Platform · Trust & Automation
The accountability layer every other executor runs on.
Automation only earns trust when it's reversible, explainable, and honest about when it fails. This is the framework the rest of CloudPivot's executors are built on top of.
The paper trail
Previewed, approved, executed, verified — on the record.
Every fix moves through the same lifecycle: a dry-run dollar preview, a Slack approval routed to the resource's owner, execution under a scoped IAM role, and verification against the Cost & Usage Report. Each step lands in the audit log with the dollar delta attached, and undo stays one click the whole way.
Know when a fix gets silently undone
Savings leakage detection alerts the moment an applied fix regresses — the dollars re-lost and who caused it. No other FinOps tool ships this.
Tag hygiene, priced in dollars
Missing or inconsistent tags are shown as the real dollars of spend that can't currently be automated-saved — not just a compliance percentage.
Told why the bill spiked, and who
Anomaly root-cause attribution names the change behind a spend spike instead of just flagging that one happened.
Real dollar findings in 15 minutes
The 'found money' onboarding scan surfaces config-only findings before any usage history has even been collected.
Security posture
Built to pass your security review, not just your budget review.
Read-only discovery
Analysis runs on read-only IAM roles. CloudPivot can't change what you haven't granted — discovery and execution use separate, scoped roles.
Scoped execution roles
Executors get the narrowest grant that does the job — a scheduler role can start and stop instances, not delete them.
Unified audit log
Every recommendation, approval, execution, and undo is recorded with who, what, when, and the dollar delta — exportable for your compliance reviews.
Enterprise SSO & RBAC
Entra ID single sign-on with just-in-time provisioning and role-based access control on the Enterprise plan.
Turn on automation you can actually trust.
Every action starts as a dry-run preview — see the dollar impact before anything executes.