Katabarwa Labs
Microsoft Azure Marketplace

Small tools for the Azure gaps that bite on a Friday night.

Sixteen single-purpose operational tools. Each deploys as a managed application into your own subscription under an identity you control: a serverless function, a schedule, and alerts to your own Slack, Teams, or email. No vendor backend, so nothing leaves your environment. Billed flat per month through the Azure Marketplace.

Secrets & certificates

Alert before secrets and certificates expire and break production.

Secret Sentinel

App registration secret and certificate expiry alerts

View on Azure Marketplace →

Cert Sentinel

App Gateway and App Service TLS certificate expiry alerts

View on Azure Marketplace →

Key Vault Expiry Digest

One digest so nothing in your vaults expires silently

View on Azure Marketplace →

Cost control

Hard caps, anomaly alerts, and orphaned-resource cleanup for the Azure bill.

Cost Breaker

A fuse box for your Azure bill

View on Azure Marketplace →

Cost Spike Sentinel

Per-team cost anomaly alerts

View on Azure Marketplace →

Orphan Cleanup

Stop paying for resources attached to nothing

View on Azure Marketplace →

Access & identity

Role hygiene, just-in-time elevation, and identity lifecycle automation.

JIT RBAC

Just-in-time role elevation with Teams approval

View on Azure Marketplace →

RBAC Janitor

Clean up orphaned "Identity not found" role assignments

View on Azure Marketplace →

Role Definition Guard

Detect dangerous custom role definitions

View on Azure Marketplace →

Identity Lifecycle

Entra joiner and leaver automations at a flat fee

View on Azure Marketplace →

Governance & hygiene

Policy exemptions, storage security, and resource attribution.

Policy Exemption Tracker

No policy exemption lapses or lingers unnoticed

View on Azure Marketplace →

Storage Hygiene Scorecard

Grade every storage account on access security

View on Azure Marketplace →

Auto Tagger

CreatedBy and CreatedOn tags for every resource

View on Azure Marketplace →

Coverage & risk

Find the resources with no backup, no alerts, or a takeover-able DNS record.

Dangling DNS Sentinel

Subdomain-takeover monitoring for your DNS zones

View on Azure Marketplace →

Backup Auditor

Prove every VM, database, and share is backed up

View on Azure Marketplace →

Alert Blindspot

Find the resources you have zero alerts on

View on Azure Marketplace →

Also from Katabarwa Labs: 10 Atlassian apps.

The same in-tenant model for Jira, Jira Service Management, and Confluence Cloud: governance, audit retention, and hygiene tools that run entirely on Atlassian Forge.

See the Atlassian apps →