Skip to content
SPECIFICTION
Get listed

CGPulse

cloudgovernancepulse.com

From €99/mo Free plan WebAPI
Visit cloudgovernancepulse.com
Spec score 9.1 #1 of 26 in Cloud Governance Software

What it is

CGPulse scans Azure and AWS resources for misconfigurations and tracks cloud compliance against policy rules and frameworks. Its coverage lists 621 rules across 19 frameworks, including Azure, AWS and cross-cloud policies. Scanning uses read-only access and does not modify cloud resources. Users can review supported fixes before applying them; fixes marked dangerous require a warning and confirmation. The service can generate Terraform, Bicep and CLI remediation templates, while a YAML editor lets users create custom rules. It also provides a REST API and an MCP server for AI assistants including Claude and Copilot. CGPulse is available on the web and through an API, with Free, Team and Business plans. Free costs nothing and allows two cloud accounts and 10 scans monthly; Team costs €99 a month and Business costs €299 a month. Team and Business list a 7-day free trial. CGPulse describes itself as a posture assessment tool, not a certified compliance audit.

Spec sheet

What it does
CGPulse scans Azure and AWS resource configurations against policy rules and compliance frameworks, then provides findings and remediation options.Read 14 Oct 2026 · cloudgovernancepulse.com
Purpose
CGPulse scans Azure and AWS resources for misconfigurations and tracks cloud compliance against policy rules and frameworks.Read 30 Sep 2026 · cloudgovernancepulse.com
Intended users
The documentation presents workflows for cloud security engineers, compliance officers, GRC managers, DevOps and platform engineers, and CTOs or VPs of Engineering.Read 30 Sep 2026 · cloudgovernancepulse.com
API
A REST API under /api/v1/ covers scans, compliance, policies, initiatives, evaluations, schedules, resolutions and remediation, using API keys.Read 14 Oct 2026 · cloudgovernancepulse.com
Integrations
CGPulse provides a REST API and an MCP server for AI assistants including Claude and Copilot.Read 30 Sep 2026 · cloudgovernancepulse.com
Support
The documentation says vulnerability reports sent to [email protected] receive a response commitment within 48 hours.Read 30 Sep 2026 · cloudgovernancepulse.com
AI data handling
Opt-in AI summaries send aggregated compliance scores and rule names to Anthropic, while raw resource data, credentials and personal data are excluded.Read 14 Oct 2026 · cloudgovernancepulse.com
Audit log
An audit trail records scans, waivers, policy changes and remediation actions.Read 14 Oct 2026 · cloudgovernancepulse.com
Auto-remediation
Supported misconfigurations can be fixed with a one-click workflow that lets users review changes before applying them.Read 14 Oct 2026 · cloudgovernancepulse.com
Availability limitation
The terms do not guarantee uninterrupted service and disclaim responsibility for downtime or service interruptions outside the vendor’s control.Read 14 Oct 2026 · cloudgovernancepulse.com
Cloud permissions
Scanning uses Azure Reader permissions or an AWS cross-account ReadOnlyAccess role; remediation requires narrower write permissions.Read 14 Oct 2026 · cloudgovernancepulse.com
Company age estimate
GetLatka lists CGPulse as founded in 2026.Read 14 Oct 2026 · getlatka.com
Company location estimate
GetLatka identifies CGPulse headquarters as Haabneeme, Estonia.Read 14 Oct 2026 · getlatka.com
Compliance limitation
The vendor says CGPulse assesses posture and does not perform or guarantee formal SOC 2, ISO 27001 or PCI DSS certification audits.Read 14 Oct 2026 · cloudgovernancepulse.com
Coverage
The site lists 621 policy rules across 19 compliance frameworks, including Azure, AWS, and cross-cloud rules.Read 30 Sep 2026 · cloudgovernancepulse.com
Custom policies
Users can define organization-specific compliance rules in YAML alongside built-in benchmarks.Read 14 Oct 2026 · cloudgovernancepulse.com
Data residency
Customer data is stored in Azure Cosmos DB in the EU, with North Europe identified as the default region.Read 14 Oct 2026 · cloudgovernancepulse.com
Data security
The documentation says data is stored in Azure Cosmos DB in the EU North Europe region, encrypted at rest, with tenant data isolated using per-tenant partition keys.Read 30 Sep 2026 · cloudgovernancepulse.com
Documentation depth
Documentation includes setup, scanning, framework coverage, remediation, API/MCP guidance, FAQs and a versioned changelog.Read 14 Oct 2026 · cloudgovernancepulse.com
Exports
The platform generates PDF compliance reports and exports remediation templates or complete scan state for offline analysis.Read 14 Oct 2026 · cloudgovernancepulse.com
External database
Business customers can synchronize scan results to their own Cosmos DB for analytics, Grafana or data-warehouse use.Read 14 Oct 2026 · cloudgovernancepulse.com
Independent company estimate
GetLatka reports CGPulse at $1K revenue in 2026, one customer, $0 funding and a one-person team.Read 14 Oct 2026 · getlatka.com
Independent listing status
SaaSHub lists CGPulse as a freemium Azure/AWS governance product and shows 0 reviews.Read 14 Oct 2026 · saashub.com
Infrastructure exports
The product can generate Terraform, Bicep, and CLI remediation templates.Read 30 Sep 2026 · cloudgovernancepulse.com
MCP integration
An MCP server lets Claude, Copilot and other compatible assistants query compliance data, list scans, resolve findings and generate reports.Read 14 Oct 2026 · cloudgovernancepulse.com
Multi-cloud scanning
The service connects Azure tenants and AWS accounts so subscriptions and accounts can be scanned from one place.Read 14 Oct 2026 · cloudgovernancepulse.com
Notable launch news
A CGPulse LinkedIn post announced that the platform was live and described its Connect, Govern and Protect model.Read 14 Oct 2026 · linkedin.com
Policy library
The product advertises 621 policy rules mapped across 19 compliance frameworks.Read 14 Oct 2026 · cloudgovernancepulse.com
Rating on G2
0.0 out of 5 from 0 reviews.Read 14 Oct 2026 · g2.com
Refund limitation
Paid subscriptions can be cancelled through Stripe, but unused time in a billing period is not partially refunded.Read 14 Oct 2026 · cloudgovernancepulse.com
Resource graph
CGPulse provides an interactive graph showing cloud resources and their compliance relationships.Read 14 Oct 2026 · cloudgovernancepulse.com
Scan duration
The documentation says a scan normally takes one to five minutes depending on resource count.Read 14 Oct 2026 · cloudgovernancepulse.com
Scan limits
The documentation lists 10 monthly scans for Free, 50 for Team, and unlimited scans for Business.Read 30 Sep 2026 · cloudgovernancepulse.com
Scanning access
Scanning uses read-only access and does not modify cloud resources.Read 30 Sep 2026 · cloudgovernancepulse.com
Scheduled scans
Recurring scans can run daily, weekly or monthly, with hourly scheduling on Business.Read 14 Oct 2026 · cloudgovernancepulse.com
SDKs and extensibility
The published integration surface consists of REST endpoints, a Scalar API reference, MCP tools, webhooks and external Cosmos DB synchronization; no SDK is listed.Read 14 Oct 2026 · cloudgovernancepulse.com
Security controls
The privacy policy states that CGPulse uses TLS 1.2 or newer, encryption at rest, tenant isolation, role-based access control and regular security reviews.Read 14 Oct 2026 · cloudgovernancepulse.com
Security heatmap
A heatmap summarizes compliance scores across subscriptions and resource types.Read 14 Oct 2026 · cloudgovernancepulse.com
Team collaboration
Teams can invite members, share policies within a tenant and track who fixed findings.Read 14 Oct 2026 · cloudgovernancepulse.com

