Demo on recorded data — get early access
SettingsSign out

Settings

Every setting Warden has. A keeper (a person whose passkey approves changes) signs each change with a passkey; nothing else is needed.

Watching

What Warden reads, how often, and what it checks.

Accounts

The last run read 3 of 3 accounts.

AccountWatchingSeen in the last run
111122223333Always watched: Warden is installed hereNot seen by the last run
prod-acct 123456789012WatchedRead
234567890123Watched1 read did not complete
sandbox 345678901234Watched1 read did not complete

See every resource on Footprint

AWS accounts Warden watches

Default

All accounts

Every account is watched, because an attacker goes where no one looks.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
scope.accounts
Read by
the scheduled run

Regions

The last run read 16 of 17 regions.

Reads did not complete in eu-west-1.

Regions Warden watches

Default

All regions

Every enabled region is watched, because an attacker can use any of them.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
scope.regions
Read by
the scheduled run

Clusters

This console cannot run the check.

This board carries one cluster ratio and not the other. Warden's in-cluster checks ran in 1 of 1 clusters.

Warden runs inside its own cluster and reads every other cluster from AWS: its settings, access and control-plane logs. What is written inside a cluster's workloads is read only where Warden runs.

The last run named no clusters, so nothing here says a cluster was checked. A run on this release names every cluster AWS lists.

Read the same facts from a terminal
  • warden cluster preflight <cluster>

Clusters Warden watches

Default

All clusters

Every cluster that allows Warden in is watched.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
scope.clusters
Read by
the scheduled run

Extra cluster resource groups Warden reads

Default

None

Custom resources are not read until a keeper names their groups, because they can carry secrets.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
kubernetes.crd_groups
Read by
the scheduled run

Most cluster audit data read in one run

Default

At most 32 GB a run

32 GB of cluster audit logs a run covers a busy day at a few dollars a month.

Change
From 1 to 200.Needed only when the change makes Warden quieter.
Details
Setting name
sensors.eks_audit_gb_per_run
Read by
the scheduled run

CloudTrail

Setup recorded no trail log group.

Changing the trail is a signed install change, drafted from Install › Parameters. Change

Network sensor

The network sensor is off. At most $0.00 a month at list price.

Network flow logs Warden reads

Default

Off

The network sensor costs money per gigabyte read, so it is off until a keeper turns it on.

Change
One per line.From 1 to 500.
Needed only when the change makes Warden quieter.
Details
Setting name
sensors.flowlogs
Read by
the scheduled run

Schedule

Watching is not paused.

A pause ends on its own, at most 7 days after it is signed.

How often the scheduled run starts

Default

Every day at 06:00 UTC

A full run a day keeps the bill small; urgent signals arrive between runs.

Change
From 3600 to 86400.Needed only when the change makes Warden quieter.
Details
Setting name
scan.interval_seconds
Read by
the 15-minute check

Time of day the scheduled run is anchored to

Default

06:00 UTC

One fixed time a day keeps runs predictable, and 06:00 UTC is before the working day in Europe.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
scan.anchor_utc
Read by
the 15-minute check

Whether the scheduled run is paused

Default

Not paused

Warden watches unless a keeper pauses it, and a pause always ends.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
scan.paused
Read by
the 15-minute check

Shortest wait between runs you start by hand

Default

30 minutes

Half an hour between manual runs keeps a stuck button from running up the bill.

Change
From 600 to 86400.Needed only when the change makes Warden quieter.
Details
Setting name
scan.manual_min_gap_seconds
Read by
the 15-minute check

Most runs you may start by hand in a day

Default

6 a day

Six manual runs a day are enough to check fixes without running up the bill.

