HailBytes + Microsoft Azure

Asset discovery

HailBytes ASM enumerates internet-reachable assets from your subscriptions via the official azure-mgmt-* SDKs: DNS Zones, App Service, Public IP addresses, Storage accounts, and Front Door.

Authentication is by service principal, and Azure Government tenants are supported on the same connector — which tends to matter for the public-sector and defence-adjacent buyers who can't use commercial cloud endpoints.

Azure Key Vault

Credential fields accept azure-kv://<vault>.vault.azure.net/secret-name references, resolved at read time via the official azure-keyvault-secrets SDK with workload-identity or client-credentials auth. Secrets stay in the vault you already operate.

Azure Marketplace

Both products deploy from Azure Marketplace with charges counting toward MACC commitments, and private offers are supported for annual and multi-year terms. Channel partners can transact through Multiparty Private Offers.

Elsewhere in the Microsoft estate

Sentinel for detection and log analytics, Entra ID for SSO and SCIM provisioning, Teams for notifications, Azure Pipelines for CI scanning, and the Outlook Phish Reporter add-in for one-click user reporting.

Every integration point is customer-credentialed and read-only where discovery is concerned: Azure API usage stays on your own subscription.