Thalaxo

Book a Demo

30 min · Thalaxo FinOps Platform

Loading calendar...

Integrations

Integrations

Works with your cloud.
On your terms.

Connect AWS, Azure and GCP using native cloud permissions. Start in read-only mode and expand access only when you decide.

No agent to install. No refactoring. No ownership transfer.

AWS — IAM AssumeRole Azure — ARM Delegation GCP — Workload Identity Federation Terraform HCL export
Zero installation

Nothing to install
on your infrastructure.

All discovery goes through native cloud APIs. No binary, no sidecar, no daemon running inside your VMs or containers — ever.

OS-level agents (CloudWatch, Azure Monitor, GCP Ops Agent) are optional and only used for deeper CPU/RAM guest metrics. The core inventory and FinOps features work without them.

No binary install
Nothing to deploy, package or maintain on your servers.
No sidecar
No container injected alongside your workloads.
No daemon
No persistent process running inside your infrastructure.
OS agents — optional only
Opt-in for deeper guest metrics. Never required for core features.
Permission model

You define the boundary.
Not Thalaxo Cloud.

Revoke access from AWS, Azure or GCP at any time.
No ticket. No approval. No dependency on Thalaxo Cloud.
Delete the IAM role, remove the Azure role assignment, or unbind the GCP WIF — access is gone immediately, independent of us.

Access levels — you set the ceiling

OBSERVER
Read-only default
Inventory, dashboards, FinOps insights — no mutations
↓ optional upgrade — explicit per account
SCHEDULER
Start / Stop / Restart
Never granted automatically
↓ optional upgrade — explicit per account
BUILDER
Resize + Snapshots
Never granted automatically
↓ optional upgrade — explicit per account
AUTOPILOT
Terminate instances
Triple confirmation — always human-initiated

What this means in practice

Read-only by default
Every new connection starts at OBSERVER. No write access without an explicit upgrade on your side.
No ownership transfer
You remain the account owner. Thalaxo Cloud operates as a delegated principal — not as an administrator.
Revocable from your provider
Delete the IAM role (AWS), remove the role assignment (Azure) or unbind the WIF (GCP). Thalaxo Cloud loses access immediately, independent of us.
Every action audited
All operations logged — who, when, IP, before/after state. Immutable history, exportable on request.
No autonomous action
Every operation on your infrastructure requires explicit human confirmation. Thalaxo Cloud never acts on its own.
Cloud providers

Three providers.
One interface.

Amazon Web Services

Full inventory, cost analysis and rightsizing recommendations. Controlled operations through IAM role delegation — no long-lived keys required.

  • EC2, RDS, S3, EIP, snapshots
  • Cost Explorer + billing breakdown
  • AssumeRole — no root access
  • CloudWatch Agent (optional OS metrics)
Available now

Microsoft Azure

Resource discovery and cost visibility across subscriptions. Delegated operations through Azure Resource Manager — supports multiple tenants simultaneously.

  • VMs, disks, NICs, public IPs
  • Cost Management + billing API
  • ARM Role Delegation — multi-tenant
  • Azure Monitor Agent (optional OS metrics)
Available now

Google Cloud Platform

Infrastructure inventory and billing analysis via Workload Identity Federation. No service account keys stored — identity federation only.

  • Compute Engine, GKE, Cloud SQL
  • Billing API + cost breakdown
  • Workload Identity Federation
  • GCP Ops Agent (optional OS metrics)
Available now
Infrastructure & IaC

Export to Terraform.
Keep your code.

HashiCorp Terraform

Export infrastructure blueprints as Terraform HCL. The generated code is yours — no dependency on Thalaxo Cloud to apply or maintain it.

Export blueprints and rightsizing recommendations as .tf files
Multi-provider output — AWS, Azure and GCP in the same export
No dependency on your existing state files
Human-reviewable before any apply
Note: Thalaxo Cloud generates Terraform from its blueprints. It does not read or sync your existing Terraform state files.
Available now

Why export matters

Infrastructure you can export is infrastructure you control. When Thalaxo Cloud generates a .tf file, you can review it, version it, and apply it without us — or never apply it at all.

Connection time

Initial inventory available shortly after connection. Rightsizing and optimization recommendations are progressively enriched as usage data is collected. No professional services, no onboarding call required.

Explore before connecting

See how Thalaxo Cloud works
before granting access.

Most teams start with the live demo — then connect a non-production account in read-only.

Watch the live demo
See the real product on a 200-VM environment. No account needed.
Talk to Nabil
15 min — technical questions welcome, no sales script.
Run the cloud waste assessment
Estimate your waste in 2 minutes — no account connection required.
Security & trust
How access delegation, audit logging, revocation and data handling work — before connecting your cloud.
Why Trust Thalaxo Cloud →