Skip to content
SPECIFICTION
Get listed

Sonrai Cloud Permissions Firewall

sonraisecurity.com

From $150/mo Free trial Web
Visit sonraisecurity.com
Spec score 7.5 #10 of 25 in Cloud Infrastructure Entitlement Management Software

What it is

Sonrai Cloud Permissions Firewall monitors privileged permissions for identities across AWS, Azure and GCP. It covers human users, service principals, agents and managed identities, removing sensitive permissions that are no longer used, quarantining inactive role assignments and enforcing default deny. Permissions on Demand routes restricted-access requests through approval in ChatOps and updates the policy afterward. The web service uses read-only, top-level cloud access to collect metadata and does not install cloud agents. Onboarding occurs at the AWS, Azure or GCP organisation level, bringing in every account, subscription or project; controls can then be applied selectively. Sonrai describes unified enforcement and one audit trail across the three clouds. Available options include integrations with Slack, Teams and email, enterprise SSO, just-in-time access, third-party access lockdown, identity quarantine and other remediation controls. Support is provided by email, phone and chat. A 14-day trial requires a business email. Plans list $150 a month for 10–50 accounts and $15,000 a year for startup pricing; 50+ accounts use custom pricing.

Spec sheet

Purpose
The firewall monitors privileged permissions used by identities in Azure and removes unused sensitive permissions, quarantines inactive role assignments, and enforces default deny.Read 29 Sep 2026 · sonraisecurity.com
Intended users
Sonrai describes its service as identity, access, and permissions security for companies running workloads on AWS, Azure, and Google Cloud.Read 29 Sep 2026 · sonraisecurity.com
Trial
The free trial lasts 14 days, offers self-guided or assisted onboarding, and requires a business email.Read 29 Sep 2026 · sonraisecurity.com
Integrations
Pricing options include ChatOps integration with Slack, Teams, and email.Read 29 Sep 2026 · sonraisecurity.com
Security
Sonrai states that it is a SOC 2 Type 2 compliant organization with internal security controls, training, and monitoring.Read 29 Sep 2026 · sonraisecurity.com
Support
Support is offered via email, phone, and chat.Read 29 Sep 2026 · sonraisecurity.com
Headquarters
New York, United States; New Brunswick, CanadaRead 23 Sep 2026 · sonraisecurity.com
Cloud coverage
Sonrai describes one platform for AWS, Azure, and GCP with unified enforcement and a single audit trail.Read 29 Sep 2026 · sonraisecurity.com
Contract terms
The pricing page says monthly contracts have monthly payments and can be cancelled at any time with 30 days’ notice.Read 29 Sep 2026 · sonraisecurity.com
Deployment access
The product requires read-only access at the top level of the cloud and gathers metadata without installing agents in the cloud.Read 29 Sep 2026 · sonraisecurity.com
Enterprise features
Pricing options include enterprise SSO, just-in-time access, third-party access lockdown, unused service and region disabling, identity quarantine, and removal of unused permissions.Read 29 Sep 2026 · sonraisecurity.com
Identity coverage
It covers human users, service principals, agents, and managed identities.Read 29 Sep 2026 · sonraisecurity.com
Just-in-time access
Permissions on Demand routes restricted access requests through ChatOps approval and updates the policy.Read 29 Sep 2026 · sonraisecurity.com
Onboarding scope
Onboarding is required at the AWS, Azure, or GCP organization level, which brings in every account, subscription, or project, while controls can be deployed selectively.Read 29 Sep 2026 · sonraisecurity.com

Plans and prices

10-50 Accounts $150 a month $150 / account / month 10-50 accounts · Across AWS, Azure, GCP Read 29 Sep 2026 · sonraisecurity.com
Startup Pricing $15,000 a year $15k / year minimum For small cloud footprints Read 29 Sep 2026 · sonraisecurity.com
50+ Accounts Priced on request Contact us 50+ accounts · Enterprise and custom pricing Read 29 Sep 2026 · sonraisecurity.com

Every Sonrai Cloud Permissions Firewall plan and price →

Strong points and limits

Strong points

  • Supports AWS, Azure and GCP
  • Covers users, services, agents and managed identities
  • Automated permission remediation
  • Read-only metadata collection without cloud agents
  • 14-day self-guided or assisted trial

Limits

  • No free plan
  • Onboarding imports every organisation account or project
  • 50+ account pricing is custom
  • Trial requires a business email

Who it suits

It is intended for companies running workloads on AWS, Azure and Google Cloud that need identity, access and permissions security. Teams comfortable with organisation-level onboarding can use selective controls afterward.

Verdict

Sonrai focuses on reducing unused and risky cloud permissions while preserving approval workflows and audit visibility. Its deployment model is broad at onboarding, and larger environments require a custom quote.

Where Specifiction places it

Alternatives to Sonrai Cloud Permissions FirewallAll alternatives →