Change
From 1 to 24.Needed only when the change makes Warden quieter.
Details
Setting name
scan.manual_max_per_day
Read by
the 15-minute check

Budgets

Most log-query data scanned in one run
At most $21.00 a month at list price.
Most cluster audit data read in one run
At most $33.60 a month at list price.
Most AWS calls per account in a run
Not a charge: it limits the load on your own AWS APIs.
Regions read at the same time
Not a charge: it limits the load on your own AWS APIs.
Most data one collector reads in a run
Not a charge: it limits the load on your own AWS APIs.

Most log-query data scanned in one run

Default

20 GB a run

20 GB of log queries a run covers a busy account at a few dollars a month.

Change
From 1 to 200.Needed only when the change makes Warden quieter.
Details
Setting name
budget.insights_gb_per_run
Read by
the scheduled run

Most AWS calls per account in a run

Default

25,000 calls

25,000 calls an account a run read a large account without straining its API limits.

Change
From 5000 to 200000.Needed only when the change makes Warden quieter.
Details
Setting name
budget.api_calls_per_account
Read by
the scheduled run

Regions read at the same time

Default

4 regions at once

Four regions at once is fast without straining your own API limits.

Change
From 1 to 16.Needed only when the change makes Warden quieter.
Details
Setting name
budget.region_concurrency
Read by
the scheduled run

Most data one collector reads in a run

Default

200 MB

200 MB per collector reads a large set of accounts within the scanner's memory.

Change
From 16 to 1024.Needed only when the change makes Warden quieter.
Details
Setting name
budget.bytes_per_collector
Read by
the scheduled run

What it checks

Extra check packs

Default

Core

The core pack fits every AWS account; other packs are opt-in because they fit only some.

Change

Core: always on

Needed only when the change makes Warden quieter.
Details
Setting name
rules.packs
Read by
the scheduled run

Extra detector packs

Default

Core

The core detectors fit every AWS account; other packs are opt-in.

Change

Core: always on

Needed only when the change makes Warden quieter.
Details
Setting name
detectors.packs
Read by
the scheduled run

Checks held silent or switched on

Default

Every check as released

No rule is pinned until a keeper decides one should be.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
rules.status
Read by
the scheduled run

Days a new check stays silent

Default

7 days

A new rule watches quietly for a week so its first alerts are ones it has already shown it gets right.

Change
From 1 to 90.Needed only when the change makes Warden quieter.
Details
Setting name
rules.shadow_days
Read by
the scheduled run

How sure a new check must be before it alerts

Default

95%

A rule posts only while at least 95 in 100 of its reviewed findings stood.

Change
From 0 to 1000.Needed only when the change makes Warden quieter.
Details
Setting name
rules.precision_bar
Read by
the scheduled run

Reviews before a new check is measured

Default

3 reviews

Three reviews are the fewest that say anything about a rule's precision.

Change
From 1 to 100.Needed only when the change makes Warden quieter.
Details
Setting name
rules.min_reviews
Read by
the scheduled run

Age at which a machine image in use is called old

Default

180 days

An image a machine is built from is flagged when it is older than half a year; the cloud retires images it deprecates sooner.

Change
From 30 to 3650.Needed only when the change makes Warden quieter.
Details
Setting name
vulns.ami_max_age_days
Read by
the scheduled run

Age at which a running container image with fixable findings is called stale

Default

180 days

A running container image is flagged when it is older than half a year and has high findings with a fix.

Change
From 30 to 3650.Needed only when the change makes Warden quieter.
Details
Setting name
vulns.image_max_age_days
Read by
the scheduled run

Advisory knowledge

How Warden learns of new flaws: it downloads a signed list of advisories, the same files every install downloads. Nothing about your accounts is sent.

How often advisories are fetched

Default

Every 15 minutes

New advisories reach this install within fifteen minutes; a less frequent mode is yours to choose, and the hosts see one request each time.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
intel.advisories.fetch
Read by
the scheduled run

Software lists from Inspector

Inspector can write a software list for each image and function it covers. Turning this on starts one export a day, to Warden's own bucket, under its own key. It gives same-day package answers for containers and Lambda.

