Stop guessing your
cloud IP space
The purpose-built tool to discover, deconflict, and reserve IP space across AWS, Azure, and Google Cloud — including static and future reservations — all read-only, without ever touching your infrastructure.
Read-only access · No agents · No write permissions · Revocable in 60 seconds
10.40.0.0/16 62% used 10.20.0.0/16 38% used 172.16.0.0/16 81% used Read-only across every major cloud · EU-hosted · GDPR
7-day free trial · Setup in 5–10 minutes · No write permissions required
Sound familiar?
Managing cloud networks at scale
is harder than it should be
Accounts multiply, visibility doesn’t
Every team spins up new AWS accounts, Azure subscriptions, and GCP projects. Your real network map lives in a spreadsheet nobody trusts.
network-map-v7-FINAL.xlsx CIDR overlaps surface at the worst time
You find a conflicting range when routing breaks in production — or mid-incident on a cross-cloud VPN or peering at 2 a.m.
02:47 peering DOWN — overlap You don’t know you’re out of space until you are
IP exhaustion creeps up silently. The /16 that felt enormous three years ago is now almost gone — and nobody flagged it.
10.0.0.0/16 · 94% allocated FIG.02 — See it live
Watch a cross-cloud conflict
get caught the moment it appears
VNet IQ maps every network across your clouds and on-prem, then flags overlapping ranges in real time — so you see the conflict here, not in a 2 a.m. peering incident.
10.40.0.0/16 CONFLICT 10.40.8.0/21 CONFLICT 172.16.4.0/22 WARNING 10.12.0.0/20 CLEAR 192.168.0.0/16 CLEAR → suggested fix: re-IP azure · hub-vnet to 10.44.8.0/21
FIG.03 — What you get
Everything your network team needs.
Nothing it doesn’t.
A purpose-built read-only intelligence layer on top of your existing cloud networks — not another IPAM tool that tries to replace them.
Hierarchical IP pools & utilisation
Organise your whole address space into named pools — RFC-1918 roots down to individual /24s — and track utilisation at every level, down to the /29.
10.0.0.0/1662%10.1.0.0/2088%10.2.0.0/2234%One view for your whole IP estate.
Automatic multi-cloud discovery
Connect a read-only role per account, subscription, or project. We sync every VPC, VNet, subnet, and address space across AWS, Azure, and Google Cloud — on a schedule.
No manual inventory. Ever.
Real-time CIDR conflict detection
Overlapping ranges — across any cloud or your on-prem — are flagged the moment they appear. Acknowledge known conflicts and get clear before any deployment.
Catch problems at sync, not at 2 a.m.
Instant CIDR suggestions
Tell VNet IQ the prefix size you need. It scans your pools and recommends the safest, most contiguous free range — no spreadsheet hunting, no miscalculations.
Right-size every allocation, first time.
Static ranges & future reservations
Declare on-prem ranges and hold space for what’s coming next. Static CIDRs and future-dated reservations both count toward conflict detection — before a single resource ships.
Plan ahead without colliding with today.
Teams, roles & shared workspaces
Invite your network and platform teams into one workspace. Owner, editor, and viewer roles give each person exactly the right blast radius — no more, no less.
One source of truth, scoped per role.
Terraform provider + allocation API
Beta published on the Terraform RegistryAllocate CIDRs straight from your pipeline — declare them in Terraform or call the REST allocation API from CI/CD. Transactional and idempotent. Discovery and analysis stay fully read-only. Available on Pro Plus.
From plan to provisioned — no spreadsheet handoff.
FIG.04 — How it works
From zero to full network visibility
in under 10 minutes
Connect your clouds
Create a read-only role in each AWS account, Azure subscription, or GCP project and connect it. Minimum read permissions — never write access.
~5–10 min per connection
Discover your topology
Every VPC, VNet, subnet, and IP range syncs automatically. Conflicts are detected on the spot and the map stays current on a schedule.
a 200-network estate syncs in under 60s
Deconflict & plan
Review conflicts, organise IP pools, and get right-sized CIDR suggestions. Declare on-prem ranges and hold future reservations.
export to CSV for audits
Reserve & allocate
Allocate CIDRs from Terraform or the REST API — transactional and idempotent. Share live views with your team, scoped by role.
no extra seats to read
# carve a range from a reservation — in Terraform
resource "vnetiq_allocation" "app" {
organization_id = var.vnetiq_org
reservation_id = var.prod_block
prefix_len = 22
}
$ terraform apply
vnetiq_allocation.app: Creating...
vnetiq_allocation.app: Creation complete
cidr = "10.20.32.0/22"
status = "allocated"
# …or straight from CI via the REST API
$ curl -XPOST https://api.vnetiq.com/v1/orgs/$ORG/reservations/$RID/allocations \
-H "Authorization: Bearer $VNETIQ_API_TOKEN" \
-H "Idempotency-Key: $RUN_ID" -d '{"prefix_len":22}'
{ "cidr": "10.20.32.0/22", "status": "allocated" }Discovery stays read-only. Allocation writes only to VNet IQ — never to your cloud.
