How to Manage Rules

Last verified 13 Aug 2026

Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.

Managed Rules lets you control which Cloud Security Posture Management (CSPM) rules are enabled for your team. Disabling a rule prevents its findings from appearing for any applicable resource in the team. Use Managed Rules when a rule does not apply to your environment and you do not want CSPM to surface that condition for any resource.

Managed Rules is available only in paid plans. Rules are managed at the team level, so changes apply to every applicable resource in the team.

To exclude specific resources from a rule while keeping the rule enabled for the rest of the team, suppress the findings for those resources instead.

Enable or Disable a Rule

  1. In the Control Panel, click Security in the left menu.

    The Security page opens with the CSPM tab selected.

  2. Click the CSPM Settings tab.

    The Managed Rules row shows how many rules are currently enabled.

  3. Next to Managed Rules, click Edit.

    The Managed Rules view lists all available CSPM rules with their severity and an Enabled toggle for each rule.

  4. Locate the rule you want to manage, then use its Enabled toggle to enable or disable the rule.

Rule Behavior After Disabling

When you disable a rule, CSPM immediately hides the rule’s existing findings for all applicable resources in the team, and the rule no longer appears in your active findings. Other enabled rules remain active. Enabling or disabling a rule does not modify your DigitalOcean resources.

When you re-enable a rule, its findings immediately reappear if the underlying conditions still exist. You do not need to run another scan.

For more details on how Managed Rules and suppression work together, see Rule Management.

We can't find any results for your search.

Try using different keywords or simplifying your search terms.