Microsoft Azure on par with AWS, and an MCP server for your AI agents

Azure connections now bring in events, detections, assets, compliance checks and response actions, and AI agents such as Claude, Cursor and VS Code can connect to Jutsu through its MCP server.

New

  • Microsoft Azure connections now do what AWS connections do. Until now an Azure connection signed in and checked its roles, and read nothing else.

    • Events. Jutsu reads each subscription's Activity Log and the alerts from Microsoft Defender for Cloud.
    • Detection. 19 built-in Azure detection rules, each with fix steps.
    • Assets. Your Azure resources (12 kinds, among them storage accounts, network security groups, key vaults, SQL servers and web apps), the people and service principals that hold Azure roles, and your virtual machines as machines. A collector installed on an Azure VM links to that VM.
    • Compliance. 35 CIS-based Azure checks. Defender for Cloud recommendations show up as findings, Jutsu collects Azure evidence for your controls, and the cloud account security report covers Azure.
    • Response. With a separate Jutsu Response app that you approve in your tenant, Jutsu can block an IP address with a network security group rule, isolate a VM, disable an Entra ID user and sign them out everywhere. On storage accounts it can turn off public blob access, require HTTPS and set the minimum TLS version to 1.2.
    • On the connection page. A daily health check, a minimum severity, pause and resume, a choice of which data to bring in, and a cleanup step when you archive or delete the connection.

  • Connect your own AI agent to Jutsu. Claude, Claude Code, Cursor, VS Code and other MCP clients can now connect to the Jutsu MCP server. Your agent can read your risks with their fix steps, alerts, incidents, events, assets and compliance status. If you let it act, it can also re-check a risk after fixing it, update a risk, change an alert's status and comment on an incident. You sign in and approve each agent yourself, and it never gets more access than your role. Set it up under Organization, then AI agents, where you can also see and disconnect connected agents.

    The AI agents page under Organization, with the server URL and setup steps for Claude, Claude Code, Cursor and VS Code

Improved

  • Jutsu no longer has organization API keys or the API keys page. AI agents connect through the MCP server instead, signed in as you. Collector tokens work as before.

Docs

  • New guide: Jutsu MCP server, with the steps for Claude, Claude Code, Cursor and VS Code.
  • The Jutsu API page explains what replaces organization API keys, and what a host's own collector token can still do.

Subscribe to our newsletter

Get the latest security tips, product updates, and news delivered to your inbox.