Is my cloud account safe with Liberra?

Yes. Delete, terminate and purge operations are blocked in code across every service, so Liberra cannot remove your infrastructure at all. Every other write pauses and shows you the plan before anything runs. Access is a role or delegation that lives in your own account and that you can revoke at any time.

Does Liberra store my cloud credentials?

No. On AWS, Liberra assumes an IAM role you create and receives a temporary token that expires every hour. On Azure, access happens inside your own tenant through a Lighthouse delegation, so no key is ever issued. Long-term credentials never reach our servers.

What AI model powers Liberra?

Liberra is powered by Anthropic Claude. One frontier model drives every conversation, with full context of your cloud through the Cloud Index, so it already knows your infrastructure before you ask.

Yes, the free plan is permanent, not a trial, and needs no credit card. Connect an AWS account or an Azure subscription and get a read-only audit of every resource, cost and security issue. Paid plans start at $99/mo and unlock write access and deployments.

Which clouds does Liberra support?

AWS and Azure are live today, with the same features on both. Google Cloud is on the roadmap. Liberra reads and acts on any service in a connected account rather than working from a fixed list, so coverage follows whatever your account actually uses.

How is Liberra different from the AWS Console or the Azure Portal?

A console makes you navigate hundreds of services and dozens of screens, and it never remembers anything between visits. Liberra keeps a persistent index of your accounts, so you ask a question in plain English and get an answer in seconds instead of fifteen browser tabs.

What happens if the AI makes a mistake?

It cannot delete, terminate or purge anything, because those are blocked in code rather than gated behind a prompt. Every other write stops and shows you the plan, including what it costs and what depends on it, so you approve or reject before anything reaches your account.

Your AI cloud engineer.

Give it to your cloud engineer. Or be one.

Knows your account. Ships your changes. Can't delete a thing.

Run my free audit

Free to start. Read-only until you say otherwise.

Supported

On the roadmap

Liberra AI

Search…Ctrl K

Dashboard

Settings

Last synced 15h ago Sync now

MONTHLY COST

$3,847

+4.2% vs last month

FORECAST

$4,210

end of month

WASTE SAVINGS

$612/mo found

ACTIVE ISSUES

none critical

Infrastructure

LAMBDA61LOG_GROUP48SG41IAM_ROLE37EC223SUBNET22S318ROUTE_TABLE12EVENTBRIDGE7KMS6VPC5IGW5ALB4RDS4NAT_GW3CLOUDFRONT2

Cost Trend

$250$0

07/1007/1307/1607/1907/22

Issues7 total

port 22 open to world1

no s3 versioning2

no mfa user1

no rds deletion protection1

no log retention2

Liberra AI

Ask me anything about your cloud infrastructure

The real product, connected to a sample AWS account. Everything runs on this page. Nothing you type is sent anywhere.

01 · Safety

Deletes are impossible.Everything else waits for you.

Can it delete my stuff?: No. The delete call does not exist in its hands.
Will it act without asking?: No. Every change stops at a plan. Nothing runs until you click.
Do you keep my keys?: Never. Hourly tokens, nothing stored, revoked the second you say so.

Don't take our word for it. The enforcement code is public.

02 · Cross-cloud

Now your clouds can talk to each other.

Liberra connects every account you own.

prod

us-east-1

4120 · 8830

+$96 · NAT gateway

staging

westus2

7715 · 2049

flat

dev

eu-west-1

9038 · 5561

+$9

It reaches everything, always: Switching accounts only filters your view.
It builds in either cloud: Real Terraform, in your account, plan first.
It compares them: It holds the index for both, so it can answer across them.

03 · Memory

It knows your cloud better than you do.

inventory

what's running?

298 resources across 3 accounts. Synced 4 minutes ago.

Built the first time you connect. Current every day after.

04 · What it does

Everything a cloud engineer does.

No console. No Terraform to learn. No waiting on someone.

