 resources
    publicipaddresses