Spot Suite
Open navigation
Back to products

Spot Suite catalog product

Guardrail Ledger

The weekly operating system for Azure guardrails, exceptions, and evidence.

What drifted, who approved it, which control is now at risk. Continuous landing-zone drift, policy and RBAC change tracking, exception governance, and packaged monthly evidence for auditors and customers.

Evidence story

What this app proves.

Every product page points to the proof a buyer or auditor expects before rollout.

Evidence

Diff history per management group with cryptographic timestamps

Evidence

Pre-filled evidence templates for ISO 27017 and CIS Azure

What you get

Product scope in plain language.

No placeholder modules, no bundled mystery fees.

Daily diff of Azure Policy assignments, exemptions, RBAC, and resource-tag drift

Defender for Cloud recommendations and landing-zone blueprint deviations in one feed

Public IP, storage, and Key Vault exposure pattern detection

Exception ledger with owner, expiry, approver, and reason of record

Weekly drift digest with one-click ITSM ticket creation

Monthly evidence packs stored in R2 with signed download URLs

Also in Spot Suite

Add another app when the work expands.

View all pricing
$499/mo

xEvolve

Secure file exchange with a chain of custody auditors accept.

Encrypted Environments, signed deliveries, per-Environment retention, and a tamper-evident log of every byte. The delivery layer the rest of Spot Suite writes evidence into.

Assisted pilot available

€149/mo

Control Ledger

Microsoft control-evidence automation for NIS2, DORA, and ISO 27001.

Turns your Microsoft 365 and Azure telemetry into auditor-ready evidence packs. Coexists with the GRC you already own; replaces the screenshots and spreadsheet chasing.

Assisted pilot available

€149/mo

Access Fabric

The missing operator UI on top of Entra access reviews and lifecycle workflows.

Works with Entra, does not replace it. Packages Entra reviews, entitlement management, and lifecycle workflows into auditable business workflows so JML and guest cleanup stop running through spreadsheets.

Assisted pilot available