Stacklet
About
Stacklet is a cloud governance platform built on the open-source Cloud Custodian project that helps organizations autonomously discover, fix, and prevent cloud waste, security misconfigurations, and compliance violations across multi-cloud environments. The platform uses agentic AI and policy-as-code to reduce cloud bills by up to 50%, cut governance reporting time by 80%, and enforce guardrails across AWS, Azure, Google Cloud, and Tencent Cloud. Stacklet was co-founded by the creators of Cloud ...
Details
Website
stacklet.ioOfferings
10 active
VenSearch Intelligence
Ideal Customer
- Stacklet explicitly targets Global 2000 enterprises with large, dynamic, multi-cloud environments where traditional governance tools fall short.
- Their sweet spot is large enterprises with significant cloud footprints — typically managing hundreds of cloud accounts across AWS, Azure, and GCP — whose FinOps, cloud engineering, and security teams need to automate policy enforcement at scale without slowing developer velocity.
Key Differentiators
- Stacklet's primary differentiator is that it was founded by and is led by the original creators of Cloud Custodian, the de facto open-source standard for cloud governance as code with over 100 million downloads and thousands of enterprise adopters globally.
- This gives Stacklet unmatched depth in its policy engine, broadest multi-cloud resource coverage (500+ resource types, 1,500+ policies), and an open-core model that continuously benefits from a community of 450+ developers.
Industries Served
- Stacklet primarily targets large-scale enterprise cloud consumers across a broad range of industries.
- Named customers and sectors include financial services (Truist, Blackbaud, Aegon), video gaming and entertainment (EA, Riot Games, Epic Games), enterprise software and technology (Infoblox, Avalara, CyberArk, Epsilon), education and testing services (Educational Testing Services), and life sciences.
Service Coverage
- Stacklet is headquartered in Arlington, Virginia, and operates as a primarily remote-first company with employees distributed across four continents, including North America, Europe, and Oceania.
- The platform is delivered as SaaS and supports multi-cloud environments globally, covering AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, Tencent Cloud, Kubernetes, and OpenStack.
Partnerships
- Stacklet maintains a strong integration ecosystem with major cloud providers and enterprise IT tools.
- The platform is available through the AWS Marketplace and supports deep integrations with AWS services including AWS Security Hub, AWS CloudTrail, AWS Config, and Amazon GuardDuty, as well as native support for Microsoft Azure and Google Cloud Platform.
Company Size & Ownership
- Stacklet was founded in 2019–2020 by Travis Stanfield (CEO) and Kapil Thangavelu (CTO), both former Capital One engineers and co-creators of the Cloud Custodian open-source project.
- The company currently employs approximately 32–41 people, consistent across multiple sources as of mid-2026.
Compliance & Certifications
- Stacklet's platform is designed to help customers achieve and enforce compliance with major frameworks including CIS Benchmarks, NIST CSF, PCI-DSS, and HIPAA across multi-cloud environments, with over 1,500 out-of-the-box policies aligned to these standards.
- No public documentation was found confirming that Stacklet itself holds SOC 2, ISO 27001, FedRAMP, or other vendor-side security certifications, though these are commonly required by its enterprise customers and the platform is specifically built to help them meet such requirements.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
10 offeringsAssetDB
A real-time cloud asset inventory database that provides comprehensive visibility into all cloud resources, costs, and configurations across multi-cloud environments. It delivers intelligence through a SQL-based query experience described as a select-star-from-cloud interface, and also supports natural language queries via a generative AI assistant. AssetDB is designed to cut governance reporting time by up to 80% and supports 100% tagging compliance through automated enforcement policies.
Cloud AI Infrastructure Governance
A FinOps governance solution specifically for AI infrastructure that discovers, fixes, and prevents waste across GPUs, foundation models, tokens, custom models, data storage, and networking layers. It provides real-time visibility into AI spend, enforces guardrails at provisioning and runtime, and uses policy-driven workflows and agentic AI to stop runaway jobs, right-size GPUs, retire idle endpoints, and clean up untagged profiles. The solution supports AWS services like Bedrock and SageMaker, Google Cloud Vertex AI, and Azure AI.
