We use analytics cookies and anonymised session recordings to improve the product. Do you accept?
Security

Read-only,
by design

PruneOps reads your providers and never changes them. Here is exactly what it can access, where your data is kept and how you take it with you.

Get started Contact
Read-only on every provider
Nothing in the app needs write access: it can see your resources, never change them.
Nothing reaches into your network
No inbound ports, VPN or bastion. The Kubernetes agent only makes outbound calls.
Data hosted in the EU
Stored on Amazon Web Services in Spain and encrypted at rest.
Your data, your call
Export everything or delete your organization at any time.
Access

How we connect to your accounts

You create the credentials, you choose the scope, and you can revoke them at any time.

AWS: a read-only IAM role
A role you deploy yourself from our CloudFormation or Terraform template, with 75 read-only permissions (Get, List and Describe). See full list.
Other providers: scoped API tokens
Read-only tokens on DigitalOcean and Hetzner, a read token on Cloudflare, a GET-only key on OVH and the built-in PVEAuditor role on Proxmox.
Kubernetes: an outbound-only agent
A lightweight agent pushes usage from inside the cluster. Secrets are read as metadata only, never their contents.

To cut access, delete the role or the token at your provider: it stops immediately.

Data

Where your data lives

In the EU, encrypted at rest
Database, queues and files are hosted on Amazon Web Services in Spain.
Isolated per organization
Each organization keeps its inventory, costs, recommendations and settings in its own tables.
Passwords and tokens hashed
Passwords are stored only as a hash, or sign in with Google. API and agent tokens are hashed and shown only once.
Control

You stay in control

Roles
Only owners and admins add or remove accounts and invite or manage members.
Audit log
Changes to accounts, members and settings are recorded with who made them and when.
A private assistant
Questions go to the model only to be answered, and the conversation stays in your browser. We count tokens, we never store the questions.
Export and delete
An owner can download all the organization data, or delete it with its credentials, members and settings.

Questions about security? Get in touch.