Plans and prices

Free Free €0/mo 2 cloud accounts · 10 scans/month · 1 tracked initiative · 5 auto-fixes/month · watermarked PDF reports Read 30 Sep 2026 · cloudgovernancepulse.com
Free Free 2 cloud accounts · 10 scans/month · 1 tracked initiative · 5 auto-fixes/month · watermarked PDF reports · 621 built-in rules Read 14 Oct 2026 · cloudgovernancepulse.com
Team €99 a month €99/mo 10 cloud accounts · Unlimited scans · 5 tracked initiatives · 50 auto-fixes/month · 7-day free trial Read 30 Sep 2026 · cloudgovernancepulse.com
Team €99 a month monthly subscription with automatic renewal 10 cloud accounts · unlimited scans · 5 tracked initiatives · 3 custom initiatives + 10 rules · 50 auto-fixes/month · daily/weekly/monthly schedules · IaC downloads · clean PDF reports · AI compliance summary · read-only REST API with 1 key Read 14 Oct 2026 · cloudgovernancepulse.com
Business €299 a month €299/mo Unlimited cloud accounts, scans, and auto-fixes · Hourly scans · Full REST API · MCP server · 365-day audit log · 7-day free trial Read 30 Sep 2026 · cloudgovernancepulse.com
Business €299 a month monthly subscription with automatic renewal unlimited cloud accounts · unlimited scans and auto-fixes · unlimited initiatives and rules · hourly schedules · full REST API with 20 keys · MCP server · webhooks · state export · bring your own database · 365-day audit log · priority support Read 14 Oct 2026 · cloudgovernancepulse.com

Every CGPulse plan and price →

Strong points and limits

Strong points

  • Lists 621 policy rules across 19 frameworks.
  • Read-only scans do not modify cloud resources.
  • Generates Terraform, Bicep and CLI remediation templates.
  • Supports custom rules through a YAML editor.

Limits

  • CGPulse is not a certified compliance audit.
  • Free plan allows two cloud accounts.
  • Free plan is limited to 10 scans monthly.
  • Team and Business trials last seven days.

