Azure endpoint and VM security
Virtual machines are often the most exposed part of an Azure environment, so our endpoint security review checks each host for protection, patching and backups and lists any that fall short.
Antivirus and endpoint protection
For every virtual machine we check Defender for Servers enrolment, agent health and whether real-time protection is switched on. Any VM without protection, with out-of-date definitions or with an agent that has stopped reporting gets flagged, because each of these leaves the host open to malware, ransomware and fileless attacks.
Patch management
Using Azure Update Manager, we assess OS and application update compliance across your VMs. The findings list machines with outstanding critical or security patches, machines that aren't on any update schedule and update deployments that failed, since unpatched systems are one of the commonest ways in for attackers.
Backup and disaster recovery
We review your Azure Backup vault configuration and retention policies and find any production VMs that aren't backed up. Then we confirm that backup jobs complete successfully and look at whether the current setup can meet your recovery point objective (RPO) and recovery time objective (RTO).
Other Azure reviews
- Security & compliance
- Identity & access
- Network & infrastructure
- Architecture & operations
- Cost optimisation
Also on AWS? See our AWS compute and workload security review.