Skip to main content
Five Steps for Cloud Compliance Readiness·A practical playbook for security teamsDownload

Audit & Evidence

Prove your configuration
to an auditor or a client.

A dated PDF report with findings and evidence, an export for your working papers, and a read-only seat for the person who checks it.

Reports & evidence for

Evidence an auditor can check for themselves.

Export the findings, the evidence and a timestamped tenant snapshot, then invite the auditor with a read-only seat.

Reports Every scan is kept as a report you can open or download.

Replace screenshots and email threads.

Report

A dated PDF, not a folder of screenshots.

The PDF report holds the findings of the CIS assessment, the evidence behind them and a timestamped snapshot of the tenant.

Reports & Evidence →
Scan summary: score, controls assessed, results per section and the top failing controls. Sample tenant.

Evidence

Every finding shows what was found.

Each finding shows the setting that failed, what the benchmark expects, what the scan found and the objects it affects.

Evidence for a failing control: each checked setting, the expected and the found value, and the resources. Sample tenant.

Many tenants

Every client tenant from one workspace.

Assess subsidiaries or client tenants side by side, and repeat the same assessment next quarter.

ConfigCobra for auditors →

Everything the audit asks for, in one place.

  • PDF report with a timestamped tenant snapshot

  • Audit-ready evidence export

  • Read-only auditor seat

  • Team management and activity logs

  • Assessment License: one-time, per tenant

FAQ

Frequently asked questions

What is in the PDF report?

The findings of the CIS assessment, the evidence behind them and a timestamped snapshot of the tenant at the time of the scan.

See Reports & Evidence

Can the auditor log in themselves?

Yes. Invite them with a read-only auditor seat. They can review results without admin access to your tenant.

Which standard is the evidence based on?

The CIS benchmark of the connector you assess. The connector pages list the exact benchmark versions and control counts.

See the connectors

Is there a licence for one-off audits?

Yes. MSPs and auditors can use the Assessment License: one-time, per tenant, with a flexible duration that expires when the audit closes.

ConfigCobra for auditors

See it on your own tenant.

Start a 14-day free trial with full access, or ask us for a quote. Read-only access: ConfigCobra never changes your tenant.

Get in touch

Let's talk.

Whether you're evaluating ConfigCobra, running an audit, or managing a client fleet — we respond within one business day.

Free trial