AzPosture

Measure an Azure and Entra ID tenant against the AzPosture checklist: 130 read-only checks across security, cost, reliability and governance, run on your own machine under your own sign-in. Nothing is installed in the tenant and nothing is uploaded; the output is findings.json on your disk. Checklist 2026-08-18.

Minimum PowerShell version

7.2

Installation Options

Owners

• OzanBerkPolat

Copyright

(c) AzPosture contributors. MIT licence.

Package Details

FileList

• AzPosture.nuspec
• checks\entra\user-app-registration.ps1
• checks\library\dormant-service-principals.ps1
• AzPosture.psd1
• checks\entra\ca-mfa-admins.ps1
• checks\entra\standing-privileged.ps1
• checks\library\unclassified-managed-identities.ps1
• LICENSE
• checks\entra\guest-access.ps1
• checks\entra\ca-signin-risk.ps1
• checks\library\service-principals-without-owners.ps1
• README.md
• checks\entra\ca-mfa-all-users.ps1
• checks\entra\no-security-baseline.ps1
• checks\library\inactive-guests.ps1
• checks.json
• checks\entra\risky-users.ps1
• checks\entra\stale-devices.ps1
• checks\library\apps-without-verified-publisher.ps1
• checks\entra\ca-block-legacy-auth.ps1
• checks\identity\spa-apps-with-secrets.ps1
• checks\library\overdue-access-reviews.ps1
• AzPosture.psm1
• checks\entra\ca-user-risk.ps1
• checks\identity\privileged-account-audit.ps1
• checks\library\third-party-consent-grants.ps1
• lib\_lib.ps1
• checks\entra\weak-auth-methods.ps1
• checks\identity\long-lived-app-credentials.ps1
• checks\library\sp-overprivileged-graph-perms.ps1
• lib\_lib-arm.ps1
• checks\entra\ca-mfa-strength.ps1
• checks\identity\pim-activation-policy.ps1
• checks\library\risky-oauth2-consent-grants.ps1
• checks\arm\_reservations.ps1
• checks\entra\ca-mfa-azure-mgmt.ps1
• checks\identity\devops-apps-naming.ps1
• checks\library\inactive-users.ps1
• checks\arm\classic-admins.ps1
• checks\entra\global-admin-count.ps1
• checks\identity\azdo-apps-active-secret.ps1
• checks\library\ownerless-apps.ps1
• checks\arm\policy-compliance.ps1
• checks\entra\_ca-common.ps1
• checks\identity\expiring-app-credentials.ps1
• checks\library\sp-multiple-sensitive-approles.ps1
• checks\arm\mg-hierarchy.ps1
• checks\entra\user-create-privileges.ps1
• checks\identity\multi-tenant-apps.ps1
• checks\library\ownerless-groups.ps1
• checks\arm\diag-activity.ps1
• checks\entra\user-consent.ps1
• checks\identity\guests-password-only.ps1
• checks\library\sp-high-risk-directory-roles.ps1
• checks\arm\budgets.ps1
• checks\entra\admins-synced.ps1
• checks\identity\apps-multiple-secrets.ps1
• checks\arm\vm-reservation-coverage.ps1
• checks\entra\mfa-registration-coverage.ps1

Version History