Software lists from Inspector

Default

Off

Off: the SBOM export is the one AWS job Warden would start, so it starts only when keepers turn it on.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
intel.advisories.sbom_export
Read by
the scheduled run

The account that administers Inspector

Default

None

The hub, until keepers name the account that administers Inspector.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
intel.advisories.sbom_admin_account
Read by
the scheduled run

What matters most

What kinds of data matter most

Default

None

Nothing is ranked as a crown jewel until a keeper names it.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assets.classes
Read by
the scheduled run

Buckets that hold sensitive data

Default

None

No bucket is ranked sensitive until a keeper names it.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assets.sensitive_buckets
Read by
the scheduled run

Signing services to watch closely

Default

None

No API is ranked as one that moves funds until a keeper names it.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assets.signing_apis
Read by
the scheduled run

Reading depth

How much of each cluster setting is read

Default

Names and values

Cluster settings are read with their values, because secrets are often left in them.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
kubernetes.configmap_values
Read by
the scheduled run

Optional GuardDuty protections

Default

Reported when off

An optional GuardDuty protection left off is reported, because it narrows what AWS sees.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
guardduty.optional_protections
Read by
the scheduled run

Revoked keys and identities to watch for

Default

None

No credential is marked revoked until a keeper records it.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
revocations
Read by
the scheduled run

What the last run could not read

2 findings could not be re-checked; they stay as they were.

28 of 30 collectors completed. Controls: 8 pass, 1 fail, 0 not applicable.

Reads that did not complete

2 reads did not complete. Nothing can be said about the scopes below until they do.

CollectorAccountRegionClusterStatusReason
guarddutysandbox 345678901234eu-west-1noneFAILEDAccessDenied
s3234567890123allnonePARTIALThrottled

Not measured by this build

  • s3-control — 1 of 3 reads declared not made (public access block, account level).

Findings not re-checked

  • 11 findings: this build does not make the read; the finding stays in the bundle and is a limitation of the build, not a fact about your accounts.

See the findings not re-checked

More settings

Rules of your own

Default

None of your own

No customer rules until a keeper writes one, previews it on your accounts and signs it.

Change
From 1 to 1000000.
Needed only when the change makes Warden quieter.
Details
Setting name
rules.custom
Read by
rules

Vendor rule pack

Default

No rule pack adopted

No rule pack until a keeper reads its changelog and adopts it; the release's own rules run either way.

Change
From 1 to 1000000000.
Needed only when the change makes Warden quieter.
Details
Setting name
rules.vendor_pack
Read by
rules

DNS providers

Default

None

DNS providers outside AWS are not read in this release.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
dns.providers
Read by
the scheduled run

Decoys that give an intruder away

Default

None

No decoy is watched until a keeper signs a set the scanner computed.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
assets.embers
Read by
the decoy watcher

Agents

The agents that read findings with you, and what they may spend.

Agents are on

The agents read findings with you, on the models below, within the budget below.

Models per role

RoleModelThis release allowsBedrock check
Leadanthropic.claude-opus-4-5-20251101-v1:0eu.anthropic.claude-opus-4-5-20251101-v1:0, us.anthropic.claude-opus-4-5-20251101-v1:0, global.anthropic.claude-opus-4-5-20251101-v1:0Not checked yet.
Triageanthropic.claude-haiku-4-5-20251001-v1:0au.anthropic.claude-haiku-4-5-20251001-v1:0, eu.anthropic.claude-haiku-4-5-20251001-v1:0, in.anthropic.claude-haiku-4-5-20251001-v1:0, jp.anthropic.claude-haiku-4-5-20251001-v1:0, us.anthropic.claude-haiku-4-5-20251001-v1:0, global.anthropic.claude-haiku-4-5-20251001-v1:0Not checked yet.
Huntanthropic.claude-sonnet-4-6anthropic.claude-sonnet-4-6, au.anthropic.claude-sonnet-4-6, eu.anthropic.claude-sonnet-4-6, jp.anthropic.claude-sonnet-4-6, us.anthropic.claude-sonnet-4-6, global.anthropic.claude-sonnet-4-6, eu.anthropic.claude-opus-4-5-20251101-v1:0, us.anthropic.claude-opus-4-5-20251101-v1:0, global.anthropic.claude-opus-4-5-20251101-v1:0Not checked yet.
Second opinionopenai.gpt-oss-120b-1:0openai.gpt-oss-120b-1:0, amazon.nova-pro-v1:0, apac.amazon.nova-pro-v1:0, eu.amazon.nova-pro-v1:0, us.amazon.nova-pro-v1:0Not checked yet.

