Cloud governance · Oracle Cloud + AWS

Rule your entire cloud
from one place.

Inventory, cost, audit and security for Oracle Cloud and AWS, in one platform.

  • Oracle Cloud (OCI)
  • AWS
  • + Oracle Fusion & OIC
Illustration: an OCI multi-VCN network map, with a hub VCN connected through a Dynamic Routing Gateway to production and non-production spoke VCNs. hub-vcn10.0.0.0/16 IGW public-sn · 10.0.1.0/24 lb-prod · listener :443cert *.example.com · 61 days left bastion-01 firewall-sn · 10.0.2.0/24 nfw-01 route table: 10.1.0.0/16 → DRG route table: 10.2.0.0/16 → DRG route table: 0.0.0.0/0 → IGW DRGhub-drg prod-vcn10.1.0.0/16 app-sn · 10.1.1.0/24 app-01 app-02 db-sn · 10.1.2.0/24 erp-db · DB system · RAC nonprod-vcn10.2.0.0/16 app-sn · 10.2.1.0/24 test-app-01 db-sn · 10.2.2.0/24 erp-test-db NAT attach attach

Illustration with sample names. Every box in CloudRuler is clickable and opens that resource’s full details.

The problem

Six tools that don’t talk to each other.

Each has its own data, login and bill. None agree on what exists or who owns it. CloudRuler replaces all six with one inventory, one classification and one timeline.

Diagram: six separate tools (CMDB, FinOps tool, SIEM, IAM spreadsheet, network monitor, server logs) are each replaced by a CloudRuler module, and all six modules connect to one CloudRuler hub with one inventory, one classification and one timeline. CMDB Inventory FinOps tool FinOps SIEM Cloud Ops Audit IAM spreadsheet IAM Security Posture Network monitor Network Traffic Audit Server logs Server Audit CloudRuler one inventory one classification one timeline

Live topology & traffic

CloudRuler draws your cloud for you. No Visio file to maintain again.

Topology

What could talk

From live configuration: VPCs and VCNs, subnets, gateways, routes, load balancers and certificates.

Illustration: an OCI multi-VCN network map, with a hub VCN connected through a Dynamic Routing Gateway to production and non-production spoke VCNs. hub-vcn10.0.0.0/16 IGW public-sn · 10.0.1.0/24 lb-prod · listener :443cert *.example.com · 61 days left bastion-01 firewall-sn · 10.0.2.0/24 nfw-01 route table: 10.1.0.0/16 → DRG route table: 10.2.0.0/16 → DRG route table: 0.0.0.0/0 → IGW DRGhub-drg prod-vcn10.1.0.0/16 app-sn · 10.1.1.0/24 app-01 app-02 db-sn · 10.1.2.0/24 erp-db · DB system · RAC nonprod-vcn10.2.0.0/16 app-sn · 10.2.1.0/24 test-app-01 db-sn · 10.2.2.0/24 erp-test-db NAT attach attach

Illustration with sample names. Every box in CloudRuler is clickable and opens that resource’s full details.

Traffic

What actually did

From flow logs: who talked to whom, on which ports, and anything on a threat blocklist.

Illustration: a resource connections graph built from flow logs. A server, app-01, sits in the centre, with lines to every peer it talked to, including ports and volumes. One inbound SSH connection from an address on a public threat blocklist is highlighted in red. app-01 10.1.1.12 lb-prod inbound :8080 · 2.1 GB erp-db outbound :1521 · 840 MB Object Storage outbound :443 · 310 MB 10.2.0.0/16 internal :8080 · 95 MB ⚠ 203.0.113.47 inbound :22 · blocklist match Internet outbound :443 · 12 MB

Illustration with sample data. Built from VCN Flow Logs. Traffic matched against public threat blocklists is highlighted.

Together they answer: is this server exposed, and has anything used that exposure?

Why one platform

Start from a cost spike. End at the command that caused it.

Follow one resource from cost to audit to server to network, without switching tools.

  1. 01

    FinOps

    A cost spike

    Finance – Prod is 38% above its 7-day average.

  2. 02

    Inventory

    The resource

    A new GPU instance in the Finance – Prod landscape.

  3. 03

    Cloud Ops Audit

    Who created it

    Launched by j.doe from an unusual location, Tuesday 22:14.

  4. 04

    Server Audit

    Who logged in

    Two SSH logins, sudo used, a miner binary downloaded.

  5. 05

    Network Traffic Audit

    What it talked to

    Outbound :3333 to an address on a threat blocklist.

One screen to the next, same resource, same owner, same timeline. No tool switching. Sample scenario.

AI Assistant

Ask your cloud a question in plain English.

Answers come only from your real CloudRuler data, and only with what the user’s role is allowed to see.

Supported clouds

Oracle Cloud and AWS. Separately or combined.

Every OCI tenancy and every AWS account, on its own or in one combined view.

Plus Oracle Fusion and Oracle Integration Cloud: access, SoD conflicts, change history and integration cost.
  1. Connect

    Your OCI tenancies and AWS organization, plus Fusion and OIC, with read-only access.

  2. Classify

    CloudRuler syncs every resource and maps it to your business landscapes.

  3. Govern

    All six modules update automatically, every day.

Self-hosted

Your data stays with you

CloudRuler runs in your own environment.

Read-only access

Read-only policies on OCI. A CloudFormation read-only role on AWS.

SSO and roles

OIDC sign-in. Each role sees only its modules. Security →

See your own cloud in CloudRuler.

A 30-minute walkthrough on Oracle Cloud, AWS, or both. Bring your questions about inventory, cost or audit.