Policy Governance

Change tracking, applied to Azure Policy. StratoLens records assignment changes, exemption expirations, and each resource's Azure Policy compliance state on every scan, so you know when a resource fell out of policy compliance and what changed around it.

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

Azure shows you current compliance state, but not when things changed or why. That's a problem when auditors come knocking:

No History: You can see that a resource is non-compliant today, but not when it became non-compliant
Silent Modifications: Assignment changes and deletions happen without anyone noticing until there's a gap
Exemption Surprises: Exemptions expire, resources suddenly become non-compliant, and nobody saw it coming
Hard to Prove Response Time: Auditors want evidence you detected and responded to compliance issues promptly

The Solution

Know when policy compliance changed and what caused it:

Assignment Tracking: See added, modified, and deleted assignments, scan over scan
Policy Compliance Transitions: See which resources fell out of (or back into) policy compliance between scans
Exemption Tracking: Track expiration dates so you can remediate before exemptions lapse
Full Hierarchy View: Policy assignments and initiatives from management groups down to individual resources

See It In Action

Key Benefits

Detect policy assignment changes (added, modified, deleted) between scans

Identify Azure Policy compliance-state transitions: see when resources became non-compliant

Track exemption expirations to prevent surprise compliance failures

Evidence of timely detection and response for audit reporting

Unified view of assignments, exemptions, and compliance across your entire hierarchy

Risk-based prioritization surfaces non-compliant resources automatically

Common Use Cases

Trace a policy compliance change back to the assignment or exemption change that caused it

Prepare for audits with scan-over-scan policy compliance history

Track exemption expirations and plan remediation before they lapse

Detect unauthorized policy changes that could create governance gaps

Root cause analysis when resources suddenly become non-compliant

Want the Details?

Explore our documentation to see how Policy Governance works in detail.

Read Documentation View All Features

From the Blog

Azure Policy Compliance at Scale: Why 74% Compliant Means Nothing

A compliance score without history is a vanity metric. Query real policy state with Azure Resource Graph, and add the timeline Azure never shows you.

Read the article

Start Your 28-Day Free Trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

Available now on the Azure Marketplace.

Start free trial

Not ready to install anything? Browse the Azure Footguns Database: 55+ documented ways Azure quietly costs money or creates risk.

Request a demo

StratoLens catches the cost waste, access risk, and config drift across your whole Azure estate, from inside your own tenant, so your data never leaves it.