Home
Start here¶
-
Run an inspection
Start a security scan of your cloud accounts or code repositories.
-
Set up a schedule
Automate recurring inspections on a daily, weekly, or custom cron schedule.
-
Browse findings
Filter, explore, and act on security findings across clouds and codebases.
-
Get notified
Set up Slack, email, or webhook alerts for your inspection events.
-
Open the console
Sign in to the hosted console, or find your self-hosted console's URL from your administrator.
-
Tier & scope matrix
See which plan a feature is on, and whether it's admin- or tenant-scoped.
What VirtualSutra AI inspects¶
| Domain | Coverage |
|---|---|
| AWS | IAM, EC2, S3, RDS, CloudTrail, GuardDuty, cost anomalies |
| Azure | RBAC, NSGs, Storage, Defender for Cloud, AKS |
| GCP | IAM, VPC, GCS, Security Command Center, GKE |
| Source Code | Secrets, SAST, dependency CVEs, IaC, CI/CD pipelines, SBOM + license compliance |
| Container Images | CVE scanning (Trivy), OS compliance (OpenSCAP), SBOM generation (Syft) |
| Kubernetes | Pod security, RBAC, NetworkPolicies, Pod Security Standards (CIS K8s Benchmark) |
| Compliance | CIS, SOC 2, ISO 27001, OWASP, PCI-DSS, CIS Kubernetes |
Read-only: No cloud resource is created, modified, or deleted during an inspection.
User Guide¶
| Topic | Guide |
|---|---|
| First inspection | Running an Inspection |
| Recurring scans | Schedules |
| Understanding findings | Findings |
| Compliance scores | Compliance |
| WAF pillar ratings | WAF Assessment |
| Downloading reports | Reports |
| Alert notifications | Notifications |
| Account access | Authentication |