The most powerful AI platform for cloud operations

Trace anything across
every cloud.

NimTrace gives your engineering team instant visibility into AWS, Google Cloud, and Azure through natural language: no dashboards, no CLIs, no query languages. One platform, built to bring immediate value to your business.

3
Cloud platforms
24/7
Cost & security monitoring
<30s
Time to first insight
0
Write permissions ever
Works with
Amazon Web Services
Google Cloud
Microsoft Azure

Ask. Trace.
Know.

Stop switching between dashboards and CLIs. Just ask NimTrace what's happening, across any service, any cloud. It reaches in, runs the right checks, and streams back a clear answer in seconds.

Cost
"Why did our AWS bill jump this month?"
Cost Explorer · Commitments · Storage tiers · 10s
$1,860 in savings identified across 3 accounts
Investigation
"What errors spiked in production in the last hour?"
Logs · Metrics · Service health · 12s
3 error spikes found, root cause identified, not just symptoms
Cost
"Which Reserved Instances are we not using?"
Commitment analysis · Savings Plans · 3 accounts
$420/mo in unused Savings Plan commitments found
Investigation
"Why are pods crash-looping in our EKS cluster?"
Kubernetes events · Pod logs · Node health · 9s
OOMKilled on 4 pods: memory limit set too low for the workload
Cost
"Any instances I should downsize?"
Compute Optimizer · Utilization history
m5.xlarge to m5.large recommended: $80/mo saved
Investigation
"Is our Elastic Beanstalk environment healthy?"
Environment health · Deployment events · Instance logs · 8s
2 of 4 instances failing health checks since the last deploy
Cost
"Are we paying for storage we don't need?"
Snapshots · S3 storage tiers · Log retention
12 orphaned snapshots and cold S3 data found: $145/mo wasted
Cost
"Would this workload cost less on GCP or Azure?"
AWS pricing · GCP pricing · Azure pricing
Comparable compute and storage would run about 15% cheaper on GCP
Security
"Any critical security findings this week?"
GuardDuty · Inspector · IAM · 8s
2 IAM roles with unused admin access flagged
DevOps
"Did the last deployment cause the latency spike?"
CodePipeline · CodeDeploy · Deployment logs · 9s
Confirmed: deploy v2.14.1 triggered a scale-in event
Database
"Which queries are slowing down our orders database?"
Slow query log · Schema introspection · MySQL
3 queries missing an index on customer_id, averaging 4.2s each
Database
"How many users signed up last week?"
Read-only SELECT · Schema introspection · PostgreSQL
1,240 new signups, up 18% week over week
1 / 12

Every capability, one result: answers

Click any tab to see what NimTrace actually delivers.

$1,860 in savings found this month

Every right-sizing opportunity, idle resource, and pricing gap: tracked automatically and shown as real dollars, not just alerts you have to translate yourself. NimTrace digs deeper than AWS's own cost tools, correlating usage, commitments, and pricing across every account.

Tracked automatically Real $ impact, every month
3 error spikes found in 12 seconds

Correlated across logs, metrics, and service health automatically. No dashboard hopping, no manual correlation between five different tools.

Root cause, not just symptoms Every cloud, one answer
86/100 average security posture

One unified score per account, computed from your real security signals and refreshed on demand. Not a static checklist that goes stale.

Every account scored Weighted, not just counted
Answers where your team already works

Ask a question in any Slack channel and get a full investigation back: same intelligence, same depth, zero context switching to a separate app.

No app switching Same AI, same depth
Every account. One view.

Cost, security, and investigation activity across every connected cloud account, consolidated automatically and updated continuously, not on a schedule.

Cross-account by default Always current
6
Security signals unified
One score per account, always current
3
Cloud platforms
0
Write permissions
Read-only by design, always
5min
Setup time
One-click IAM role deploy

Everything ops teams need

From deep cost-saving analysis to root-cause investigation, NimTrace covers the full stack of cloud operations through a single chat interface.

