Product Documentation

Panoptes is a multi-cloud observability and management platform for engineering and FinOps teams. It connects to your AWS, GCP, and Azure accounts using either read-only (monitoring) or limited read-write (monitoring + VM actions) IAM permissions — your choice.

Get your first cloud account connected and see live data in under 5 minutes.

Panoptes connects to your cloud providers using IAM roles. Your credentials are encrypted at rest with AES-256 and are never logged or transmitted externally. There are two permission tiers depending on what you need:

Observer mode — read-only IAM (minimum required)

Manager mode — additional action permissions for VM control

If you want to start, stop, or restart VMs directly from the Panoptes dashboard, add these specific action permissions on top of the read-only role:

ec2:StartInstances
ec2:StopInstances
ec2:RebootInstances

roles/compute.instanceAdmin.v1
(or custom role with compute.instances.start / stop / reset)

Virtual Machine Contributor
(or custom role with start / powerOff / restart actions)

Adding an account

The Inventory page shows every resource across all connected accounts in a single, searchable list. Resources are synced automatically every 30 minutes, or you can trigger a manual sync anytime.

What's included

Filtering & search

Use the filter bar to narrow by provider, region, resource type, status (running/stopped/idle), or tag. The search box does full-text matching on resource names and IDs.

Manual sync

Click the sync icon next to any cloud account in Settings → Cloud Accounts to trigger an immediate refresh. Per-account syncs take 10–30 seconds.

Track your cloud spend across AWS, GCP, and Azure in a unified dashboard. Panoptes breaks down costs by service, region, and custom tags.

Cost by Service & Trends

View your daily and monthly spend trends. The dashboard automatically categorizes costs (Compute, Storage, Database, Networking) so you can easily spot where your money is going.

Predictive Forecasting

Panoptes uses historical spend data to forecast your end-of-month bill, helping you avoid budget overruns before they happen.

Exporting Data

Almost all tables in Panoptes (including Billing, Resources, and Optimization) feature an "Export to Excel/CSV" button. This generates a structured, VIP-styled XML Spreadsheet ready for financial reporting.

Panoptes's FinOps engine automatically scans your cloud accounts for waste and generates actionable recommendations. No manual configuration required — it runs on every sync.

Types of recommendations

Excel FinOps report

Export a board-ready Excel report from the Optimization page. The report includes color-coded severity levels, per-account cost breakdowns, and month-over-month trend charts — formatted for CFO review.

Upload your Terraform .tfstate files and Panoptes continuously compares your declared infrastructure against what's actually running in your cloud accounts.

How to upload a state file

Understanding drift results

Each drift finding shows the resource, the field that changed, the declared vs actual value, and a suggested remediation. Severity is HIGH for security-relevant changes (e.g. security group CIDR), MEDIUM for config drift, LOW for tag/label differences.

Panoptes runs automated CSPM (Cloud Security Posture Management) scans across all connected accounts. Your security score (A–F) is calculated from the severity and count of open findings.

What is scanned

Security score

Your score is calculated as: 100 − (critical×10 + high×5 + medium×2 + low×0.5), capped at 0. Grade A = 90+, B = 75–89, C = 60–74, D = 45–59, F = below 45.

Panoptes connects to EKS, GKE, and AKS clusters via your kubeconfig. It provides a read-only view of pods, nodes, and deployments across all clusters in one place.

Connecting a cluster

Live Metrics (CPU & RAM)

Panoptes integrates natively with your cluster's Metrics Server. You can monitor live CPU and Memory (RAM) utilization for every Node and Pod. If a node crosses 80% utilization, Panoptes flags it with a capacity warning.

Pod logs & Scaling

Click any pod in the Kubernetes view to tail its last 100 lines of logs directly in the browser. You can also easily Scale Up or Scale Down your Deployment replicas directly from the dashboard.

The AI Copilot answers natural language questions about your cloud — costs, resource counts, drift findings, and anomalies — using your own live data as context.

Example questions you can ask

Privacy

The AI analyzes only sanitized metadata from your Panoptes dashboard — resource counts, spend figures, region labels. Your raw credentials, application code, and actual cloud resource contents are never sent to the AI model.

Panoptes monitors your cloud spend and notifies you when thresholds are breached or unusual patterns are detected.

Budget alerts

Set a monthly spend threshold (e.g. $2,500/month). When your total cloud bill crosses that amount, you get an in-dashboard alert. You can set separate thresholds per provider.

Anomaly detection

Panoptes compares your current month's spend against the previous 3 months. If any service spikes more than 30% above its baseline, an anomaly finding is created automatically — no configuration needed.

Slack & Webhook Integrations

Receive instant notifications for high severity security drift, cost anomalies, or manual action requests. Navigate to Settings → Notifications to configure custom Slack channels or arbitrary JSON webhooks.

Panoptes allows you to automate repetitive tasks and generate high-level summaries for stakeholders.

Executive Reports

Generate a comprehensive, board-ready executive summary encompassing your global cloud spend, security posture, and infrastructure drift. These reports can be exported to styled Excel files for offline review.

Scheduled Jobs

Configure recurring cron schedules to automatically trigger cloud account syncs, Kubernetes metric pulls, or security scans during off-peak hours.

Panoptes uses organization-based multi-tenancy. Every user belongs to exactly one organization and has one role.

Roles

Inviting teammates

Go to Settings → Team → Invite Member. Enter the email and choose a role. The invitee receives a link to register and is automatically added to your organization.

Two-factor authentication (2FA)

Enable TOTP-based 2FA from Settings → Security. Scan the QR code with any authenticator app (Google Authenticator, Authy, 1Password). Each login will require a 6-digit code.

Password management

Change your password from Settings → Security → Change Password. Panoptes uses bcrypt hashing — passwords are never stored in plaintext.

Credential vault

All cloud provider credentials are encrypted at rest with AES-256-GCM before being stored in the database. The encryption key is rotated automatically. Credentials are never returned in any API response.

Audit Logs (SOC 2 Ready)

Panoptes maintains a detailed, immutable audit log of all organizational activity. This includes user logins, password changes, infra state uploads, and credential modifications. Pro and Enterprise teams can export this log as CSV/Excel for compliance reporting.