Azure VM Inspector

Azure VM Inspector provides a read-only assessment of an Azure virtual machine, focusing on configuration correctness, security posture, and cost efficiency. It inventories VM metadata, OS and disk layout, network interface settings, extensions, and tags, then compares them to a defined baseline. The tool outputs a structured report highlighting drift, misconfigurations, and potential risk.
The assessment uses Azure Resource Manager to fetch current state and, when available, Azure Pricing API to estimate monthly cost impact from mis-sizing or underutilization. It calculates drift scores per category (configuration, security, cost) and aggregates them into an overall risk rating. Evidence like missing extensions, open ports, or noncompliant tags is attached to each issue.
This solution targets cloud engineers, DevOps, SREs, governance and FinOps teams who manage Azure VM fleets. It provides concrete remediation recommendations, supports batch runs across resource groups or subscriptions, and exports to JSON/CSV for ticketing and integration with policy engines. It differentiates itself by combining configuration drift detection with cost insights in a single, auditable report, without requiring changes to the running environment.