Features

One operator. Every cloud. Every stack you already run.

Eight capability areas — six K8s probes, thirty cloud probes, five whitelisted fixers, four AI tiers, and the safety envelope holding it all together.

K8s probes

shipped

6 native probes + 8 analyzers across 14 GVRs. Vault/ESO/CNPG/Ceph/cert-manager depth no SaaS tool matches.

AWS probes

shipped

10 probes covering RDS, EBS, EKS, IAM, ALB, ACM, KMS, S3, VPC. IRSA-first auth — no long-lived keys.

GCP probes

shipped

10 probes covering Cloud SQL, GKE, IAM, LB, GCS, KMS. Workload Identity auth via the cluster identity.

Azure probes

shipped

10 probes covering Azure SQL, AKS, Identity, App Gateway, Key Vault. AAD Workload Identity native.

k3s + edge

shipped

Reduced-footprint values bundle for single-node edge appliances. The same product, on a 2-CPU SBC.

AI tiers (T0 → T3)

shipped (paid)

LLM-augmented enrichment, fix proposal, multi-step planning, and Vault runbook proposer — all approval-gated.

Ticketing integrations

partial

OpenProject in OSS. Jira and ServiceNow in the paid Enterprise tier. DriftReport-to-ticket idempotency built-in.

Safety envelope

coming soon

Whitelisted fixers, signed-JWT click-to-fix URLs, dry-run mode, protected-namespace allowlist. Auditable in code.