| 🛡️ AWS Account Root User has active access keys🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS CloudFront Web Distribution Cache Behaviors allow unencrypted traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS CloudFront Web Distribution does not encrypt traffic to Custom Origins🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS DMS Endpoint doesn't use SSL🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User Access Keys are not rotated every 90 days or less🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User has more than one active access key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User with console and programmatic access set during the initial creation🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ AWS KMS Symmetric CMK Rotation is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS S3 Bucket is not configured to block public access🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS S3 Bucket Policy is not set to deny HTTP requests🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure App Service FTP deployments are not disabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure App Service HTTPS Only configuration is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Key Vault Soft Delete and Purge Protection functions are not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure MySQL Flexible Server require_secure_transport Parameter is not set to ON🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Non-RBAC Key Vault stores Keys without expiration date🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Non-RBAC Key Vault stores Secrets without expiration date🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Flexible Server require_secure_transport Parameter is not set to ON🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Single Server Enforce SSL Connection is not set enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Single Server Infrastructure Double Encryption is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure RBAC Key Vault stores Keys without expiration date🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure RBAC Key Vault stores Secrets without expiration date🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure SQL Server Transparent Data Encryption Protector is not encrypted with Customer-managed key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Storage Account Secure Transfer Required is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Storage Account With Critical Data is not encrypted with customer managed key🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Google BigQuery Dataset is anonymously or publicly accessible🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud DNS Managed Zone DNSSEC is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud MySQL Instance allows anyone to connect with administrative privileges🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Google Cloud SQL Instance SSL Connections are not enforced🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Firewall Rule logging is disabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Instance Block Project-Wide SSH Keys is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted CiscoSecure/WebSM traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted DNS traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted FTP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted HTTP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted LDAP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted NetBIOS traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted POP3 traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted SMTP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted SSH traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Cassandra🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Directory services"🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Elasticsearch🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Memcached🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to MongoDB🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to MySQL🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to OracleDB🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to PostgreSQL🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Redis🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted Telnet traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GKE Cluster Network policy is disabled.🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google HTTPS or SSL Proxy Load Balancer permits SSL policies with weak cipher suites🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Google Project with KMS keys has a principal with Owner role🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Storage Bucket is anonymously or publicly accessible🟢 | 1 | 🟢 x6 | no data |