This console cannot run the Bedrock check.

Budget

Agents' day budget
$15 a day, $465 at most a month
Chat's day budget
$3 a day, $93 at most a month
Kept in reserve for the most urgent cases
$30 a day

Agents may read findings

Default

On

The agents investigate by default, inside your own AWS account, and code still decides every status.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
llm.enabled
Read by
the scheduled run

Models the agents may use

Default

The default model for every role

Each role uses the release's preferred model until a keeper chooses another.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
agents.models
Read by
the agent runtime

Most the agents may spend in a day

Default

$15.00 a day

USD 15 a day covers a normal day's investigations.

Change
From 0 to 50000.Needed only when the change makes Warden quieter.
Details
Setting name
agents.budget.day_usd
Read by
the agent runtime

How the agents' proposals are handled

Default

Quieting a finding, hardening and leads to follow

The agents may propose suppressions, hardening fixes and hunt leads; keepers decide every one.

Change

quieting a finding

Needed only when the change makes Warden quieter.

hardening

Needed only when the change makes Warden quieter.

leads to follow

Needed only when the change makes Warden quieter.
Needed only when the change makes Warden quieter.
Details
Setting name
agents.proposals
Read by
the agent runtime

Standing instructions for the agents

Default

None

No standing instructions until a keeper writes them.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
agent.standing_rules
Read by
the scheduled run

More settings

Whether agents may use the global model profile

Default

No

Model calls run in your hub's region, or across the regions of its geography through the model's inference profile; they go anywhere else only if a keeper allows global routing.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
agents.allow_global_profile
Read by
the agent runtime

Daily spend held back for an attack

Default

$30.00 a day

USD 30 is kept back so an attack is investigated even after a busy day.

Change
From 0 to 50000.Needed only when the change makes Warden quieter.
Details
Setting name
agents.budget.attack_reserve_usd
Read by
the agent runtime

Most chat may spend in a day

Default

$3.00 a day

USD 3 a day covers questions asked in the console.

Change
From 0 to 50000.Needed only when the change makes Warden quieter.
Details
Setting name
agents.budget.chat_day_usd
Read by
the agent runtime

Most cases the agents open at once

Default

6 cases at once

Six cases a tick keep investigations focused; the hard maximum is twelve.

Change
From 1 to 12.Needed only when the change makes Warden quieter.
Details
Setting name
agents.max_cases
Read by
the agent runtime

Most data the agents may scan in a day

Default

5 GB a day

5 GB of follow-up log reads a day answers most questions for under a dollar a month.

Change
From 1 to 50.Needed only when the change makes Warden quieter.
Details
Setting name
agents.max_gb_scanned_day
Read by
the agent runtime

Defend

What Warden may do on its own to contain an active case, and its limits.

Defend is on. The Defend page shows whether it is acting right now, or paused by Warden itself.

It may act on: identities, containment and exposure.

Pause now

Defend starts nothing while the pause stands. It takes effect at once; another keeper can end it.

Limits

The most Defend may hold or do at once. Each limit stays within what Warden allows.

Caps
Turn off

Defend stops starting anything new. What it holds now ends at its own time, or when you undo it.

Holding now

What Defend holds now could not be read.

Standing orders

No standing order is in force.