Who it suits

It suits cloud security and compliance teams, GRC managers, DevOps and platform engineers, and CTOs or VPs of Engineering working with Azure or AWS. Its read-only scans may suit teams that want to review cloud posture before applying fixes.

CGPulse in depth

Read the full write-up

Overview

CGPulse is a cloud posture tool for checking Azure and AWS resources against security and compliance policies. It is best suited to teams that want repeatable assessments and a review step before fixes are applied. Its scope is posture assessment, not a certified compliance audit.

Key features

Coverage spans 621 policy rules across 19 frameworks, including Azure, AWS and cross-cloud rules. That gives teams a broad basis for recurring checks, while the framework count should not be mistaken for audit certification. Scans use read-only access, so assessment does not alter cloud resources.

Users can apply supported remediation after reviewing it; dangerous fixes require a warning and confirmation. This balances a path from finding to action with a safeguard against unintended changes. Terraform, Bicep and CLI remediation templates are useful to engineering teams that want to carry fixes into infrastructure workflows. Drift detection and a YAML editor for custom compliance rules add room to monitor and adapt policies.

A REST API and MCP server connect CGPulse to AI assistants including Claude and Copilot. Business includes the full REST API and MCP server, so teams needing those integrations should account for the tier boundary. Security documentation describes EU North Europe storage in Azure Cosmos DB, encryption at rest and tenant isolation through per-tenant partition keys. Vulnerability reports sent to [email protected] have a stated response commitment within 48 hours.

Pricing

PlanPriceWhat it includesFree€0/mo2 cloud accounts, 10 scans/month, 1 tracked initiative, 5 auto-fixes/month and watermarked PDF reports.Team€99/mo10 cloud accounts, unlimited scans, 5 tracked initiatives, 50 auto-fixes/month and a 7-day free trial.Business€299/moUnlimited cloud accounts, scans and auto-fixes; hourly scans; full REST API; MCP server; 365-day audit log and a 7-day free trial.Free is a practical fit for a small environment or initial evaluation, but the two-account and ten-scan monthly ceilings, one initiative and five monthly auto-fixes constrain ongoing use. Team removes the scan ceiling and raises account and remediation capacity, making it the more suitable paid entry point for teams with several accounts; it still caps accounts at 10 and auto-fixes at 50 per month. Business is for broader estates or workflows that need hourly scans, unlimited capacity, the full API and MCP server, or a year-long audit log. Paid plans are billed monthly at the stated prices, and both offer a 7-day trial.

Platforms

CGPulse is available through web and API access. Its cloud coverage spans Azure and AWS, with rules that also cover cross-cloud environments.

Who it's for

Cloud security engineers can use it for recurring posture checks and reviewed remediation; compliance officers and GRC managers can track policy coverage, provided they treat results as assessment rather than certified audit evidence. DevOps and platform engineers may value custom YAML policies and infrastructure templates. CTOs and VPs of Engineering can use the account and scan tiers to match the service to the scale of their cloud estate.

Pros and cons

Pro: Broad coverage across 621 rules and 19 frameworks helps consolidate policy checks across Azure, AWS and cross-cloud environments.

Pro: Read-only scanning plus review and confirmation before risky fixes limits operational exposure during assessment and remediation.

Pro: Custom YAML rules, drift detection and Terraform, Bicep and CLI templates support engineering-specific workflows.

Con: Free is capped at two cloud accounts, ten monthly scans and five monthly auto-fixes, which limits its usefulness for larger or frequent assessments.

Con: The product is not a certified compliance audit, so organizations needing audit certification should look elsewhere for that requirement.

Alternatives

Browse Cloud Governance Software for more options in the category. Choose Powerpipe if an open-source tool and Linux, macOS, Windows, web or self-hosted platforms better fit your setup. Kyverno is an open-source option for API, Linux, macOS, Windows or self-hosted environments. OmniGCloud may fit teams looking for a freemium service with a free single-workspace plan and a $39/ seat / mo Team plan. CloudBolt offers a free CMP tier with core capabilities for up to 100 resources. Kubewarden is another free option for Linux, macOS, Windows or self-hosted environments. Cloud Custodian is a free, open-source Apache 2.0 option for Linux, macOS, Windows or self-hosted use. AWS Control Tower may suit users who want an AWS service with no additional Control Tower charge, while underlying AWS services are billed by usage. emma Governance is worth considering if a paid service with tailored custom pricing and a free trial is a better match.

Verdict

Choose CGPulse if your team needs Azure and AWS posture checks, adaptable policies and a reviewable route from findings to remediation. Its strongest case is the combination of broad rule coverage with controls around changes; its clearest limitation is that assessment is not certified audit output. Check account and monthly auto-fix limits against your estate before choosing Free or Team.

Verdict

CGPulse offers multi-cloud posture scanning, reviewable remediation and custom policy support. Treat its results as posture assessment rather than certified audit output, and check account and scan limits for the plan you choose.

Where Specifiction places it

Alternatives to CGPulseAll alternatives →