Onam
Estate · Security · FinOps · DRM · AIOps

From assets to a secure, optimised and resilient cloud.

Onam finds everything you run across 7 clouds, secures it, explains what it costs and plans how it comes back after an outage — one platform, one inventory, one console. AI agents work across it in early access, and a person approves every change they propose.

Overview

See it in two minutes

What Onam is and how the products fit together, in one short video.

Voices are AI-generated. More short Q&A videos: Onam Security: start here

How the Onam platform fits together: your clouds feed Onam Estate's single inventory; Onam Security, Onam FinOps and Onam DRM act on it; Onam AIOps agents work across every layer with a person approving every change.
Your clouds
  • AWS
  • Microsoft Azure
  • Google Cloud
  • Oracle Cloud
  • Alibaba Cloud
  • IBM Cloud
  • Kubernetes
  • SaaS apps
1 · DiscoverOnam EstateOne inventory every product reads — discover, map, keep current.Onam AIOpsEarly accessAI agents across every layer — they investigate with evidence; a person approves every change.
  • Reduced risk
  • Lower cloud costs
  • Recovery readiness
  • Audit readiness
  • One view for every team
One discovery feeds every product. Onam AIOps is in early access.Detailed platform diagram
The products

Four products, one inventory — and AI agents across all of them.

Each product answers one question a team already asks. Buy the one you need today; the others work from the same discovery the day you add them.

Onam Estate

What do we actually run, and how is it wired together?

Continuous discovery of every cloud resource and the relationships between them — one estate of record that every other product works from.

With Onam AIOps:Asset AgentEarly access
Illustration: cloud resources on one platform, joined by relationship lines into a single asset graph.

Illustrative

Onam AIOpsEarly access

AI agents that do the investigation. People make the call.

AI agents that investigate across the platform with evidence on every claim, and propose changes a person approves. Nothing changes your cloud without that approval.

  • A plan you can see
    Which agent does what, in which order — before it runs.
  • Evidence on every claim
    Each number links to the query and scan behind it.
  • A person approves every change
    Diff first, rollback shown, bound to that exact change.
  • A kill switch and a ceiling
    Autonomy is capped per organisation and can be stopped.
What teams ask it today
Find internet-exposed critical assets

“Show me critical production assets reachable from the internet.”

A table of assets with exposure type, severity and owner, with evidence on every row.

Asset → SecurityNone — read only
Triage a new critical finding

“Is this finding real, and what does it actually reach?”

The finding in context: the resource, what depends on it, who owns it and a recommended next step.

Security → AssetNone — read only
Identify excessive IAM permissions

“Which identities have far more access than they use?”

Identities ranked by unused privilege, each with the policy and finding that shows it.

SecurityNone — read only
One platform

Built once, underneath every product.

01
One discovery

Cloud accounts are connected once. Every product reads the inventory Onam Estate keeps current, so the four never disagree about what exists.

02
One console, one login

Estate, Security, FinOps, DRM and the AIOps workspace run in the same console, behind the same login.

03
Read-only by default

Posture and inventory come through read-only cloud roles. Nothing changes your cloud unless a person approves it.

04
Buy what you need

Onam Security comes in Free, Pro and Enterprise. Estate, FinOps and DRM are added per organisation.

Cloud marketplaces

Buy Onam through your cloud marketplace.

Onam is listed on Microsoft Marketplace, so you can procure it where your company already buys cloud software. Google Cloud and AWS listings are on the way; until then, buy directly — talk to us.

7 clouds supported
78 frameworks covered
Read-only posture scanning
Agentless workload scanning in your account
Delete access anytime
FAQ

Frequently asked questions

The platform, the products, AI agents and how you buy them — answered straight.

What is Onam?
Onam is one end-to-end cloud platform. Onam Estate discovers and maps everything you run; Onam Security finds and prioritises risk across posture, identity, data, code, attack paths and threat detection; Onam FinOps explains what it costs and who owns it; Onam DRM maps applications, predicts recovery time against your targets and flags drift from the approved plan. All four share one discovery and one console, and Onam AIOps — AI agents that investigate with evidence and propose changes for a person to approve — is in early access across them.
Do I have to buy all four products?
No. Onam Security is sold in Free, Pro and Enterprise plans. Onam Estate, Onam FinOps and Onam DRM are added per organisation — contact sales. Whatever you start with, your cloud accounts are connected once and every product you add later works from the same inventory.
What is Onam AIOps, and can I use it today?
Onam AIOps is a workspace where your team works with specialist AI agents. The Asset Agent and Security Agent are in early access, enabled per organisation by invitation; the Compliance and Data agents are in development; FinOps, DR and Architecture agents are on the roadmap. Agents answer questions and propose changes with evidence attached — they do not change your cloud, and every proposed change waits for a person to approve it.
Which clouds does Onam cover?
The shared inventory covers 7 clouds: AWS, Microsoft Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, IBM Cloud and Kubernetes. Some views are narrower today — for example, Onam Estate's architecture view draws AWS accounts — and each product's documentation says where.
Does Onam change anything in my cloud accounts?
Posture scanning and discovery use read-only cloud roles, and agentless workload scanning runs inside your own account. Onam DRM reads configuration and records approvals, baselines and drills inside DRM; it does not fail anything over. Onam AIOps proposes changes for a person to approve and does not execute them in a customer cloud.
Ready when you are

See your cloud end to end.

Connect one account once. See what you run, what is exposed, what it costs and how it comes back — then decide which products you need.