Start night watch

Night watch freezes only what a principal made in the last 15 minutes that nothing has used, and wakes you each time. The principal that made them is held for a keeper unless you name it below. It rehearses for 7 days before it acts, and every freeze ends 2 hours after the night, at most 12 hours.

When

Open standing orders

Open Defend

People

Who approves changes, and how strong their passkeys must be.

Passkeys for console decisions

Keepers

A keeper is a person whose passkey approves changes.

2 keepers can sign.

  • Alice

    Keeper

  • Bob

    Keeper

    • Passkey on one device (as the key reports) cbde8901e4b234a6eb95f451d1b7bfe760e5c13a399d3742525d17d5756a959a live. never used. A spare swapped by a lying enrolment page fails on its first use. Sign one small change with it once a quarter, so you find out early.

      Someone needs that device and its unlock. Warden cannot prove the key stays on one device.

Invite a keeper

The ledger keeps only a keyed fingerprint of the address. The address goes to the install gate alone, which makes their sign-in at the door.

Viewers

People who may read the console. They sign nothing and change nothing.

  • Viewer

Invite a viewer

Your passkeys

  • Passkey on one device (as the key reports) ccc9fe76d45db13f8a455f4b3b0322b0cf0751080a5fae5f8582882048a8163e live

    Someone needs that device and its unlock. Warden cannot prove the key stays on one device.

Synced passkey (password manager or keychain)
To sign as this keeper, someone needs the password-manager or keychain account, or a device signed in to it, and its unlock.
Passkey on one device (as the key reports)
Someone needs that device and its unlock. Warden cannot prove the key stays on one device.
Hardware key, verified
Someone needs that physical key and its PIN.

Approvals needed

How many keepers must approve each kind of change. A number above the keepers who can sign holds that kind of change until more join.

  • To quiet a finding or a check: 1
  • To widen access or reach: 1
  • To change who decides: 1
  • For Defend: 1
Security

Recovery wait: 7 days. Recovering the install without a keeper's passkey waits this long, and every keeper is told.

No authenticator model is refused.

Weakest passkey that may approve changes

Default

Any passkey

Any passkey can sign, and the kind of passkey is recorded; stricter keys are opt-in.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assurance.key_floor.authority
Read by
the approvals check

Away until

Default

Not away

Nobody is away until a keeper says so.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
assurance.away_until
Read by
the approvals check

More settings

Weakest passkey that may approve Defend

Default

Any passkey

Any passkey can approve Defend, and the kind of passkey is recorded; stricter keys are opt-in.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assurance.key_floor.defend
Read by
the approvals check

Weakest passkey for the most dangerous Defend steps

Default

Any passkey

Any passkey can approve a critical Defend step, and the kind of passkey is recorded.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assurance.key_floor.defend_critical
Read by
the approvals check

Weakest passkey a keeper may add

Default

Any passkey

Any passkey can be enrolled, so no one needs to buy hardware.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assurance.enrol_min
Read by
the approvals check

Second check for dangerous changes

Default

A confirmation by e-mail

A one-keeper install confirms by mail, which needs nothing more than the address it already has.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assurance.second_path
Read by
the approvals check

Changes that need the second check

Default

The most dangerous Defend steps

Critical Defend acts by one keeper are confirmed on a second path.

Change

the most dangerous Defend steps

Needed only when the change makes Warden quieter.
Needed only when the change makes Warden quieter.
Details
Setting name
assurance.second_path_classes
Read by
the approvals check

Waiting periods while you are the only keeper

Default

Warden's waiting periods

A one-keeper install waits the release's own lock lengths.

Change
From 0 to 604800.Needed only when the change makes Warden quieter.
Details
Setting name
assurance.solo_locks
Read by
the approvals check

Changes allowed without a wait

Default

None

No change skips its lock unless keepers set a cap.

Change
From 1 to 10000.Needed only when the change makes Warden quieter.
Details
Setting name
assurance.unlocked_caps
Read by
the approvals check

Hold before a critical Defend step

Default

15 minutes

A critical act one keeper confirms alone is held 15 minutes so another can stop it.

