For auditors & consultants
Stop chasing screenshots.
Get the evidence from the tenant.
Run a read-only CIS assessment of your client's environment and take away the findings, the evidence behind each one and a timestamped snapshot.
Assess client environments on
Every finding, with its evidence.
The setting that failed, what the benchmark expects, what the scan found and the objects it affects.
Controls Every control: status, severity estimate and the impact of a fix.
Evidence you can stand behind.
Assess
A known benchmark, control by control.
The client's environment is checked against the CIS benchmarks for its cloud, with a pass, fail or manual result for each control.
Browse the standards →
Seat
A read-only seat, not admin rights.
The client invites you with a read-only auditor seat. Export audit-ready evidence for your working papers.
Audit & Evidence →
Report
A report with a timestamped snapshot.
Each assessment becomes a PDF report with findings, evidence and a timestamped tenant snapshot.
Reports & Evidence →
Licence
Licensed per engagement.
The Assessment License is one-time and per tenant. It expires when the audit closes.
See pricing →What you take away.
Read-only access
Evidence for every finding
Level 1 and Level 2 profiles
Read-only auditor seat
One-time licence per tenant
Built on the CIS benchmarks.
- CIS controls checked today
- 898
- CIS benchmarks
- 10
- connectors live
- 4
Per-cloud benchmarks and control counts are on the connector pages.
ConfigCobra for Auditors & consultants
The offer
Assessment License
- One-time licence, per tenant
- Expires when the audit closes
- Every available module included
Frequently asked questions
How does the Assessment License work?
It is a one-time licence per tenant with a flexible duration. It expires when the audit closes. Contact us for a quote.
Can I review results without the client's admin account?
Yes. The client can invite you with a read-only auditor seat, and the connection to the environment itself is read-only.
What evidence do I get?
Evidence for every finding and an audit-ready evidence export. Also a PDF report with a timestamped tenant snapshot.
Which benchmarks are covered?
Each connector is checked against the CIS benchmarks for that cloud. The standards pages list the exact versions and control counts.
Try it on a real tenant
Tell us about the tenant and the engagement and we will send a quote for an Assessment License. Or start a free trial first.