Vipr: Discover. Govern. Secure.

Find and close the permissions nobody revoked

Vipr is VIPP, Visibility into Identity Permissions & Posture: a purpose-built multicloud CIEM platform that discovers every identity across your clouds, scores its risk transparently, remediates the excess and governs what remains.

The problem Vipr solves

Enterprises have spent a decade fortifying networks and endpoints. Meanwhile, the permissions attached to every human and machine identity across every cloud have grown unchecked. Most organisations cannot answer a basic question about any given identity: what is the gap between the permissions it holds and the permissions it actually uses?

Without that answer, right-sizing is guesswork, remediation is reactive and audit responses become exercises in reconstruction. Vipr was built for the specific discipline of continuous, cross-cloud permission creep governance, as a standalone product and not a module buried inside a larger security suite. Read the full argument in Every Breach Starts with a Permission.

Four pillars

  1. Discover

    Continuous enumeration of every identity, role assignment and permission across Azure, AWS and GCP, human and machine, cross-referenced against actual usage telemetry.

  2. Score

    Every identity receives a Permission Creep Index: a transparent, multi-factor score that quantifies the gap between granted and used permissions. The same inputs always produce the same output.

  3. Remediate

    Context-aware right-sizing recommendations based on observed usage, automated removal workflows with approval gates and rollback, and just-in-time access elevation with time-bound grants and a full audit trail.

  4. Govern

    Identity posture mapped against seven compliance frameworks: SOC 2, ISO 27001, PCI-DSS, NIST 800-53, GDPR, POPIA and CIS Benchmarks, with continuous drift detection and on-demand executive briefings.

What sets it apart

Scoring an auditor can verify

The Permission Creep Index uses a published multi-factor formula. Every variable is documented and every weight is visible, so boards can track it and auditors can verify it independently.

Your data never leaves your tenant

Vipr deploys into your own tenant, in your region, behind your network controls. Scores, alerts, audit logs and compliance reports are generated and stored inside your tenant boundary.

Zero stored credentials

Managed Identity for Azure and Workload Identity Federation (OIDC) for AWS and GCP. No API keys and no stored secrets for any hyperscaler.

Procured on its own

A standalone CIEM platform. You do not have to buy a full security suite to get identity governance.

Investigation in plain language

An embedded AI investigation engine, running on a model hosted inside your own tenant, answers questions such as the full blast radius of a principal and drafts a remediation plan.

Private by default

Every service is deployed with private endpoints inside a locked virtual network and the whole platform deploys from code, so it is auditable, version-controlled and reproducible.

Coverage

Deep integration with the three major clouds at launch, with a growing connector library.

  • Azure, AWS and GCP at launch.
  • Connector library expanding to Kubernetes, Okta, GitHub, Salesforce, ServiceNow, Snowflake and Databricks.
  • Region-locked deployment to meet data residency requirements in the EU, US, Middle East, Africa and Asia-Pacific.
  • Full just-in-time workflow built in: request, approve, grant and auto-revoke.

Let's reshape the future of enterprise technology

Whether you are modernising infrastructure, scaling operations or embedding intelligence into your platforms, Vaxowave is ready to walk with you.

Request a demonstration