Discovery + 3 rotations/month. See everything AND start automating.
- Assets Discovery scanning
- 3 rotations/month
- Compliance dashboard
- Email & webhook alerts
- Up to 4 subscriptions
Full automation with rotation, multi-cloud sync, and SSO.
- Everything in Starter
- Unlimited automated rotation
- Multi-cloud sync (AWS/GCP)
- SSO (OIDC + Azure AD; SAML on roadmap) & B2C scanning
- Auditor-ready evidence packages for HIPAA, PCI-DSS, SOC 2, ISO 27001, NIST 800-53, CIS Azure*
- Up to 20 Azure subscriptions
- Priority support (2 business days)
* CertifyClouds is an evidence aggregator, not a certified compliance product. Disclaimer →
Start Free TrialFor larger Azure estates needing custom terms, guided onboarding, and a signed support schedule.
- Everything in Pro
- Multi-tenant: cross-tenant inventory & rotation across all your Azure AD tenants
- Read-only MCP Connector for approved hosted AI clients
- Custom contract (MSA, DPA, SLA)
- Dedicated escalation path
- 24/7 P1 escalation, per signed support agreement
- Implementation & onboarding assistance
- Security questionnaire and procurement support
ROI Calculator
See how much you could save with CertifyClouds Pro
Infrastructure cost (~£35/month) runs in your own Azure subscription
What Are You Actually Replacing?
Discovery. Rotation. Compliance. Multi-cloud sync. No tool does all of this for Azure secrets. Here's what teams cobble together instead:
| Current Approach | The Problem | CertifyClouds |
|---|---|---|
| Spreadsheets & Calendar Reminders | Manual, error-prone, doesn't scale. Someone leaves and tribal knowledge goes with them. | ✓ Auto-discovery across all vaults |
| Azure Monitor Alerts | Complex setup per vault. No unified view. Doesn't track App Registrations. | ✓ Single dashboard, all subscriptions |
| Custom PowerShell / Azure Functions | Maintenance burden. Breaks silently. No UI for non-engineers. | ✓ Production-ready, maintained for you |
| Manual Azure Portal Checks | Click through 50+ vaults? Every week? Across multiple subscriptions? | ✓ Scheduled scans, instant reports |
| "We'll Deal With It When It Expires" | 3 AM incident. Production down. Everyone on a call. Again. | ✓ 30/60/90 day warnings, auto-rotation |
CertifyClouds Plans Comparison
| Feature | Starter | Pro | Enterprise |
|---|---|---|---|
| Assets Discovery (scanning) | ✓ | ✓ | ✓ |
| Compliance dashboard | ✓ | ✓ | ✓ |
| Email & webhook alerts | ✓ | ✓ | ✓ |
| Audit trail | ✓ | ✓ | ✓ |
| Secret rotation | 3/month | Unlimited | Unlimited |
| Multi-cloud sync (AWS/GCP) | - | ✓ | ✓ |
| Asset Dependencies | - | ✓ | ✓ |
| SSO (OIDC + Azure AD; SAML on roadmap) | - | ✓ | ✓ |
| B2C & Entra External ID tenant scanning | - | ✓ | ✓ |
| User management | - | ✓ | ✓ |
| Multi-tenant (cross-tenant inventory & rotation) | - | - | ✓ |
| MCP Connector (read-only) | - | - | ✓ |
| Azure subscriptions | Up to 4 | Up to 20 | 21+ / agreed scope |
| Support response | 4 UK business days | 2 UK business days | 24/7 P1 escalation (per signed agreement) |
| Dedicated escalation path | - | - | ✓ |
| Custom contract (MSA, DPA, SLA) | - | - | ✓ |
Billing FAQ
We accept bank transfer and major credit cards. Enterprise customers can arrange invoicing with NET-30 terms.
Monthly plans can be cancelled anytime, effective at the end of the billing period. Annual plans are 12-month commitments with 2 months free (pay for 10 months). Annual plans auto-renew unless cancelled 30 days before expiry. Enterprise customers receive custom contract terms including MSA, DPA, and SLA documentation.
Email [email protected] to cancel. Monthly cancellations are effective at end of billing period. Annual plans continue until expiry with no partial refunds.
Upgrades are prorated and take effect immediately. Downgrades take effect at your next renewal date.
Yes! Every plan starts with a free 30-day trial with all features enabled. No credit card required to start.