Cloud Asset Inventory and Governance Automation for Platform Teams

CloudQuery serves platform engineering, security, and governance teams that need one queryable view of infrastructure spread across multiple clouds and SaaS tools. The company frames its work as multi-cloud visibility and automation, delivered along two paths: an open-source CLI, licensed under MPL-2.0, that syncs cloud asset data into a database the customer owns, and a fully managed enterprise platform for teams that would rather not run the pipeline themselves. Reddit is cited publicly as a customer operating it across a large multi-cloud estate.

The underlying design is an ELT framework. Source plugins extract configuration metadata from AWS, GCP, Azure, Kubernetes, Terraform, GitHub, Okta, Cloudflare and dozens of other providers; destination plugins load it into PostgreSQL, BigQuery, Snowflake, S3, or ClickHouse. Records are normalized into relational tables, so operators interrogate the whole estate in ordinary SQL. Incremental table support allows delta-based syncs rather than a full refresh on every run.

Because the inventory lands in a conventional database, detective policies are simply SQL: written once, evaluated across every account and provider, then bundled into policy groups mapped to frameworks such as CIS and SOC 2, with violations tracked over time. Event-driven automations react to drift, cost anomalies, and security findings by posting Slack or Teams alerts, opening Jira or ServiceNow tickets, calling webhooks, or kicking off remediation. The managed tier adds a natural-language assistant and an MCP server over the same data. CloudQuery is a part of env zero as of March 2026.