Change
From 300 to 2700.Needed only when the change makes Warden quieter.
Details
Setting name
assurance.critical_hold
Read by
the approvals check

Alerts

Where Warden tells you what it found, and what it sends out.

E-mail

No e-mail address besides the owner's.

Add an address

Alarms or reports: louder, takes effect when signed. A keeper's notices: waits 72 hours and mails the owner address.

Confirm the alert e-mail

Amazon SNS sends nothing to an address until its owner clicks the link in the confirmation mail.

Not checked yet.

This console cannot run checks.

Slack

No Slack channel.

Stage a Slack address

Staging waits 24 hours, adds no channel, and the value is never shown again. Warden may reach hooks.slack.com only once it is among the hosts Warden may reach: free at setup, a change that waits 72 hours after. Only the step that sends may reach it.

Signed webhooks

No signed webhook.

Stage a webhook address

Staging waits 24 hours, adds no channel, and the value is never shown again.

Stage a signing key

Staging waits 24 hours, adds no channel, and the value is never shown again.

Lowest severity in the digest

Default

High and above

High and critical findings reach people; the rest stay on the board.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
digest.min_severity
Read by
the scheduled run

Time zone for the digest

Default

UTC

UTC is the same for everyone until a keeper chooses a local zone.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
digest.timezone
Read by
the digest

Weekday the board digest goes out

Default

Monday

The weekly board arrives at the start of the working week.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
digest.board_weekday
Read by
the digest

Most items in one digest

Default

5 items

Five items a digest is what people read; the rest are on the board.

Change
From 1 to 20.Needed only when the change makes Warden quieter.
Details
Setting name
digest.max_items
Read by
the digest

Days between reminders for critical findings

Default

Every 7 days

An open critical finding is raised again after a week.

Change
From 1 to 30.Needed only when the change makes Warden quieter.
Details
Setting name
digest.critical_reminder_days
Read by
the digest

Days between reminders for high findings

Default

Every 30 days

An open high finding is raised again after a month.

Change
From 1 to 90.Needed only when the change makes Warden quieter.
Details
Setting name
digest.high_reminder_days
Read by
the digest

Whether a quiet day still posts a digest

Default

No

Digests are posted in full; quieter posting is a keeper's choice.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
digest.quiet_posts
Read by
the digest

What the digest dashboard shows

Default

Yes

The weekly board is on, so the whole picture is one link away.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
digest.dashboard
Read by
the digest

Whether a vulnerability notice names the advisory

Default

Off

Off: a notice carries the band and counts; the advisory id stays behind the console link.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
notify.vuln_ids
Read by
the scheduled run

More settings

Metrics page

Default

Off

Nothing about your accounts leaves Warden unless a keeper turns it on.

Change
One per line.
Needed only when the change makes Warden quieter.
Details
Setting name
observe.endpoint
Read by
the scheduled run

Detail in metric labels

Default

Totals only

Metrics carry no account, rule or order labels unless a keeper adds them.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
observe.labels
Read by
the scheduled run

Metrics to CloudWatch

Default

Off

No CloudWatch metrics are written unless a keeper turns them on.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
observe.emf
Read by
the scheduled run

Metrics and traces to your collector

Default

Off

Nothing is forwarded to a collector unless a keeper turns it on.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
observe.otlp
Read by
the scheduled run

Log detail

Default

Normal

Info logs say what happened without the detail debug logging adds.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
observe.log_level
Read by
the scheduled run

Service targets

Default

Warden's targets

Warden's own service levels hold at the release's thresholds.

Change
From 1 to 999.Needed only when the change makes Warden quieter.
Details
Setting name
observe.slo
Read by
the scheduled run

Prices used for cost metrics

Default

Warden's list prices

Costs are shown at the release's list prices until a keeper records your own.

