Cloud visibility and governance
One view of your AWS and Azure.
Connect with read only access. See every resource, map each environment, and run your own rules across both clouds.
From a list of resources to a list of decisions.
| Name | Type | Cloud | Region |
|---|---|---|---|
| prod-web-01 | EC2 Instance | AWS | eu-west-1 |
| prod-web-vm | Virtual Machine | Azure | westeurope |
| prod-win-admin | EC2 Instance | AWS | eu-central-1 |
| prod-win-admin | Virtual Machine | Azure | northeurope |
| app-load-balancer | Load Balancer | AWS | eu-west-1 |
| app-load-balancer | Azure Load Balancer | Azure | westeurope |
| customer-ledger-db | RDS Database | AWS | eu-west-1 |
| customer-ledger-db | Azure SQL Database | Azure | westeurope |
| frontend-assets | S3 Bucket | AWS | global |
| frontend-assets | Blob Storage | Azure | global |
Connected in minutes. Nothing to install.
- 01
Connect
Link AWS or Azure with read only access. AWS can sync all enabled regions or selected regions; Azure syncs a subscription.
- 02
Sync
Cloustral pulls a full inventory, then groups resources by network, subnetwork, security boundary, and attachment relationships.
- 03
Act
Rules surface unused resources, missing tags, policy drift, and misconfigurations, with recommendations you can act on.
Built for teams that can't afford to trust blindly.
We know you're handing us visibility into your infrastructure. Here's exactly what we do, and don't do, with it.
Read only cloud access
Cloustral only calls read APIs, we never write, modify, or delete resources in your environment. You control the scope by providing read only permissions for each cloud connection.
Credentials encrypted at rest
Your cloud credentials are encrypted before being stored. They are only ever decrypted in memory during a sync, never logged or exposed.
Two factor authentication
Sign in with Google SSO or email, and add two factor authentication to either. Organization admins can require MFA for their team.
Hard org-level isolation
Every resource, finding, and credential is tied to your organization at the database level. There is no way for one organization to access another's data.
Questions about how we handle your data? Reach out or read our Privacy Policy.
From the blog
All articlesSimple, transparent pricing.
Start with a demo organization. Add synthetic cloud data before connecting real accounts. Upgrade to a paid plan when you're ready to connect real cloud accounts.
Founding customer pricing. Join Cloustral early and keep your plan price as we onboard our first teams.
Demo
For exploring Cloustral with synthetic cloud data before connecting real AWS or Azure accounts.
Start demo- Synthetic cloud connections
- Try full architecture visualization on synthetic data
- Resource inventory and findings
Starter
For small teams that need cloud visibility, findings, and architecture maps.
Get started- 3 cloud connections
- 5 users
- 25 custom rules
- Daily automation for all connections
- Resource inventory and findings
- Basic architecture visualization
Pro
Most popularFor teams that need full cloud visibility, high frequency syncs, and complete architecture context.
Upgrade to Pro- 8 cloud connections
- 10 users
- 100 custom rules
- Daily automation for all connections
- 1 high frequency connection (hourly during business hours)
- Resource inventory and findings
- Full architecture visualization
Team
For growing teams managing more cloud environments, users, and governance rules.
Upgrade to Team- 20 cloud connections
- 25 users
- 250 custom rules
- Daily automation for all connections
- 3 high frequency connections (hourly during business hours)
- Resource inventory and findings
- Full architecture visualization
- Priority support
Enterprise
For larger teams, MSPs, and organizations that need custom limits, onboarding, procurement, or dedicated support.
Contact sales- 50+ cloud connections
- Custom users and limits
- Custom high frequency connection quota
- Daily + custom-cadence automation
- Full architecture visualization
- Custom rule packages
- Sales-led onboarding
- Dedicated support channel
- Custom work for specific use cases
Frequently asked questions
Practical answers for small DevOps teams before connecting AWS or Azure.
No. Cloustral connects to AWS and Azure using read only access that you configure yourself. There is nothing to install in your infrastructure.
Start with a demo organization.
Add synthetic cloud data and try the full architecture view. Upgrade when you're ready to connect real accounts.