The store
Every tool here came out of doing the same job on somebody else's estate for the fourth time. They read, they never write, and they exit non-zero when they cannot reach Azure, because "found nothing" and "could not look" are different answers.
Lifetime updates on everything. Licence terms ship inside the download.
Start with the free one. It does one of the ten jobs in the toolkit properly, with the same pricing logic and the same read-only guarantee.
Free · one script
Finds the disks, NICs, public IPs and load balancers nobody remembered to delete, priced by provisioned tier rather than by the data on them.
Azure cost & security · ten scripts
Orphaned resources, idle VMs, stale snapshots, NSG rules, public storage, stale RBAC, expiring credentials, tag compliance and spend by tag. Disks priced by provisioned tier, from the live Retail Prices API.
Sentinel · twelve rules
Twelve analytics rules for configuration drift and privilege escalation, with a validator that proves every query runs in your own workspace before you deploy it. A rule that cannot run never says so.
Intune · config as code
Export policy to JSON, commit it, and get told exactly which property drifted, however deeply nested. The diff doubles as configuration management evidence.
Output · three formats
Turn toolkit CSV exports into a client-ready HTML report, a Markdown summary for tickets, and a Teams or Slack digest. White-label it as your own.
No code path creates, modifies or deletes a resource. They can run on day one of an engagement, before anyone has decided how much access to grant.
A cost tool that loses its token and prints "no findings" has produced a clean bill of health from an empty search. These exit non-zero instead.
Managed disks are priced by provisioned tier, not consumed gigabytes. A flat per-GB estimate understates a P10 by roughly 3.7x.