Cloud Custodian
An open-source, stateless rules engine for cloud governance as code that enables organizations to define and enforce policies across AWS, Azure, Google Cloud, Oracle Cloud Infrastructure, Tencent Cloud, Kubernetes, and OpenStack using simple YAML configuration files. It supports over 500 cloud resource types and hundreds of built-in actions including tagging, modifying resource attributes, deleting resources, sending notifications, and triggering serverless functions. Cloud Custodian is a member of the Cloud Native Computing Foundation (CNCF) and is maintained by a community of over 450 developers.
FinOps & Cloud Cost Management
A solution focused on continuous cloud usage optimization that helps organizations cut cloud bills by up to 50% through instant insights across hundreds of resource types and engineer-centric workflows. It surfaces waste and optimization opportunities continuously, routes findings to the right teams, and deploys proactive guardrails across infrastructure to prevent waste from returning. The solution includes advanced FinOps capabilities, autonomous savings workflows, and out-of-the-box policies for cost optimization.
IaC Governance
A shift-left governance capability that enables DevOps and development teams to detect and prevent cloud misconfigurations earlier in CI/CD pipelines. It uses the same single policy language for both Infrastructure as Code and runtime governance, so teams do not need to learn a separate tool or language. This prevents costly and risky misconfigurations from reaching production by enforcing guardrails at the build stage.
Jun0
An AI-driven assistant for cloud governance embedded within the Stacklet platform that allows users to query cloud asset data and create or validate governance policies using natural language. Jun0 is designed to speed up governance tasks, reporting, and initiatives by translating intuitive language prompts into actionable insights and policy definitions. It serves as an agentic AI layer that enforces behavior through Policy as Code to prevent issues and optimize resources at creation and runtime.
Security & Compliance
A cloud compliance and security solution that continuously enforces security policies and compliance frameworks including CIS, NIST CSF, PCI-DSS, and HIPAA across multi-cloud environments. It supports critical security use cases such as Golden AMI enforcement, encryption at rest, ClickOps prevention, network reachability control, and IAM best practices, covering hundreds of resource types with over 1,500 up-to-date policies. Automated remediation workflows and guardrails enable teams to detect, fix, and prevent misconfigurations without manual intervention.
Stacklet for Cloud Custodian Users
An enterprise-grade managed and automated experience built on top of the open-source Cloud Custodian project, designed to double staff productivity and enhance visibility for existing Cloud Custodian users. It eliminates the operational overhead of hosting, monitoring, troubleshooting, and maintaining Cloud Custodian, while adding features like a centralized console, one-click policy deployment, automated version upgrades, and advanced third-party integrations with Slack, Jira, ServiceNow, and Microsoft Teams. Existing Cloud Custodian policies can be imported and managed within the Stacklet platform using the same policy language.
Stacklet Platform
A governance-as-code platform built on Cloud Custodian that helps organizations eliminate cloud waste, inefficiencies, and security risks across multi-cloud environments. It provides automated policy lifecycle management, multi-step remediation workflows, native integrations with Slack, Jira, and ServiceNow, and over 1,500 out-of-the-box policies covering compliance frameworks such as NIST CSF, PCI-DSS, HIPAA, and CIS Benchmarks. The platform is offered as an annual subscription license priced based on average billable cloud resources.
Token Custodian
A control plane for token attribution and governance, described as a new product for managing AI token spend. It is positioned as a solution for governing token consumption tied to foundation model usage, enabling organizations to meter token spend per profile, attribute costs to owners, and suspend profiles that cross usage baselines before runaway jobs burn budgets.
Considering Stacklet?
Our team will work with you to determine if Stacklet is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.