CloudPanorama Request evaluation

Platform · self-hosted · evaluation by invitation

One view of your cloud operations.

The Dashboard brings health, spend and requests together. Shared resource identities connect every view, with users, roles and teams managed in one place.

Explore capabilities Request evaluation

Dashboard · the estateby cloud · example
CloudOperationalDegradedFailed
AWS1,38423
Google Cloud21210
Spend, month to date · EUR18,240.00
Requests waiting for you2
Newest read14:20

The Dashboard

Start with what needs attention.

Find failures, pending approvals, budget warnings and stale collection, with links to the detail behind each item.

  • A shared overview covers inventory, spend, requests and recent changes.
  • Scoped access shows each person the spend, changes and requests of their own teams.

One identity

One resource, connected views.

Follow a resource from its health history to its cost, owner and approved request. A shared identity keeps those records connected.

  • EstateHealth, now and pastoperational since 14:42:03
  • SpendCost and allocationEUR 41.20 · team=payments
  • ProvisioningRequest, approval or import8f3c1d2e-… · web-tier v3
  • OwnerDecided, with evidenceteam=payments · tag · high

Triage and the AI reviewer

Review alerts with context.

Run Triage and the AI reviewer alongside the platform, using your own models and infrastructure.

  • Triage records decisions about which events need attention. Shadow mode keeps notification routing unchanged.
  • The AI reviewer receives alerts and cost anomalies with supporting evidence. Its answer appears on the subject and in the inbox.
Triage · status transitionsshadow · last 7 days · example
DecisionShareAgreed
nobody81 %97 %
people16 %88 %
AI reviewer3 %—

Self-hosted

Run it in your infrastructure.

Deploy with Docker Compose or Kubernetes and PostgreSQL 16. Read-only cloud roles and federation power collection.

  • An offline licence requires no activation service. Expiry never deletes your data.
  • Users, roles and teams control access, with an audit trail and extra verification for destructive administrator actions.
  • Enterprise identity supports OpenID Connect single sign-on and directory group sync.
# the published, signed image: pull it and check its signature
IMAGE=ghcr.io/cloudpanorama/panorama/panorama:0.1.2@sha256:f487a34623502b37bbed14b3a2dfbde9f3d773e3c5715a94a99e2fd294c446c2   # the release's version and digest
docker pull "$IMAGE"
cosign verify "$IMAGE" \
  --certificate-identity https://github.com/cloudpanorama/panorama/.github/workflows/platform-release.yml@refs/tags/platform/v0.1.2 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
The product is pre-release: the repository stays private until the first pilot, and a trial licence comes with an evaluation. The installation guide takes it from here.

Choose the modules your team needs.

Discuss pricing and account limits on your evaluation call.

Essentials

Know what runs and whether it is healthy.

  • Estate
  • Spend
  • Provisioning
Evaluate Essentials

Professional

Add what it costs and who owns it.

  • Estate
  • Spend
  • Provisioning
Evaluate Professional

Enterprise

Add approved changes, OpenID Connect single sign-on and directory group sync.

  • Estate
  • Spend
  • Provisioning
Evaluate Enterprise

Platform capabilities

Access and administration

  • Users, roles, teams, session limits, administrator verification and audit history
  • Account registration, verification, collection controls and removal from the portal
  • Organisation, licence and audit administration; personal profile and notification settings
  • Enterprise OpenID Connect single sign-on with break-glass administrator access
  • Directory groups linked to teams and membership
  • Read-only API tokens for the API's GET routes
  • One home identity, AWS or Google Cloud, that the other clouds federate from

Setup and operations

  • Account setup guidance and in-product help
  • Database backup and restore without replaying cloud changes
  • In-product operator manual for administrators

AI assistance

  • Operator-run AI reviews of alerts and cost anomalies, with evidence and answers in the inbox
  • Operator-run reviewer service supporting local models
  • Recorded model decisions in shadow mode, without changing notification routing
  • Usage that departs from a resource's own history, raised for Triage
Capability referenceInstallation guide

What Platform does today.

The rows of the capability matrix for Platform, with the same three words the documentation uses.

Platform

  • Users, roles and teams; sessions with a per-user cap; step-up for destructive administrator actions; the audit trail available now
  • Connecting an account from the portal: register an AWS account, a Google Cloud project or an Azure subscription, with the template and the exact commands to run in the customer's cloud (an AWS account's with its external id), verification before it is enabled, collection paused and resumed, one collection now, and removal — the CLI is needed for none of it available now
  • The Admin area — the organisation, the audit log and an overview of the licence, the people and the accounts — and each user's own settings: profile, sessions, notifications, preferences available now
  • Team scope: a member sees the spend, the anomalies, budgets and forecasts, the change feed and the provisioning requests of their own teams' accounts, and no other team's; the inventory and its status history are every member's (PLATFORM.md §4) available now
  • First run: a checklist from connecting an account to the first request, a guided tour over the real pages, and a Help menu available now
  • Backups and a restore that does not replay cloud changes (the runbook, "Backing up and restoring the database") available now
  • Single sign-on through the organisation's OpenID Connect provider (Entra ID, Okta, Google, IAM Identity Center), beside passwords or enforced with break-glass administrators; with the Enterprise licence's sso capability available now
  • Directory group sync: teams bound to the provider's groups, membership following the directory available now
  • One home identity: with more than one cloud, the platform signs in at one and the others federate from it, with AWS or Google Cloud as the home available now
  • Azure as the home identity in development
  • SAML single sign-on and SCIM provisioning planned
  • The AI reviewer channel: alerts and cost anomalies handed to an operator's own reviewer as claim checks, its answer on the subject and in the inbox, with evidence the tenant can see; sent from the page that asked available now
  • The reviewer service itself, run by the operator, with a local model first (the owner, 2026-10-08) available now
  • Triage: a small model the operator runs beside the platform decides for each status change, cost anomaly, budget, provisioning event, change and finding whether it needs people, the AI reviewer or nobody; shadow first, routing unchanged, every decision recorded with its confidence and its agreement with what people did, per kind in Admin available now
  • Triage routing events by its decision, within floors and thresholds, once a kind is switched to enforce in development
  • Usage that departs from a resource's own history, raised as an event for Triage available now
  • Read-only API tokens for the API's GET routes available now
  • The operator's manual, served to administrators inside the product available now

Evaluate it with your team.

Tell us which clouds you use and what you want to evaluate. Start with a guided demo and discuss access for your team.

Request evaluation contact@cloudpanorama.com