Answersanything, instantly

Buildsreal infra, via Terraform

Deploysyour code, functions and sites

Fixeswhat it finds, once you approve

Writes codeand runs it against your cloud

Imports Terraformthe state you already have

Reads your reposo the infra matches the code

Gets insideruns commands on live machines

Reads logsfinds the error, explains it

Drawsdiagrams of what you actually have

Maps blast radiuswhat breaks if this dies

Tracks changeswho changed what, and when

Checks the docsnever invents an API

Emails a digestwhat changed while you slept

Teachesthe why, not just the what

Answersanything, instantly

Buildsreal infra, via Terraform

Deploysyour code, functions and sites

Fixeswhat it finds, once you approve

Writes codeand runs it against your cloud

Imports Terraformthe state you already have

Reads your reposo the infra matches the code

Gets insideruns commands on live machines

Reads logsfinds the error, explains it

Drawsdiagrams of what you actually have

Maps blast radiuswhat breaks if this dies

Tracks changeswho changed what, and when

Checks the docsnever invents an API

Emails a digestwhat changed while you slept

Teachesthe why, not just the what

Scansreal Prowler, AWS and Azure

Finds open portsbefore someone else does

Finds public databasesreachable from the internet

Flags public storagebuckets and blob containers

Flags users without MFAone password from the account

Flags stale secretsnever rotated, still valid

Flags plaintext trafficconnections without TLS

Catches missing backupsa database with no snapshot

Catches single-AZone zone from an outage

Spots dead runtimesversions the cloud already dropped

Spots broken alarmsmonitoring that cannot fire

Watches for driftwhen reality leaves the plan

Scansreal Prowler, AWS and Azure

Finds open portsbefore someone else does

Finds public databasesreachable from the internet

Flags public storagebuckets and blob containers

Flags users without MFAone password from the account

Flags stale secretsnever rotated, still valid

Flags plaintext trafficconnections without TLS

Catches missing backupsa database with no snapshot

Catches single-AZone zone from an outage

Spots dead runtimesversions the cloud already dropped

Spots broken alarmsmonitoring that cannot fire

Watches for driftwhen reality leaves the plan

Tracks costper resource, per environment

Spots anomaliesa bill that jumped overnight

Right-sizesinstances, volumes, functions

Finds idlerunning, doing nothing

Finds orphansvolumes and IPs nobody uses

Finds stopped machinesstill billing for their disks

Finds old snapshotsbackups from years ago

Finds old generationshardware you are overpaying for

Finds forgotten servicesthe expensive ones, left running

Finds empty shellsclusters and networks with nothing in them

Tracks costper resource, per environment

Spots anomaliesa bill that jumped overnight

Right-sizesinstances, volumes, functions

Finds idlerunning, doing nothing

Finds orphansvolumes and IPs nobody uses

Finds stopped machinesstill billing for their disks

Finds old snapshotsbackups from years ago

Finds old generationshardware you are overpaying for

Finds forgotten servicesthe expensive ones, left running

Finds empty shellsclusters and networks with nothing in them

Tracks costper resource, per environment

Spots anomaliesa bill that jumped overnight

Right-sizesinstances, volumes, functions

Finds idlerunning, doing nothing

Finds orphansvolumes and IPs nobody uses

Finds stopped machinesstill billing for their disks

Finds old snapshotsbackups from years ago

Finds old generationshardware you are overpaying for

Finds forgotten servicesthe expensive ones, left running

Finds empty shellsclusters and networks with nothing in them

Tracks costper resource, per environment

Spots anomaliesa bill that jumped overnight

Right-sizesinstances, volumes, functions

Finds idlerunning, doing nothing

Finds orphansvolumes and IPs nobody uses

Finds stopped machinesstill billing for their disks

Finds old snapshotsbackups from years ago

Finds old generationshardware you are overpaying for

Finds forgotten servicesthe expensive ones, left running

Finds empty shellsclusters and networks with nothing in them

05 · How it connects

You approve it in your own console.

1
Pick your cloud
AWS or Azure. Both work the same from here on.
2
Approve it in your own console
One CloudFormation stack on AWS, one Lighthouse delegation on Azure. You click it, in your account, not ours.
3
That's it
About a minute, and you never copy a key or install anything.

From then on you're working in your own cloud, through Liberra.

Remove the stack or the delegation and Liberra can't touch your cloud anymore.

06 · Who it's for

It's not built for everyone.

Built for you

You run a small team, and no DevOps hire is coming.
You look after a handful of accounts, one per client.
You inherited the cloud, and became the person everyone asks.

Not for you

You have a platform team. Theirs will fit you better.
You know what a NAT gateway costs without looking it up. You'd hate the guard rails.

We'd rather you know now than find out after you connect.

07 · Watch

Watch it work.

The 60-second tour

1:02

It finds the waste, you approve the fix, it refuses the delete.

Try to break it

1:29

Two attempts to destroy the account, zero resources lost, every question answered.

Recorded from the product. The refusals are real.

08 · Pricing

Start free. Pay when it acts.

Free: $0; See everything. Change nothing.
Pro: $99/mo; It starts making changes.
Max: $399/mo; Three accounts. A month of history.

Full pricingCancel anytime. Unlimited accounts on Enterprise.

Point it at your cloud.

Run my free audit

Questions? Answers.

Everything you need to know before connecting your cloud.