One intelligent view of your entire cloud

Observability, security, cost and operations for OCI, AWS and multi-cloud estates. VIREOPS runs in your own tenancy, so your data stays there.

Request a demo See the platform

VIREOPS Overview: 6,059 resources, Estate Score 71, Well-Architected 59, compliance 53, spend month to date, and a ranked Act on list

Built by NotionAce, a certified Oracle and AWS partner

Oracle Cloud PartnerOCI, E-Business Suite and Fusion
AWS PartnerCloud build and operations
ISO/IEC 27001Certified information security
SOC 2 Type IIIndependently audited controls

Figures on this page come from the VIREOPS demo estate, a real OCI tenancy collected read-only.

Why VIREOPS

Can your team answer these in a minute?

Questions every CIO and cloud owner is asked. VIREOPS answers each one in a click, from what is really running.

Meet VIREOPS

One platform, six jobs

Next-generation, AI-native cloud observability for OCI, AWS and multi-cloud. Each job is a licensed module on one shared estate model.

Monitor

Live estate visibility: every asset, how it connects, five-minute health, alerts that do not cry wolf, and log search.

Explore Monitor

Secure

Posture and compliance mapped to SOC 2, ISO 27001, CIS and regional frameworks, with resilience and DR judged against real resources.

Explore Secure

Optimise

Real billed cost by service, region and resource, and savings grouped by the decision you need to make.

Explore Optimise

Act

Start, stop, resize, back up and schedule with approvals and a full audit trail. VIREOPS never deletes anything.

Explore Act

Ask

Plain-language answers grounded only in your collected evidence. Every number checked, your own AI model.

Explore Ask VIREOPS

Report

Branded, board-ready A4 PDFs for leadership, auditors, finance and operations, on demand or on a schedule.

Explore Reports

5,900resources swept in 4 to 5 minutes

5 minlive metrics between full collections

6compliance frameworks, every control tied to evidence

0bytes of estate data sent to NotionAce

See the platform in action

Every number is counted from observed resources, never estimated. Anything not collected says so: missing is never "all clear".

Your whole estate, scored at a glance

Security, resilience, governance, operations and cost in one Estate Score. Spend month to date with a six-month trend and projection.

71Estate Score, out of 100

Top 5resources to fix, ranked by fixed weights, never AI

Know every asset and its story

Every compartment and region swept, each resource enriched with its details, relationships, changes, security and cost on one Asset 360 page.

5,900resources in 4 to 5 minutes

1 to 24 hscheduled collection, or on demand

See how everything connects

Applications and networks mapped from observed facts, not drawings. A clickable VCN topology, including cross-region DRG peering.

98VCNs

209subnets

10routing hubs

Security and compliance you can evidence

Configuration checks mapped to SOC 2, ISO 27001 A.8 and CIS OCI, plus regional frameworks such as UAE IA and Saudi NCA ECC and CCC. A control without evidence is never scored as passing.

6frameworks

Top 25resources to fix; exposed and vulnerable count double

Spend with confidence

Savings come from real billed cost only, grouped by the decision to make: idle and oversized, stopped but still billed, unused, protection gaps and cost changes.

365 daysof cost history backfilled

400 daysin the cost explorer

Ask your cloud anything

Answers in plain language, grounded only in your collected evidence. Every figure must appear in the evidence, or only the evidence is shown.

BYO AIOCI Generative AI in your region, or your own model key

0SQL or write tools available to the model

Coverage

What VIREOPS covers, at a glance

Read-only collection across every region and compartment, refreshed every 1 to 24 hours, with live metrics every five minutes.

	Monitor	Secure	Optimise	Act
Compute	CPU, memory, health	CVEs, exposure	Idle instances	Start, stop, resize, patch
Storage	Throttled I/O	Public buckets, backups	Unattached volumes	Backups, DR copy
Network	LB health, 5xx, latency	Open ports, NSG rules	Idle LBs, unused IPs
Databases	Sessions, locks, top SQL	Backups, Data Guard	Stopped but billed	Start, stop, backup
Identity	Users, groups, policies	Compliance controls
Changes and logs	Audit log, log search	Who changed what		Approvals, audit trail
Cost	Daily billed cost		Savings, projection	Start and stop schedules

From idle to scheduled in three clicks

A real example from our demo estate: idle instances found, priced and scheduled without leaving VIREOPS.

Find

Inventory, "Mostly idle": 12 instances

Inventory filtered to mostly idle instances

Decide

Optimize, "Start here": the saving, priced

Act

Schedule opens with all 12 picked

New schedule with the idle instances preselected

Every recommendation shows its real billed saving and links Oracle's own guide.

Architecture

Runs in your cloud. Your data stays there.

Each customer runs its own VIREOPS install. NotionAce only handles licensing and updates, and receives only what the licence needs.

Your cloud tenancy

VIREOPS data plane

Web, API and collection worker
PostgreSQL with row-level security
Nightly, restore-tested backups
Deployed by Terraform

OCI tenancies

AWS accounts

More clouds, next

Data modelAccountEntityEstateConnectionAsset

Sent to NotionAce

Installation ID and signature
Product version
Three counts: tenancies, resources, seats

Never sent

Resource names, IPs, OCIDs
Costs, metrics, findings
Credentials and AI keys
Users and AI questions
Database contents
Reports and evidence

Enforced at both ends Every request recorded Tested in every build Check it yourself in Settings

Open by design

Plug into the stack you already run

VIREOPS publishes live metrics, firing alerts, failing checks, cost and collection freshness as a Prometheus endpoint, so your own Grafana can chart them. A scrape never calls the cloud and never runs AI.

Bearer tokens scoped to the account or one entity, shown once, stored as a hash
OIDC single sign-on with group-to-role mapping
Email through your own server: OCI Email Delivery, Microsoft 365 or Amazon SES

All integrations

prometheus.ymlscrape every 60 s

scrape_configs:
  - job_name: vireops
    scheme: https
    metrics_path: /api/v1/export/prometheus
    authorization:
      type: Bearer
      credentials_file: /etc/prometheus/vireops.token
    static_configs:
      - targets: ["vireops.example.com"]

Prometheus

Grafana

OCI

AWS

OIDC SSO

Anthropic

Security by design

Built to pass your security review

Enterprise controls are enforced in the product and tested in every release. The product is complete with AI switched off.

Self-hosted

Runs in your own tenancy. No vendor login, ever: support works from a scrubbed bundle you send.

Row-level security

Forced on every table, every query. Runtime roles never own tables and never bypass it.

Encrypted secrets

AES-256-GCM, bound to the account and row. Never in logs or the browser.

SSO and MFA

OIDC single sign-on and TOTP MFA, mandatory for anyone with admin permissions.

12 built-in roles

Fine-grained, entity-scoped permissions. Nobody can grant a permission they don't hold.

Append-only audit

Every change audited in the same transaction, with redacted diffs. An unaudited change fails the tests.

Read the security overview

Deployment

Live in days, current from then on

NotionAce deploys and supports every install, end to end. Signed updates arrive in your maintenance window, with preflight checks and automatic rollback.

Step 1

Deploy

Terraform builds one VM in your tenancy, on a new or existing network.

Step 2

Activate

An activation code creates your account from the signed licence.

Step 3

Connect

A wizard tests access and generates a least-privilege policy.

Step 4

Collect

The first full sweep finishes in minutes, with live progress.

Let's map your cloud estate together.

See VIREOPS on a live OCI estate: scored, priced and evidenced in one walkthrough. NotionAce deploys it in your tenancy within days.

Request a demo How deployment works