A posture assessment inventories your DevOps tenant and evaluates each resource against the DevOps Shield policy catalog. Running it continuously turns a point-in-time audit into a measurable trend.

How it works

  1. Connect your Azure DevOps, GitHub, or GitLab organization with a scoped access token.
  2. Run a baseline assessment to inventory organizations, projects, and repositories.
  3. Review violations grouped by severity and DevSecOps control.
  4. Schedule recurring assessments so posture drift is caught between releases.
  5. Export findings as SARIF or evidence reports for your auditors.