Everything in Prismara Cloud
Prismara Cloud gives you virtual machines, Kubernetes, networking, storage and managed databases on Austrian sovereign infrastructure. SovSec runs the whole service layer itself: console, API, policy, keys, audit and billing. Manage it the way your team already works, from the console, the CLI or OpenTofu and Terraform.
What you get
Core services
Virtual machines, Kubernetes, virtual networks, load balancers, object storage and managed PostgreSQL.
Infrastructure as code
An OpenTofu and Terraform provider covers resource groups, every resource type in the catalogue, Vault keys, budgets, service principals, access keys and webhooks, and imports existing resources by ID.
Policy guardrails
Rules such as required cost-centre tags, Austrian regions only, customer-managed keys for production data and no public SSH, checked before anything is created.
Keys and automation
A built-in key vault, service principals and access keys for automation, and budgets with alerts.
Signed webhooks
Events are delivered as signed Standard Webhooks, written in the same transaction as the audit record, so what you receive always matches what happened.
Billing that adds up
Usage is reconciled daily with the infrastructure supplier, so there are no orphaned or unbilled resources, and monthly invoices come through Prismara ERP.
Secure by design
SovSec owns the service layer
The infrastructure supplier is a sub-processor. Console, identity, policy, keys and audit stay with SovSec.
Fail closed
Requests are denied unless a policy allows them, and every denial is audited.
Tenant isolation
PostgreSQL row-level security separates every tenant's resources.
Safe webhook delivery
Webhook delivery is protected against server-side request forgery, so it cannot be turned against internal systems.
See Prismara Cloud for your team
Tell us what you run today and we'll show you the move across.