Feature
Security & Posture
One security hub for cloud posture, sign-in security and integrations, with OPA policy packs and Checkov scans enforced in the delivery pipeline.
Security checks are most useful at the point a change is made, and most trusted when they all report to one place.
The security hub
The security hub brings the workspace's security view together:
- Overview: the workspace's security state at a glance.
- Policies & compliance: the policy packs and compliance checks in force.
- External integrations: what is connected to the workspace and with what access.
- Sign-in & SSO: how people sign in, including SSO.
A separate posture view covers what is already running: security and compliance findings, cost optimization, and fixes Orbit has proposed for approval.
Policy in the pipeline
Every plan is checked before it reaches a reviewer:
- OPA policy packs evaluate the change against your rules (encryption, public access, tagging, naming, instance sizing and more), and a policy simulator lets you test a rule before you enforce it,
- Checkov scans the generated configuration for common misconfigurations,
- compliance packs cover frameworks such as PCI DSS and GDPR.
Policy packs are included on Business and Enterprise plans.
Related: how OrchesTerra accesses your cloud accounts.
FAQ
Do findings from existing resources show up, or only new changes?
Both. Posture covers what is already running in connected accounts; policy and Checkov checks run on every new plan.