Cloud governance

Azure subscriptions without the portal safari

Azure scatters answers across portals, subscriptions, and blades. LynxTrac connects through a service principal and consolidates the operational view: what exists, what it costs, and what fails which compliance check.

For Windows-heavy shops the pairing is natural, the same platform that patches your Windows fleet and unlocks sessions with the credential provider also watches the Azure side of the estate.

Subscription-wide inventory

VMs, Azure SQL and Cosmos DB, Blob storage, VNets and NSGs, App Service, AKS, and Key Vault discovered and kept current.

Cost trends without spreadsheet rituals

Daily breakdowns per subscription, region, and service, with budgets and breach alerts routed wherever your team reads them.

Compliance findings with a workflow

Daily CIS, PCI-DSS, HIPAA, and SOC 2 scans, findings grouped by severity, and exceptions you can document instead of ignore.

Drift and ARM export

Baseline snapshots catch out-of-band changes; live resources export to ARM templates or Terraform when you formalize them.

Setting it up

Create a service principal (subscription ID, tenant ID, client ID, client secret) and add it as a cloud account. Secrets are stored encrypted with per-account key derivation.

Multiple subscriptions onboard as separate accounts; plan quotas and the per-account add-on apply.

Related: Cloud governance

See it connected to your own account

The free tier covers 2 servers forever, which is enough to wire this up and judge it on your infrastructure rather than ours.