- Home
- Cloud Infrastructure Entitlement Management Software
- Sonrai Cloud Permissions Firewall
Sonrai Cloud Permissions Firewall
New York, United States; New Brunswick, Canada
What it is
Sonrai Cloud Permissions Firewall monitors privileged permissions across AWS, Azure, and GCP. It covers human users, service principals, agents, and managed identities, removing sensitive permissions that are no longer used, quarantining inactive role assignments, and enforcing default deny. Permissions on Demand sends restricted access requests through ChatOps approval and updates policy afterward. The web service gathers metadata with read-only access at the top cloud level and does not install agents. Organization-level onboarding brings in every account, subscription, or project, while controls can be deployed selectively. Sonrai describes unified enforcement and one audit trail across the three clouds. Pricing options include ChatOps integration with Slack, Teams, and email, plus enterprise SSO and other access controls. Plans list 10-50 Accounts at $150 a month, Startup Pricing at $15,000 a year, and custom pricing for 50+ accounts. A 14-day trial requires a business email.
For and against
For
- Supports AWS, Azure, and GCP
- Removes unused sensitive permissions
- Default-deny and identity quarantine controls
- ChatOps approval for restricted access
- 14-day self-guided or assisted trial
Against
- No free plan
- 50+ account pricing requires contacting Sonrai
- Organization onboarding imports every account or project
- Top-level read-only cloud access is required
The verdict
Sonrai focuses on reducing excessive cloud permissions while preserving approval and audit workflows across three clouds. Account-based pricing, organization-level onboarding, and required read-only access should be reviewed before deployment.
Who it suits
It suits companies running workloads on AWS, Azure, and Google Cloud that need identity, access, and permissions security. Security teams wanting read-only deployment access and selective controls may find it relevant.
Plans and prices
10-50 Accounts
10-50 accounts · Across AWS, Azure, GCP
Read 29 Sep 2026 · sonraisecurity.com
Startup Pricing
For small cloud footprints
Read 29 Sep 2026 · sonraisecurity.com
50+ Accounts
50+ accounts · Enterprise and custom pricing
Read 29 Sep 2026 · sonraisecurity.com
On the record
- Cloud coverage
- Sonrai describes one platform for AWS, Azure, and GCP with unified enforcement and a single audit trail.sonraisecurity.com · read 29 Sep 2026
- Contract terms
- The pricing page says monthly contracts have monthly payments and can be cancelled at any time with 30 days’ notice.sonraisecurity.com · read 29 Sep 2026
- Deployment access
- The product requires read-only access at the top level of the cloud and gathers metadata without installing agents in the cloud.sonraisecurity.com · read 29 Sep 2026
- Enterprise features
- Pricing options include enterprise SSO, just-in-time access, third-party access lockdown, unused service and region disabling, identity quarantine, and removal of unused permissions.sonraisecurity.com · read 29 Sep 2026
- Identity coverage
- It covers human users, service principals, agents, and managed identities.sonraisecurity.com · read 29 Sep 2026
- Integrations
- Pricing options include ChatOps integration with Slack, Teams, and email.sonraisecurity.com · read 29 Sep 2026
- Intended users
- Sonrai describes its service as identity, access, and permissions security for companies running workloads on AWS, Azure, and Google Cloud.sonraisecurity.com · read 29 Sep 2026
- Just-in-time access
- Permissions on Demand routes restricted access requests through ChatOps approval and updates the policy.sonraisecurity.com · read 29 Sep 2026
- Onboarding scope
- Onboarding is required at the AWS, Azure, or GCP organization level, which brings in every account, subscription, or project, while controls can be deployed selectively.sonraisecurity.com · read 29 Sep 2026
- Purpose
- The firewall monitors privileged permissions used by identities in Azure and removes unused sensitive permissions, quarantines inactive role assignments, and enforces default deny.sonraisecurity.com · read 29 Sep 2026
- Security
- Sonrai states that it is a SOC 2 Type 2 compliant organization with internal security controls, training, and monitoring.sonraisecurity.com · read 29 Sep 2026
- Support
- Support is offered via email, phone, and chat.sonraisecurity.com · read 29 Sep 2026
- Trial
- The free trial lasts 14 days, offers self-guided or assisted onboarding, and requires a business email.sonraisecurity.com · read 29 Sep 2026
