Rule Management
Last verified 13 Aug 2026
Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.
Cloud Security Posture Management (CSPM) evaluates your environment using a set of security rules. Paid plans provide two ways to control how those rules surface findings: Managed Rules and suppression.
Managed Rules
Managed Rules controls whether a rule is enabled for your team. When you disable a rule, CSPM immediately hides all findings associated with that rule across all applicable resources. When you re-enable the rule, those findings return if the underlying conditions still exist.
Use Managed Rules when a rule does not apply anywhere in your environment. To enable or disable rules, see How to Manage Rules.
Suppression
Suppression creates resource-level exceptions to an enabled rule. When you suppress a resource, CSPM hides the finding for that resource and rule combination. The rule remains enabled and continues to surface findings for other applicable resources.
Use suppression when a rule is relevant to your environment but one or more resources are intentional exceptions. To suppress findings, see How to Suppress Findings. For details on what suppression does and does not change, see Suppression Behavior.
Choosing the Appropriate Control
Disable a rule with Managed Rules when the rule should not apply anywhere in the team. Suppress findings when only selected resources should be excluded and the rule should remain active elsewhere.
Neither control modifies your DigitalOcean resources or resolves the underlying security condition. Both are available only in paid plans.