Azure Change Tracking

Change Tracking

Know exactly what changed, who changed it, and when. StratoLens captures full infrastructure snapshots on every scan, so you can compare any two points in time, with an audit trail that spans every subscription.

Start free trial Request a demo

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

When something breaks, the first question is always "what changed?" Without a cross-subscription audit trail, answering that takes hours:

Slow Incident Response: Teams dig through Activity Logs subscription by subscription, trying to piece together a timeline
Compliance Gaps: Auditors ask for evidence of infrastructure state over time, and you don't have it
No Accountability: Changes happen across teams with no clear record of who did what
Configuration Drift: Small, untracked changes pile up until systems no longer match their intended state

The Solution

Get a before-and-after view of changes across your environment:

Full Snapshot History: Every scan captures the state of your whole infrastructure
Compare Any Two Points in Time: See exactly what was created, modified, or deleted between any two scans
Change Attribution: Know who made the change and when, with full Activity Log correlation
Side-by-Side Diffs: Visual property-level comparisons showing the old value and the new value

From the product

Inside Change Tracking

StratoLens Azure change tracking side-by-side diff showing a new NSG inbound rule allowing RDP from the Internet, with change attribution to the user who added it — A side-by-side snapshot diff from the Contoso Financial demo environment catching a new inbound rule that opened RDP to the Internet on a production network security group, with the author and time attached. Shown with demo-environment data.

A property-level diff revealing the configuration flip that quietly turned a cheap Container App into one of the costliest resources in its group.

A scan-over-scan comparison surfacing dozens of deletions from a single automated cleanup run, each attributed to the service principal that performed it.

A create event for a storage account that landed in the wrong region for its EU landing zone, captured on the next scan after it appeared.

Product demo

See it in action

Benefits

Key benefits

Track creates, updates, and deletes across all resources

Compare any two snapshots with detailed change comparisons

Historical change timeline for audit trails

Identify who made changes and when

Use cases

Common use cases

Root cause analysis for incidents

Audit trail for compliance and security reviews

Track configuration drift over time

Self-hosted

Runs in your tenant. Reads everything, changes nothing.

StratoLens deploys from the Azure Marketplace into your own tenant and scans your subscriptions over read-only Azure APIs. The data behind Change Tracking is collected and stored inside your tenant; there is no StratoLens cloud holding a copy.

Read-only scans via Azure management APIs
Every scan at rest in your tenant, never a vendor cloud
Deployed from the Azure Marketplace in under 15 minutes

Learn more about data residency and security architecture

Want the details?

Explore our documentation to see how Change Tracking works in detail.

Read Documentation View All Features

From the Blog

Tracking Azure Resource Changes: Answering "What Changed?" Before the Trail Expires

The Activity Log and Resource Graph both answer "what changed?" in Azure, with short memories. How to query them, and how StratoLens keeps the whole timeline.

Read the article

Start your 14-day free trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

When the 14 days end, billing starts on your Azure invoice at your tier. One toggle in Settings turns it off, any time.

Start free trial

Request a demo

Not ready to install anything? Browse the Azure Footguns Database: 97 documented ways Azure quietly costs money or creates risk.