Enterprise-grade cloud cost management
SSO, RBAC, approval workflows, and audit trails: the security and governance controls your organization requires, built into every layer.
Built for security-first organizations
The access, approval and audit controls a security review asks about.
SAML SSO
SAML 2.0 single sign-on with your identity provider, such as Okta or Microsoft Entra ID. Auto-provisioning and routing by verified email domain included.
RBAC with per-account access
Admin, member and viewer roles, with access limited to the cloud accounts each person should see.
Approval workflows
A recommendation sent for approval waits for an admin to approve or reject it, and every request and decision is recorded in the audit log.
Comprehensive audit trail
Logins, recommendation actions and admin changes are logged with timestamp, user and IP address, and can be exported as CSV.
AES-256 credential encryption
Stored cloud credentials are encrypted at rest with AES-256-GCM, with the key kept apart from the database, and decrypted in memory only while a sync runs.
Two-factor authentication
Every password sign-in asks for a second factor: a TOTP authenticator app or a passkey. SSO sign-ins rely on your identity provider.
Single sign-on, zero friction
Connect your corporate identity provider and your team signs in with existing credentials. No separate passwords to manage, and with auto-provisioning on, no accounts to create by hand.
- Okta, Microsoft Entra ID or any SAML 2.0 identity provider
- Auto-provisioning with configurable default role
- Email domain detection for automatic SSO routing
- Optionally require SSO for everyone on the verified domain
Security controls
- AES-256-GCM encryption for all credentials at rest
- TLS 1.2+ enforced for all data in transit
- Read-only cloud access: Xplorr cannot modify your infrastructure
- Short-lived JWT sessions with automatic token rotation
- Rate limiting and account lockout on all authentication endpoints
- Encrypted daily database backups
Compliance readiness
Current security posture and upcoming certifications.
| Control | Status |
|---|---|
| AES-256 encryption at rest | Available |
| Comprehensive audit logs | Available |
| Role-based access control | Available |
| Two-factor authentication (TOTP, WebAuthn) | Available |
| SAML SSO | Available |
| SOC 2 Type II | Coming soon |
| HIPAA BAA | Coming soon |
| ISO 27001 | Coming soon |
Ready for enterprise?
Talk to our team about SSO, RBAC, custom contracts, and dedicated support. Xplorr is built and supported by CloudDrove, a cloud and DevOps engineering partner, so onboarding and implementation help come from engineers who run cloud platforms for a living.