{
  "vm": "openclaw-vm-wus3",
  "updated_at": "2026-07-20T09:02:00.753Z",
  "overall_status": "warning",
  "azure_operational_status": "ok",
  "azure_advisory_status": "warning",
  "azure": {
    "vm": "openclaw-vm-wus3",
    "checked_at": "2026-07-20T09:00:59.489Z",
    "source": "cron",
    "status": "warning",
    "alerting_status": "ok",
    "power_state": "PowerState/running",
    "provisioning_state": "ProvisioningState/succeeded",
    "vm_agent": {
      "version": "2.15.2.1",
      "status": "Ready",
      "message": "Guest Agent is running"
    },
    "public_ip_count": 0,
    "public_ips": [],
    "nics": [
      {
        "id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourceGroups/openclaw-rg-wus3-20260216/providers/Microsoft.Network/networkInterfaces/openclaw-vm-wus3VMNic",
        "name": "openclaw-vm-wus3VMNic",
        "private_ips": [
          "10.0.0.4"
        ],
        "has_public_ip": false,
        "network_security_group_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourceGroups/openclaw-rg-wus3-20260216/providers/Microsoft.Network/networkSecurityGroups/openclaw-vm-wus3NSG"
      }
    ],
    "defender": {
      "available": true,
      "target_vm_unhealthy_count": 7,
      "target_vm_unhealthy": [
        {
          "name": "ffff0522-1e88-47fc-8382-2a80ba848f5d",
          "display_name": "Machines should have a vulnerability assessment solution",
          "status": "Unhealthy",
          "cause": "VaScannerNotInstalled",
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourceGroups/OPENCLAW-RG-WUS3-20260216/providers/Microsoft.Compute/virtualMachines/openclaw-vm-wus3"
        },
        {
          "name": "6c99f570-2ce7-46bc-8175-cde013df43bc",
          "display_name": "Guest Configuration extension should be installed on machines",
          "status": "Unhealthy",
          "cause": null,
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourcegroups/openclaw-rg-wus3-20260216/providers/microsoft.compute/virtualmachines/openclaw-vm-wus3"
        },
        {
          "name": "22441184-2f7b-d4a0-e00b-4c5eaef4afc9",
          "display_name": "Authentication to Linux machines should require SSH keys",
          "status": "Unhealthy",
          "cause": null,
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourcegroups/openclaw-rg-wus3-20260216/providers/microsoft.compute/virtualmachines/openclaw-vm-wus3"
        },
        {
          "name": "efbbd784-656d-473a-9863-ea7693bfcd2a",
          "display_name": "Virtual machines and virtual machine scale sets should have encryption at host enabled",
          "status": "Unhealthy",
          "cause": null,
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourcegroups/openclaw-rg-wus3-20260216/providers/microsoft.compute/virtualmachines/openclaw-vm-wus3"
        },
        {
          "name": "e94a7421-fc27-7a4d-e9ba-2ba01384cacd",
          "display_name": "Guest Attestation extension should be installed on supported Linux virtual machines",
          "status": "Unhealthy",
          "cause": null,
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourcegroups/openclaw-rg-wus3-20260216/providers/microsoft.compute/virtualmachines/openclaw-vm-wus3"
        },
        {
          "name": "a40cc620-e72c-fdf4-c554-c6ca2cd705c0",
          "display_name": "Linux virtual machines should enable Azure Disk Encryption or EncryptionAtHost.",
          "status": "Unhealthy",
          "cause": null,
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourcegroups/openclaw-rg-wus3-20260216/providers/microsoft.compute/virtualmachines/openclaw-vm-wus3"
        },
        {
          "name": "90386950-71ca-4357-a12e-486d1679427c",
          "display_name": "Machines should be configured to periodically check for missing system updates",
          "status": "Unhealthy",
          "cause": null,
          "severity": null,
          "resource_id": "/subscriptions/dd4045a4-1747-4df7-8d6c-24b2e1cb46b8/resourcegroups/openclaw-rg-wus3-20260216/providers/microsoft.compute/virtualmachines/openclaw-vm-wus3"
        }
      ],
      "subscription_unhealthy_count": 74
    },
    "boot_diagnostics_enabled": true,
    "findings": [
      {
        "severity": "warning",
        "code": "azure_defender_vm_unhealthy_assessments",
        "message": "Azure Defender reports unhealthy assessments for this VM"
      }
    ],
    "alertable_findings": []
  },
  "uptime": {
    "vm": "openclaw-vm-wus3",
    "checked_at": "2026-07-20T09:01:59.487Z",
    "source": "cron",
    "status": "ok",
    "target_count": 1,
    "failure_count": 0,
    "results": [
      {
        "url": "https://vm-health.metricly.co/healthz",
        "ok": true,
        "status": 204,
        "expected_status": 204,
        "duration_ms": 510
      }
    ]
  },
  "security": {
    "vm": "openclaw-vm-wus3",
    "received_at": "2026-07-20T09:00:21.398Z",
    "generated_at": "2026-07-20T09:00:21+00:00",
    "status": "warning",
    "host": {
      "fqdn": "openclaw-vm-wus3.internal.cloudapp.net",
      "hostname": "openclaw-vm-wus3",
      "kernel": "6.8.0-1052-azure",
      "platform": "Linux-6.8.0-1052-azure-x86_64-with-glibc2.35"
    },
    "finding_count": 3,
    "findings": [
      {
        "severity": "warning",
        "code": "unexpected_public_listener",
        "message": "Unexpected TCP service is listening on all interfaces; UFW should continue blocking it unless explicitly allowed"
      },
      {
        "severity": "info",
        "code": "known_blocked_public_listener",
        "message": "Known internal listener is still bound broadly but has explicit UFW deny policy"
      },
      {
        "severity": "warning",
        "code": "unexpected_private_listener",
        "message": "Unexpected TCP service is listening on a non-loopback private address"
      }
    ]
  },
  "security_report_stale": false
}