Auditor¶

Auditor performs periodic configuration assessment of your cloud platforms and vulnerability scanners against CIS Benchmarks. Each run produces findings with a severity, evidence, compliance-framework mappings, and structured remediation guidance, so you can see where a configuration drifts from best practice and exactly how to fix it.

Audits run on a per-connector schedule (default 0 */6 * * * — every 6 hours). Findings are retained for 90 days and run history for 180 days.

Framework coverage¶

Every check carries direct per-check mappings to every supported compliance framework, derived from the CIS official control mappings. The compliance view is filtered to your org-enabled frameworks and offers a framework selector with an All frameworks option.

Two accuracy notes:

• ISO 27001 control identifiers reflect the platform's current Annex A vocabulary, which is a dated control set.
• PCI DSS means version 4.0 on-platform; PCI DSS 3.2 is intentionally not represented.

Reading audits and fixing issues¶

The Auditor lives at Reporter → Auditor and has four tabs, all deep-linkable via query parameters (?tab=overview|findings|runs|connectors, plus ?framework= and ?control=):

• Overview — overall and per-framework compliance, a framework selector, and a 30-day compliance trend.
• Findings — every finding, filterable by framework, platform, severity, and status. Selecting a row opens the finding detail.
• Runs — audit run history per connector with pass/fail/error counts.
• Connectors — connector configuration (see Connector setup).

The finding detail shows the severity and status, the evidence collected, the framework mappings, and the related MITRE ATT&CK technique ids.

Structured remediation is presented as: a summary, numbered fix steps, the console path, a copyable CLI command, and vendor documentation links.

For the org-wide snapshot view, see the Audit Report page. The Compliance Readiness report also shows Audit findings (N) links that jump from a control row directly to its backing findings, pre-filtered to that framework and control.

Permissions¶

Connector setup¶

Auditor connectors are configured in the Analytics UI under Reporter → Auditor → Connectors.

See also: Audit Report · Compliance Readiness · Reporter