Cloud intelligence that surfaces what matters.
Stop hunting through cloud consoles and CSPMs. CloudQuery monitors your entire asset inventory, automatically surfacing connected signals and uncovering hidden risk and waste.
Your cloud insights are stuck in silos
Wiz
Security findings
AWS
Cost reports
GCP
Cloud console
Datadog
Infrastructure alerts
Jira
Tickets & tracking
Snyk
Vulnerability scans
Risk & Waste
Misconfigurations and excess cost are lurking in your cloud.
Engineering Toil
Teams waste hours stitching together context.
One view for what actually matters
Context-enriched Cloud Insights
- Security findings
- Cost anomalies
- End-of-life warnings
- Policy violations
All in a single, prioritized view.
Learn about Cloud Asset Inventory →Severity
All
▾
Source
All
▾
Resource Type
All
▾
Account
All
▾
Group by
Category
▾
SEVERITY
FINDING
SOURCE
RESOURCE TYPE
RESOURCES
SEVERITY
FINDING
SOURCE
Public S3 bucket contains PII data
Wiz
aws_s3_buckets
3
Public S3 bucket contains PII data
Wiz
EC2 security group allows unrestricted ingress
AWS Security Hub
aws_ec2_security_groups
12
EC2 security group allows unrestricted ingress
AWS Security Hub
IAM user has not rotated access keys in 90+ days
Policies
aws_iam_users
7
IAM user has not rotated access keys in 90+ days
Policies
Repository has exposed secrets in commit history
GitHub
github_repositories
2
Repository has exposed secrets in commit history
GitHub
Automatic Correlation
Find connections that would take hours to uncover, reducing unseen risk and waste.
▢
prod-api-server
i-0a1b2c3d4e
EC2 Instance
us-east-1
Correlated Insights
Wiz
Publicly exposed with critical vulnerabilities detected
AWS Security Hub
Security group allows unrestricted ingress on port 22
End of Life
Running deprecated AMI, end-of-life in 14 days
Rich Context
- Owners
- Cost and usage
- IaC status
- Related resources
Act immediately with the information you need.
Explore CloudQuery Policies →▢
prod-api-server
i-0a1b2c3d4e
EC2 Instance
us-east-1
Cost
Monthly (current)
$142.38
Instance type
m5.xlarge
Infrastructure as Code
Managed by
Terraform
Module
aws_instance.prod_api
Related Resources
7
aws_ec2_security_groups
2
aws_ec2_ebs_volumes
3
aws_ec2_network_interfaces
1
aws_elbv2_load_balancers
1
See insights in action
Critical
Public S3 bucket with PII detected
S3 bucket is publicly accessible, contains PII detected by Wiz, and was created by a contractor account.
High
EC2 instance exposed with outdated AMI
EC2 instance has a security group open to 0.0.0.0/0 and is running an outdated AMI with known vulnerabilities.
Medium
Lambda runtime end-of-life in 30 days
Lambda function runtime reaches end-of-life in 30 days. Continued use poses security risks and may increase costs.
High
SSL certificate expiring in 7 days
SSL certificate expires in 7 days. Affected resources may become unavailable or insecure without renewal.
Critical
K8s cluster EOL with public exposure
Kubernetes cluster is running an end-of-life version and has public-facing workloads with critical vulnerabilities.
Medium
Missing mandatory tags on production resources
Production resources are missing mandatory tags defined by organizational policy, blocking audit readiness.
Critical
Public S3 bucket with PII detected
S3 bucket is publicly accessible, contains PII detected by Wiz, and was created by a contractor account.
High
EC2 instance exposed with outdated AMI
EC2 instance has a security group open to 0.0.0.0/0 and is running an outdated AMI with known vulnerabilities.
Medium
Lambda runtime end-of-life in 30 days
Lambda function runtime reaches end-of-life in 30 days. Continued use poses security risks and may increase costs.
High
SSL certificate expiring in 7 days
SSL certificate expires in 7 days. Affected resources may become unavailable or insecure without renewal.
Critical
K8s cluster EOL with public exposure
Kubernetes cluster is running an end-of-life version and has public-facing workloads with critical vulnerabilities.
Medium
Missing mandatory tags on production resources
Production resources are missing mandatory tags defined by organizational policy, blocking audit readiness.
Critical
Public S3 bucket with PII detected
S3 bucket is publicly accessible, contains PII detected by Wiz, and was created by a contractor account.
High
EC2 instance exposed with outdated AMI
EC2 instance has a security group open to 0.0.0.0/0 and is running an outdated AMI with known vulnerabilities.
Medium
Lambda runtime end-of-life in 30 days
Lambda function runtime reaches end-of-life in 30 days. Continued use poses security risks and may increase costs.
High
SSL certificate expiring in 7 days
SSL certificate expires in 7 days. Affected resources may become unavailable or insecure without renewal.
Critical
K8s cluster EOL with public exposure
Kubernetes cluster is running an end-of-life version and has public-facing workloads with critical vulnerabilities.
Medium
Missing mandatory tags on production resources
Production resources are missing mandatory tags defined by organizational policy, blocking audit readiness.
Find hidden risk and waste in your cloud
See how Insights surfaces the signals that matter across your entire cloud inventory.