Cost Intelligence
Pinpoint cost anomalies, compare month-over-month spend, and identify which services, accounts, or regions are driving your bill. NimTrace digs past the summary numbers your billing console shows you, then automatically tracks every savings opportunity it finds.
Cost ROI Tracking
When NimTrace spots a concrete saving (a right-sizeable instance, an idle resource, a Reserved Instance gap), it saves it automatically. Mark recommendations as actioned and see exactly how much NimTrace has saved you each month, tracked over time.
Log Investigation
Query CloudWatch Logs Insights, GCP Log Explorer, and Azure Monitor with plain English. NimTrace writes and runs the filter patterns. You just ask what happened.
Infrastructure Health
ECS, GKE, AKS, Lambda, Cloud Functions, RDS, Cloud SQL: health status across every service and every environment in one place, instantly.
Security Posture Score
NimTrace computes a 0 to 100 security score per account by weighing GuardDuty threats, Inspector CVEs, Security Hub findings, certificate expiry, dormant IAM credentials, and secrets rotation, refreshed on demand, with a full per-category breakdown.
Multi-Account Support
Connect multiple AWS accounts, GCP projects, and Azure subscriptions. Every investigation runs across all your accounts and returns consolidated results, with no context switching.
Database Querying
Connect MySQL, PostgreSQL, or SQL Server databases and ask NimTrace to query them. Full schema introspection, slow query analysis, and read-only SELECT execution with a 500-row cap.
Team Collaboration
Invite your whole team to a shared workspace. Admins manage members, assign roles, and enforce plan limits. Conversation history is shared so findings don't get lost.
Excel & PDF Export
Export any table or response as Excel or PDF in one click: clean, formatted, and ready to share or archive.
Deployment Pipeline Visibility
See exactly what shipped and when: CodePipeline, CodeDeploy, and CodeCommit activity, correlated with the incidents and metric spikes that follow a release.
Playbooks
Save any multi-step investigation as a reusable playbook. Re-run the exact same set of checks on demand, without re-typing the same questions every time something looks off.
Incident Mode
Wire up a webhook from your alerting tool and NimTrace automatically triages the incident: root cause, blast radius, and a plain-English summary posted straight to Slack.

Up and running in 5 minutes

01
Connect your cloud
Deploy a read-only IAM role with a one-click CloudFormation template. No write permissions, ever. GCP and Azure use service accounts and app registrations.
02
Ask in plain English
Type any question about your infrastructure. No query languages, no dashboards, no filters to learn. NimTrace figures out where to look.
03
Get instant answers
NimTrace traces through your logs, metrics, and health data and streams back a clear, actionable answer.
Read-only access, connected in one click

No manual IAM policies to write. Deploy once, and NimTrace can see, but never touch, your infrastructure.

Zero write permissions Under 5 minutes
Just ask: no query language required

Type your question like you'd ask a colleague. NimTrace figures out where to look and what to check, across every connected account.

No dashboards to learn No filters to configure
A clear answer, not a wall of logs

NimTrace traces through the noise and gives you the root cause, not a dump of raw output.

Answers in seconds No log-diving required

Built for security-conscious teams

NimTrace was designed read-only from day one. No write operations, no credential storage, no risk.

Read-only IAM role
NimTrace never receives credentials with write access. The CloudFormation-deployed role has only read permissions across all AWS services.
ExternalId confusion-deputy protection
Every tenant gets a unique ExternalId required in every STS AssumeRole call. This prevents third-party impersonation attacks at the AWS level.
Network-isolated backend
The entire investigation backend runs inside a private, isolated network with no public endpoints. Only our own authenticated web application can reach it, not the internet.
Credentials in an encrypted secrets vault
GCP and Azure credentials are stored encrypted in our secrets vault. They're never returned to the browser or logged. They're only loaded by the backend at query time.
Security posture
Read-only access
Zero write operations, ever
Enforced
STS short-lived tokens
1-hour TTL, auto-refreshed
Active
WAF protection
Rate limiting + managed threat rules
Enabled
JWT authentication
Cryptographically verified, per-tenant scoped
Required
Tenant isolation
All data keyed by tenant ID
Strict

Questions? Read our full security page →

Simple, transparent pricing

One platform, everything included. A fraction of what you'd pay to stitch together the equivalent coverage yourself.

How NimTrace compares

Most teams stitch together 3 specialized tools to cover what NimTrace does in one subscription.

Typical growing team · 10 accounts
DatadogMonitoring + APM CloudHealthCost management Wiz / OrcaSecurity posture NimTraceAll of the above, one platform
Investigation ✓
Dashboards + APM traces
✕ ✕ ✓
Ask in plain English, root cause in seconds
Cost Savings ✕ ✓
Reports you review manually
✕ ✓
Found and tracked automatically, ROI reported monthly
Security Scoring partial
Alerting only, no score
✕ ✓
Findings list & risk graph
✓
One 0–100 score, 6 signals unified
Multi-Cloud ✓
Per-cloud integration setup
✓
Per-cloud dashboards
✓
Per-cloud dashboards
✓
AWS + GCP + Azure, one login
Monthly cost $600–$1,500 $500–$2,000 $2,000–$5,000 Save 35%+
$1,999/mo
Those 3 tools alone run $3,100–$8,500/mo, combined — 3 logins, 3 contracts, none of them talk to each other. NimTrace: unlimited accounts and team members, one login, no per-seat fees, for $1,999/mo — at least 35% less.

Competitor pricing based on publicly available list prices for a 5-account, 5-seat team. Actual costs vary by usage and contract. NimTrace typically saves $1,100 to $6,500+/month against that stack, on top of the cloud waste it finds and eliminates.

And that's before counting your team's time

Even with all three tools above, a person still has to open each dashboard, cross-reference the results, and write up what it means. That's engineering time no subscription price includes.

