Login Get a Demo
01 Integration · Microsoft Azure

AI across Azure. One source of truth.

Models in your Azure tenant, code in Azure DevOps, agents built on Microsoft frameworks. Cranium ONE brings all of it into one inventory and keeps watching it as it changes.

02 Across the AI Trust Loop

What Cranium ONE does with Microsoft Azure.

01Discover02Observe03Govern04Secure05Prove↻ Continuously
Discover

Inventory AI in the tenant and the code

CloudSensor lists the AI models and resources it discovers in your Azure tenant on Cloud Assets. The Azure DevOps integration feeds CodeSensor, which catches Azure OpenAI and Semantic Kernel in C# and maps AutoGen AgentChat agents.

Observe

Watch for change

CloudSensor surfaces Azure security alerts and monitors for unauthorized changes on a nightly scan — or run one on demand right after you change something.

Govern

Know who can touch it

CloudSensor assesses role-based access controls. Verify Access reports exactly what Cranium can read, and a narrowed grant raises a permission-change alert instead of quietly dropping assets.

Prove

Evidence that stays current

Scheduled rescans keep every AI Bill of Materials current, exportable to CycloneDX and SPDX, and ready to back an AI Card.

03 Connect

Three steps. No rip-and-replace.

Cranium ONE works with the stack you already run. Your policy stays yours — we make it enforceable.

  1. 01
    Connect CloudSensor

    Add your Azure connection from the Cloud Sensor tab on Integrations, then run Verify Access.

  2. 02
    Add Azure DevOps

    Connect your dev.azure.com organization with a personal access token, filtered to the projects you choose.

  3. 03
    Put it on a schedule

    Set the integration to rescan weekly or monthly so the inventory never goes stale.

04 Questions

Cranium ONE & Microsoft Azure, answered.

What does CloudSensor do in Azure?

CloudSensor connects to your Azure environment to discover security alerts, monitor unauthorized changes and assess role-based access controls. Tenants licensed for it also get Cloud Assets, a list of the AI models and resources it discovers.

Does CloudSensor support AWS or Google Cloud?

CloudSensor connects to Microsoft Azure today. For code running anywhere, CodeSensor scans your GitHub, GitLab, Bitbucket and Azure DevOps repositories.

What access does Cranium need in Azure?

Only the read access you grant. Verify Access reports exactly what Cranium can read, and if you narrow a grant later the integration raises a permission-change alert rather than marking those assets as decommissioned.

Does the integration work with Azure DevOps Server?

The Azure DevOps integration connects to Azure DevOps Services at dev.azure.com, optionally filtered to specific projects. On-premises Azure DevOps Server needs a different configuration, which your Customer Success Manager can set up.