Docs Getting started
Getting started
What is Kumo.io?
Kumo.io reads your cloud with read-only access, builds a map of every resource and how they connect, keeps each snapshot so you can see how your estate changes, and draws the architecture diagrams for you.
The short version
You connect a cloud account. Kumo.io reads it, never changes it, and gives you:
- An inventory of every resource it found, searchable and filterable, with the connections between resources.
- A history. Each sync seals a snapshot of the whole estate, called a revision. Revisions are kept, so you can go back and compare them.
- Environments. Kumo.io groups what it found into environments, such as production and staging, so you can look at one at a time.
- Diagrams that draw themselves. After each sync, Kumo.io generates architecture diagrams from what it actually observed, not from what someone remembered to document.
What Kumo.io reads
Kumo.io connects to four providers:
| Provider | How Kumo.io connects |
|---|---|
| Amazon Web Services | A read-only cross-account IAM role (recommended) or an access key. |
| Microsoft Azure | A service principal with Reader on the subscription. |
| Google Cloud | A read-only service-account key, with the Cloud Asset API enabled. |
| Kubernetes | A kubeconfig for one cluster. |
Access is read-only. For AWS, Kumo.io publishes the exact list of read actions it uses, so your security team can review it.
You decide when Kumo.io reads your cloud: a sync runs when you start one, from the web app, the API or the command line. Read How syncing works.
How Kumo.io is organised
Everything in Kumo.io hangs off six nouns:
- An account is your organisation: its members, plan and billing.
- A workspace is the slice of your estate a team looks at.
- A source is one connection to a cloud provider that feeds a workspace.
- A revision is a sealed snapshot of a workspace, made by a sync.
- An environment is a group of resources that belong together, such as production.
- A view is a diagram or other picture of an environment.
The six nouns explains each one.
What you can do with it
Depending on your plan, Kumo.io also lets you:
- See what changed between syncs, and compare two revisions in detail.
- Understand cost: what your infrastructure costs, and where the waste is.
- Get told when something important changes, with alerts by email, Slack or webhook.
- Produce reports for your team or an auditor.
- Share and export diagrams and data, as images, PDF, Visio, CSV or JSON.
- Automate with the API and the
kumocommand line, or let an AI assistant read your graph through Kumo.io's MCP server.
Every plan includes syncing and diagrams. During a trial, diagrams are shown blurred and can't be exported or shared. The plans and what they include are on Plans and limits.
Where Kumo.io runs
Use Kumo.io at kumo.io, where we run it for you, or run it yourself on your own machine or in your own cloud. The product is the same; who operates it differs. Read Hosted or self-hosted?.
Get started
- Create your account on kumo.io.
- Try Kumo.io with sample data, with nothing to connect.
- Run Kumo.io on your laptop.