Task Doing it manually With NimTrace
Investigating an incident Manually correlating logs, metrics, and alerts across separate dashboards Seconds, not hours
Comparing cost across clouds AWS, GCP, and Azure each bill differently, so comparing spend usually means exporting three invoices into a spreadsheet by hand Unified automatically
Finding savings opportunities Idle resources, unused commitments, forgotten snapshots, and storage in the wrong tier usually only surface during an occasional cost review Tracked every day
Querying your databases Investigating a data issue usually means someone who knows SQL writing a one-off query Plain English, automatic
Everything included
NimTrace
$1,999 / month

One plan. Every capability, every cloud, every account. No feature gates to negotiate around.

1,000
investigations included per month. Need more? It's pay as you go after that, at just $3 each, with no hard cutoff, ever.
  • Unlimited cloud accounts
  • Full log, metrics & infrastructure investigation
  • Cost intelligence, anomaly detection & automatic ROI tracking
  • Security Posture Score across every account
  • Database querying, DevOps & pipeline visibility
  • PDF/Excel export & Slack integration
  • Unlimited team members
  • Priority support
Get started
Need something custom?
Let's talk

For organisations with SSO/SAML, custom deployment, or contract requirements beyond the standard plan.

  • SSO & SAML integration
  • Dedicated support & SLA
  • Custom deployment options
  • Volume & contract pricing
Contact sales

5-minute setup  ·  Pay as you go beyond 1,000  ·  Cancel anytime

Built to earn your security team's sign-off

Read-only, or it doesn't ship.

Every capability is enforced read-only at the IAM level, not just in application code. There is no write path to your infrastructure. That's by design, not by promise.

Every dollar, accounted for.

NimTrace doesn't just answer questions. It automatically tracks every saving opportunity it finds, so you can see exactly what it's worth each month.

One language, every cloud.

AWS, GCP, and Azure: one conversation instead of three consoles, three query languages, and three mental models to keep in your head.

Common questions

Everything teams ask before connecting their first account. Don't see yours? Get in touch.

Does NimTrace ever write to my cloud?
Never. Every capability in NimTrace is read-only. The access credentials you deploy for each cloud account have no write, create, update, or delete permissions on any service.
How long does setup take?
Under 5 minutes. Sign up, connect your cloud account with our one-click setup, click Verify, and you're ready to start asking questions.
Where is my data stored?
Conversation history is stored in our database, in our own cloud account. Cloud credentials (GCP, Azure) are stored in an encrypted secrets vault and never logged or returned to the browser.
Which AI model powers NimTrace?
NimTrace runs on a leading large language model, selected for its strong reasoning on technical infrastructure data and its ability to handle long, multi-step investigations without losing context.
Can I connect multiple cloud accounts?
Yes, unlimited accounts on every plan, across AWS, GCP, and Azure. Each one gets its own dedicated, isolated access credentials, connected in Settings. Every investigation runs across all registered accounts and returns consolidated results.
What is the Security Posture Score?
A 0 to 100 score per AWS account updated on demand. NimTrace queries six security services in parallel: GuardDuty (threats), Inspector (CVEs), Security Hub (consolidated findings), ACM (certificate expiry), IAM (dormant credentials), and Secrets Manager (rotation health). It then applies weighted deductions with per-category caps so a single noisy source can't tank your score. Scores are graded: Excellent (90+), Good (70 to 89), Fair (50 to 69), Poor (30 to 49), Critical (below 30).
How does Cost ROI tracking work?
When NimTrace identifies a concrete cost saving (a right-sizeable instance, an unused resource, an expiring commitment), it automatically saves it as a recommendation. You can mark each one as actioned, dismiss it, or delete it. The Savings dashboard shows your potential savings, actioned total, and monthly ROI from using NimTrace.
Can I use NimTrace from Slack?
Yes. Connect your Slack workspace from Settings → Integrations, then type /nimtrace what's wrong in production? in any channel. NimTrace investigates your infrastructure and posts the answer back, using the same capabilities and the same AI as the web app.
What happens if my team goes over 1,000 investigations?
Nothing breaks. It switches to pay as you go: additional investigations beyond the included 1,000 are billed at $3 each on your next invoice, with no hard cutoff and no service interruption. Most teams stay well within the included amount.
Can I cancel anytime?
Yes. Cancel through the billing settings in your account. No questions asked, no cancellation fees. Your subscription stays active until the end of the billing period.
Is there a free trial?
There's no self-serve free trial today. Every account runs on the $1,999/month plan, with 1,000 investigations included. If you'd like to evaluate NimTrace against your own infrastructure before committing, get in touch and we'll set up an evaluation period.
Does NimTrace store my security findings?
Only the computed score and summary counts are stored, not the raw findings themselves. Raw GuardDuty, Inspector, and Security Hub data stays entirely in your own AWS account. NimTrace reads it transiently at score-compute time and discards it once the score is written.

Your cloud has answers.
NimTrace finds them.

Join engineering teams already using NimTrace to trace, investigate, and understand their cloud infrastructure.

5-minute setup  ·  Read-only access  ·  Cancel anytime