Change
From 0 to 1000000000000.
Needed only when the change makes Warden quieter.
Details
Setting name
observe.unit_prices
Read by
the scheduled run

Where findings are exported

Default

Not exported

Nothing is exported unless a keeper adds a target.

Change
Written as JSON.Written as JSON.
Needed only when the change makes Warden quieter.
Details
Setting name
export.targets
Read by
the scheduled run

Exceptions

What you told Warden is expected, and how long each lasts.

Suppressions

No finding is suppressed.

Class passes

No class of findings is accepted.

Known good

User pool settings you expect

Default

None

Every user pool is held to the same safe baseline until a keeper sets one apart.

Change
One per line.
Needed only when the change makes Warden quieter.
Details
Setting name
cognito.pools
Read by
the scheduled run

Resources public on purpose

Default

None

Nothing is public by design until a keeper says so, so every exposure is reported.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
assets.public_by_design
Read by
the scheduled run

Your own outbound address ranges

Default

None

No range is treated as your own until a keeper names it, so all unusual egress is reported.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
network.org_egress_cidrs
Read by
the scheduled run

Identities that deploy

Default

None

No deployer is trusted until a keeper names it, so every change is checked.

Change
Written as JSON.Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.deployer_principals
Read by
the scheduled run

Outside accounts you trust

Default

None

No outside account is trusted until a keeper names it.

Change
Written as JSON.
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.known_external_accounts
Read by
the scheduled run

Buckets public on purpose

Default

None

No bucket is public on purpose until a keeper says so.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.intentionally_public_buckets
Read by
the scheduled run

Machine groups allowed the old metadata service

Default

None

No group is excused from instance metadata hardening until a keeper says so.

Change
From 0 to 9007199254740991.
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.weak_imds_asgs
Read by
the scheduled run

Image registries you trust

Default

None

Images are expected from your own organisation's registries.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.image_registries
Read by
the scheduled run

Identities idle on purpose

Default

None

No idle identity is excused until a keeper says why.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.dormant_by_design
Read by
the scheduled run

Cluster administrators you expect

Default

None

No cluster administrator is excused until a keeper names them.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.cluster_admins
Read by
the scheduled run

Your CDN

Default

None

No CDN is assumed, so every exposed origin is reported.

Change
Needed only when the change makes Warden quieter.
Details
Setting name
allowlists.cdn_provider
Read by
the scheduled run

These are never silenced

No signature can quiet these rules or any finding about Warden itself.

  • Audit logging or detection turned off or tampered with
  • A revoked key or identity still working
  • Persistence planted, or alerts cut
  • Warden's own coverage and integrity

Licence

Your plan, what it turns on, and when it ends.

Licensed until 7 Sep 2027

Plan
Defend, early access: issued at no cost
Turns on
Watching and alerts and Defend, which acts on its own to contain an active case
Ends
7 Sep 2027

Any licence, including the free Watch licence, turns on changes. Defend needs a Defend licence. Warden keeps watching in every licence state.

Add licence
Details
License‹00000000-0000-4000-8000-000000000001›
Plan‹Defend, early access: issued at no cost›
Key‹wd-test-0000000000000001›: matches this release's key, which vouches for licenses issued until 2 Oct 2028
Issued‹6 Sep 2026›
Valid from‹6 Sep 2026›
Valid until‹7 Sep 2027›
Account‹111122223333›
Features‹watch› ‹defend›

On 7 Sep 2027 changes and Defend stop. Warden keeps watching.

Turned off: nothing.

Checks

  1. At most 16 KiB: passed
  2. Three parts, the first WDL1: passed
  3. Payload is strict JSON, version 1: passed
  4. Signed by a key this release trusts: passed
  5. Signature verifies: passed
  6. Fields are well formed, term at most 400 days: passed
  7. Started: passed
  8. Not expired: passed
  9. Names this install's account, or none: passed

This release can verify licenses issued until 2 Oct 2028. Upgrade before then to renew.