Live today Cost Security Governance
Multi-cloud posture scanner
1,000+ checks for AWS, GCP, Azure, Alibaba Cloud, Oracle Cloud, and Kubernetes. Each scan covers one connected account: every region, cost and security together.
Most of this already works
Cost, security, compliance, and governance from one read-only connection, over one evidence-backed finding stream. The list below starts with what you can run today, because that is the part that matters when you are deciding.
We label what is live and what is not, and we publish no dates. If a feature is not built yet, this page says so.
Cost
Spend you can recover, priced in real dollars with the pricing source recorded on every number.
Security
Exposure, misconfiguration, and posture drift across every account you connect.
Compliance
Audit readiness: your findings projected onto the control families your auditor asks about.
Governance
Ownership, tagging, sprawl, and the organization-wide view across every account and project.
Four pillars, one scan per account. 1,000+ checks feed all of them, which is why adding a pillar does not mean adding another agent, another connection, or another bill.
How to read this page
- Live today
- Shipping in the product right now.
- Building next
- Actively in development, not released yet.
- Planned
- Committed direction, not started.
Live today
Shipping in the product right now. Live today Cost Security
Cost and security in a single pass
One scan, one finding stream, projected into stakeholder reports so finance and security are looking at the same underlying evidence.
Live today Cost Security Compliance
Evidence behind every finding
Each finding keeps the raw cloud API response it came from, plus the pricing source and any confidence caveats, so your team can re-derive every number.
Live today Governance Security
Organization-wide scanning
Fan out across an AWS Organization, a GCP org or folder, or an Azure management group, and get one consolidated report.
Live today Cost Governance
Scan-over-scan diff
Compare any two scans to see what is new, recurring, resolved, or regressed, and track the savings you actually realized.
Live today Compliance
Compliance lens over your findings
View a completed scan through an audit-readiness lens that groups findings by control family rather than by cloud service.
Today this is a reporting lens for audit readiness. It is not a certification, and the deeper control-ID mapping is the item directly below.
Building next
Actively in development, not released yet. Building next Compliance Security
Framework control mapping
Findings mapped to specific control IDs in CIS, SOC 2, PCI DSS, HIPAA, NIST 800-53, and ISO 27001, with reports you can scope to a single framework.
Building next Cost
Priced against your real invoice
Optionally connect your billing export so savings are stated in the rates you actually pay, instead of public list prices.
Today every number uses conservative public list pricing, which means the real saving is at least the figure we show.
Planned
Committed direction, not started. Planned Security Governance
Guided remediation
Per-finding fix in Terraform, CLI, or console steps, plus an exception workflow with an owner, a reason, and an expiry date.
Planned Security Governance
Identity and entitlements
Effective permissions, privilege-escalation paths, cross-account trust, and unused access across your clouds.
Planned Security Cost
Kubernetes depth
Beyond workload right-sizing: RBAC over-permission, network policy, pod security standards, and admission-control gaps.
Planned Governance
Workflow integrations and API
Send findings to Jira, ServiceNow, Slack, or your SIEM, plus a public REST API, SSO with SAML, RBAC, and audit logs.
Why there are no dates here
Nuvozy is built on the rule that we do not claim something until it is true in the product. That applies to findings, where every number carries the evidence and the caveats behind it, and it applies here. Publishing a date we have not earned would be the same kind of overclaiming, so this page ships 6 things you can use today and is explicit that the rest is not built yet.
Which of these matters most to you?
The order is not fixed. If one of these would decide whether you adopt Nuvozy, tell us and it moves up.