Deploying Compiled
Compiled deploys as an Azure Marketplace managed application into your own subscription. The detection runtime, storage, and audit logging run on your infrastructure — not ours.
What it provisions
- A Container App running the scanner (the inspection runtime + dashboard), with a system-assigned managed identity
- A storage share for your detector library and signed updates
- Log Analytics for the environment
Configuration
Set these at install time:
| Setting | Purpose |
|---|---|
embeddingMode | azure (in-tenant, recommended) · local (air-gapped) · api (external OpenAI, opt-in) |
azureOpenAiEndpoint | Your in-tenant Azure OpenAI endpoint (for azure mode) |
adminToken | Optional token protecting the dashboard's privileged actions |
siemWebhook | Optional SIEM/SOAR collector URL for findings (no raw content) |
dashboardEntraClientId | Optional — put the dashboard behind Microsoft Entra ("Easy Auth") |
In-tenant Azure OpenAI is the default: if no endpoint is configured the scanner fails closed rather than silently using external OpenAI.
After install
- Grant the scanner's managed identity the Cognitive Services OpenAI User
role on your Azure OpenAI resource (for
azuremode). - To capture communications, grant the managed identity the relevant Microsoft Graph permissions and click Connect in the dashboard. See Microsoft Teams — tenant setup (sign-in required).
- Point findings at your SIEM/SOAR.
The dashboard
The scanner serves an operations dashboard at its root URL — posture at a glance, inspection KPIs, connected sources, the active detector library, and a findings review queue. It runs in your tenant; put it behind Entra "Easy Auth" or your own front door for production.