Sonrai Cloud Permissions Firewall
Sonrai Cloud Permissions Firewall monitors privileged permissions used by identities in AWS, Azure, and GCP.
What Sonrai Cloud Permissions Firewall is
Sonrai Cloud Permissions Firewall monitors privileged permissions used by identities in AWS, Azure, and GCP. It removes sensitive permissions that are no longer used, can quarantine inactive role assignments, and enforces default deny. Coverage includes human users, service principals, agents, and managed identities. Permissions on Demand routes restricted access requests through ChatOps approval and updates policy afterward.
The web service gathers metadata through read-only access at the top level of a cloud environment and does not install agents. Onboarding at the AWS, Azure, or GCP organization level brings in every account, subscription, or project, though controls can be deployed selectively. Sonrai describes unified enforcement and a single audit trail across the three clouds. Pricing options include ChatOps integration with Slack, Teams, and email, plus enterprise access and identity controls. A 14-day trial offers self-guided or assisted onboarding and requires a business email. Listed pricing includes $150 a month for 10–50 Accounts, $15,000 a year for Startup Pricing, and custom pricing for 50+ Accounts.
Good
- Covers AWS, Azure, and GCP.
- Monitors several identity types.
- Can remove unused sensitive permissions.
- Does not install cloud agents.
- Offers a 14-day trial with onboarding options.
Watch out
- No free plan is listed.
- Trial requires a business email.
- Onboarding brings in every account, subscription, or project.
- Pricing for 50+ Accounts requires contacting the provider.
Who it suits
It is intended for companies running workloads on AWS, Azure, or Google Cloud that need identity, access, and permissions security. It may suit teams seeking to reduce unused privileged access and manage approvals through ChatOps.
Verdict
Sonrai Cloud Permissions Firewall focuses on privileged-permission controls across three cloud providers, with organization-level onboarding and selective control deployment. The trial lasts 14 days, and plan pricing varies by account range and offering.
Plans and prices
From Sonrai Cloud Permissions Firewall's own pricing page, checked 29 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| 10-50 Accounts | $150 a month | 10-50 accounts · Across AWS, Azure, GCP · $150 / account / month |
| Startup Pricing | $15,000 a year | For small cloud footprints · $15k / year minimum |
| 50+ Accounts | Priced on request | 50+ accounts · Enterprise and custom pricing · Contact us |
The facts
Each one read from Sonrai Cloud Permissions Firewall's own pages, with the date it was checked.
What it does
- Cloud coverage
- Sonrai describes one platform for AWS, Azure, and GCP with unified enforcement and a single audit trail.checked 29 Sep 2026
- Contract terms
- The pricing page says monthly contracts have monthly payments and can be cancelled at any time with 30 days’ notice.checked 29 Sep 2026
- Deployment access
- The product requires read-only access at the top level of the cloud and gathers metadata without installing agents in the cloud.checked 29 Sep 2026
- Enterprise features
- Pricing options include enterprise SSO, just-in-time access, third-party access lockdown, unused service and region disabling, identity quarantine, and removal of unused permissions.checked 29 Sep 2026
- Identity coverage
- It covers human users, service principals, agents, and managed identities.checked 29 Sep 2026
- Integrations
- Pricing options include ChatOps integration with Slack, Teams, and email.checked 29 Sep 2026
- Intended users
- Sonrai describes its service as identity, access, and permissions security for companies running workloads on AWS, Azure, and Google Cloud.checked 29 Sep 2026
- Just-in-time access
- Permissions on Demand routes restricted access requests through ChatOps approval and updates the policy.checked 29 Sep 2026
- Onboarding scope
- Onboarding is required at the AWS, Azure, or GCP organization level, which brings in every account, subscription, or project, while controls can be deployed selectively.checked 29 Sep 2026
- Purpose
- The firewall monitors privileged permissions used by identities in Azure and removes unused sensitive permissions, quarantines inactive role assignments, and enforces default deny.checked 29 Sep 2026
- Security
- Sonrai states that it is a SOC 2 Type 2 compliant organization with internal security controls, training, and monitoring.checked 29 Sep 2026
- Support
- Support is offered via email, phone, and chat.checked 29 Sep 2026
The company
- Headquarters
- New York, United States; New Brunswick, Canadachecked 23 Sep 2026
Money
- Trial
- The free trial lasts 14 days, offers self-guided or assisted onboarding, and requires a business email.checked 29 Sep 2026
Alternatives to Sonrai Cloud Permissions Firewall
- 1
AWS IAM Access Analyzer
Free planAndroidiOSWebAPI7.9From $0.20 a month - 2
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 3
C3M Cloud Control
Free planAndroidiOSWebAPI7.4Free plan - 4
Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 5
Qualys TotalCloud
Free planWebAPI7.0Free plan - 6
SentinelOne Singularity Cloud Security
AndroidiOSWebAPI6.9