FIG.05 — Pricing
Transparent pricing. No surprises.
Every workspace starts with a 7-day full-feature trial. Pick a paid plan to keep everything; otherwise you stay on Free with conflict detection and pool hierarchy. Annual plans save 2 months.
Free
Evaluate VNet IQ with real infrastructure.
Free forever
Up to 50 networks
1 cloud connection
- 7-day full-feature trial
- After trial: conflict detection + IP pool hierarchy
- Upgrade to keep CIDR suggestions, reservations, Terraform
- Community support
Starter
For teams running a single cloud.
Billed monthly
Up to 200 networks
5 cloud connections (1 cloud provider)
- Everything in Free
- Full conflict management
- IP pool hierarchy
- CIDR suggestions
- Static CIDRs (on-prem ranges)
- CSV export
- Email support
Pro
For teams planning across two clouds.
Billed monthly
Up to 600 networks
10 cloud connections (up to 2 clouds)
- Everything in Starter
- Future reservations
- Utilisation tracking
- Sync history
- Priority email support
Pro Plus
For platform teams standardising IP across every cloud.
Billed monthly
Up to 1,000 networks
20 cloud connections (AWS + Azure + GCP)
- Everything in Pro
- AWS + Azure + Google Cloud
- Terraform provider + allocation API (beta)
- Team workspace — up to 5 seats
- Priority support
Enterprise
Custom pricing for large, complex environments.
Contact us for a quote
Unlimited networks
Unlimited cloud connections
- Everything in Pro Plus
- Custom network / connection limits
- Overage pricing for burst usage
- SSO / SCIM — coming soon
- SLA guarantee
- Dedicated support contact
- Custom onboarding
All plans include GDPR-compliant data storage in Europe · Cancel anytime · No setup fees
FIG.06 — FAQ
Frequently asked questions
Which clouds do you support?
VNet IQ supports AWS, Azure, and Google Cloud. How many you can connect depends on your plan: Starter is single-cloud, Pro covers up to two, and Pro Plus covers all three in one workspace.
How exactly do the read-only connections work?
You create a read-only role in each cloud — Reader on Azure, a read-only IAM role on AWS, Compute Network Viewer + Browser on GCP — and connect it. We read, never write: every network, subnet, peering, and address space. You can revoke access on your end in 60 seconds. We never touch your infrastructure.
How do people sign in?
Sign in with your Microsoft (Entra ID) or Google account — no separate password to manage. Invite teammates into a shared workspace and assign each an owner, editor, or viewer role.
What happens when the 7-day trial ends?
Every new workspace starts on a 7-day full-feature trial. After it ends, pick a paid plan to keep the full product. If you don’t upgrade, your workspace drops to Free — conflict detection and IP pool hierarchy stay available for up to 50 networks; CIDR suggestions, reservations, Terraform allocation, and other features become read-only or upgrade-gated.
How is this different from cloud-native tools (Azure AVNM, AWS IPAM)?
Native tools manage their own cloud well. What they don’t do: see across clouds, see your on-prem ranges, or trend conflicts over time. The peering failures that wake people up at 2 a.m. are almost always between clouds, or cloud-to-on-prem — that’s the gap VNet IQ closes.
How is this different from our IPAM tool or spreadsheet?
Most “IPAM” is a spreadsheet or a tool that never synced to reality. VNet IQ auto-discovers what’s actually deployed via read-only roles — no manual updates, no drift — then overlays your declared on-prem ranges and planned reservations to surface conflicts before they ship.
See your entire cloud network
clearly — for the first time
Connect a read-only role and watch every VPC, VNet, and subnet across AWS, Azure, and Google Cloud map itself — conflicts and all. No agents, no infrastructure changes.
Start free today7-day free trial · No credit card · Read-only · Revocable in 60 seconds