Compare two discovery sessions to detect infrastructure changes over time. Drift detection helps you identify unauthorized changes, track infrastructure evolution, and maintain compliance.
Create a snapshot of your current infrastructure
Infrastructure changes happen (manual or automated)
Capture the current state after changes
See exactly what changed between the two scans
To compare two sessions:
Note: You can compare any 2 sessions to detect changes between them.
The comparison shows three categories of changes:
Added Resources
Removed Resources
Modified Resources
| Category | Description | Example |
|---|---|---|
| Configuration Drift | Resource exists but settings changed | Security group rule modified from port 80 to 443 |
| Topology Drift | New resources added or removed | New EC2 instance launched, old instance terminated |
| Tag Drift | Resource tags added, removed, or changed | Environment tag changed from "dev" to "prod" |
Scan captured production VPC on Monday:
Scanned Resources:
VPC vpc-0abc123
Security Group sg-web (port 443 allowed)
EC2 Instance i-web-server-1
Scan captured same VPC on Friday:
Scanned Resources:
VPC vpc-0abc123
Security Group sg-web (ports 443, 22 allowed)
EC2 Instance i-web-server-1
EC2 Instance i-web-server-2 (NEW)
| Change Type | Resource | Details |
|---|---|---|
| Modified | Security Group sg-web | New inbound rule added: SSH (port 22) from 0.0.0.0/0 |
| Added | EC2 Instance i-web-server-2 | New instance launched in us-east-1a |
| Provider | Drift Detection | Supported Resource Types |
|---|---|---|
| AWS | ✅ 88% coverage | 68 of 77 resource types |
| GCP | ✅ 81% coverage | 50 of 62 resource types |
| Azure | ✅ 90% coverage | 57 of 63 resource types |
See Supported Resources for the complete list.