Standards
The CIS benchmarks we assess.
Exact versions, exact counts.
ConfigCobra checks your configuration against CIS benchmarks with read-only access: a result per control, with evidence and a severity estimate to help you prioritise (CIS itself publishes no severity).
Section by section, control by control.
The CIS Microsoft 365 Foundations Benchmark v7.0.0: 160 controls in 9 sections.
One page per standard.
Versions, control counts, sections and the Level 1 / Level 2 split.
CIS Microsoft 365 Foundations Benchmark
- CIS Microsoft 365 Foundations v7.0.0160
CIS Microsoft Azure Benchmarks
- CIS Microsoft Azure Foundations v6.0.0127
- CIS Microsoft Azure Compute Services v2.0.099
- CIS Microsoft Azure Database Services v2.0.049
- CIS Microsoft Azure Storage Services v2.0.064
CIS Google Cloud Platform Foundation Benchmark
- CIS Google Cloud Platform Foundation v5.0.093
CIS Amazon Web Services Benchmarks
- CIS Amazon Web Services Foundations v7.0.070
- CIS AWS Compute Services v2.0.082
- CIS AWS Database Services v2.0.098
- CIS AWS Storage Services v1.0.056
More in the library.
Check library
Every CIS check, explained, with how to fix it
Insights
Identity and resource risks: inactive users, guests, app secrets and more
Academy
Cloud security concepts explained: CSPM, SSPM, CIS benchmarks, drift and more
Guides
Step-by-step how-tos for Microsoft 365, Azure, Google Cloud and AWS admins
Compare
ConfigCobra next to Maester, ScubaGear, Prowler, CIS-CAT and the cloud built-ins
Free tools
No-login helpers: email domain checker, DMARC/SPF generators, tenant lookup, scripts, CIS checklists
Built on the CIS benchmarks.
- CIS controls checked today
- 898
- CIS benchmarks
- 10
- connectors live
- 4
- connector coming soon
- 1
How assessments run: Cloud Security Posture Management (CSPM).
See where your tenant stands.
Try ConfigCobra free for 14 days with full access, or ask us for a quote.