Azure IPAM
Azure IPAM helps Azure customers plan, deploy, manage, and monitor IP address space.
What Azure IPAM is
Azure IPAM helps Azure customers plan, deploy, manage, and monitor IP address space. It discovers networks, subnets, and endpoints across an Azure tenant, and highlights orphaned endpoints and virtual network peers with misconfigurations. Users can arrange networks into Spaces and Blocks, track IP and CIDR use, and map external networks to Azure ranges. Subnet planning tools let users explore how many subnets of a chosen mask fit within a CIDR block. Its REST API supports infrastructure-as-code and CI/CD workflows, with reservation paths documented for ARM and Bicep templates, Terraform, and CI/CD pipelines. The app can run as a container in Azure App Service or Azure Functions, or as an API without a user interface. Its supporting infrastructure runs in the customer's Azure tenant, aside from the public container registry. The Python backend uses FastAPI and Azure Resource Graph. Deployment requires an Azure subscription and substantial permissions, including subscription-level Owner access, Root Management Group permissions, and Global Administrator consent for app registration API permissions. The project is designed for a single tenant; multi-tenant support is under assessment. Azure IPAM is open source and free; Azure infrastructure and hosting costs are separate.
Good
- Discovers networks, subnets, and endpoints across an Azure tenant.
- Organizes networks into Spaces and Blocks.
- Includes CIDR subnet planning tools.
- REST API supports infrastructure-as-code and CI/CD workflows.
- Can run API-only without a user interface.
Watch out
- Requires subscription-level Owner access.
- Requires Root Management Group permissions.
- Designed with a single tenant in mind.
- Azure infrastructure and hosting costs are separate.
Who it suits
It suits Azure teams that need to organize address space, plan subnets, or automate IP management. Deployment prerequisites and the single-tenant design are important considerations for organizations evaluating it.
Verdict
Azure IPAM combines Azure network discovery, CIDR organization, subnet planning, and API-based automation in an open-source tool. Its broad deployment permissions and single-tenant design are key constraints to weigh before adoption.
Plans and prices
From Azure IPAM's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Azure IPAM | Free | Open-source project · Azure infrastructure and hosting costs are separate |
The facts
Each one read from Azure IPAM's own pages, with the date it was checked.
What it does
- Automation
- A REST API supports programmatic IP address management for infrastructure-as-code and CI/CD workflows.checked 4 Oct 2026
- Backend
- The Python backend uses FastAPI and Azure Resource Graph to gather information about Azure networking resources and their states.checked 4 Oct 2026
- Data and tenancy
- Supporting infrastructure runs in the customer's Azure tenant, and the documentation says resources are not shared with other IPAM users except for the public container registry.checked 4 Oct 2026
- Deployment
- The application can run as a container in Azure App Service or Azure Functions, and can be deployed API-only without a UI.checked 4 Oct 2026
- Discovery
- It can discover networks, subnets, and endpoints across an Azure tenant and visualize orphaned endpoints and misconfigured virtual network peers.checked 4 Oct 2026
- Identity and secrets
- The architecture uses Azure app registrations for authentication and Azure Key Vault to store app registration credentials, managed identity ID, and tenant ID.checked 4 Oct 2026
- Integrations
- The documentation names ARM and Bicep templates, Terraform, and CI/CD pipelines as integration paths for reserving CIDR blocks.checked 4 Oct 2026
- Organization
- Users can group Azure networks into Spaces and Blocks, track IP and CIDR consumption, and map external networks to Azure CIDR ranges.checked 4 Oct 2026
- Permissions
- Deployment prerequisites include an Azure subscription, subscription-level Owner access, permissions at the Root Management Group, and Global Administrator consent for app registration API permissions.checked 4 Oct 2026
- Purpose
- Azure IPAM helps Azure customers plan, deploy, manage, and monitor their IP address space.checked 4 Oct 2026
- Security reporting
- The security policy directs vulnerability reports to the Microsoft Security Response Center and asks users not to report them through public GitHub issues.checked 4 Oct 2026
- Support
- Project support is limited to the listed documentation and GitHub issue resources; users can file bugs and feature requests as GitHub Issues.checked 4 Oct 2026
- Tenant limit
- The project README says the tool is designed with a single tenant in mind and lists multi-tenant support as under assessment.checked 4 Oct 2026
Money
- Planning
- Planning tools support exploring how many subnets of a given mask are available within a CIDR block.checked 4 Oct 2026
Alternatives to Azure IPAM
- 1
GestióIP
Free planOpen sourceWebAPILinuxSelf-hosted8.2From $400 a year - 2
ManageEngine OpUtils
Free planAndroidiOSWebAPI8.2From $138 a year - 3
Subnetly
Free planiOSWebAPILinux7.9From $49 a month - 4

NetBox
Free planOpen sourceWebAPILinuxSelf-hosted7.6Free plan - 5

Danbyte
Free planOpen sourceWebAPILinuxSelf-hosted7.4Free plan - 6

Obelinf
Free planWebAPI7.4From $99 a month
