Stop guessing your
cloud IP space
The purpose-built tool to discover, deconflict, and reserve IP space across AWS, Azure, and Google Cloud — including static and future reservations — all read-only, without ever touching your infrastructure.
Read-only access. No agents. No write permissions. Revocable in 60 seconds.
7-day free trial · Setup in 5 minutes · No write permissions required
Read-only across every major cloud
Sound familiar?
Managing cloud networks at scale
is harder than it should be
Accounts and subscriptions multiply, visibility doesn’t
Every team spins up new AWS accounts, Azure subscriptions, and GCP projects. Your network map lives in a spreadsheet nobody trusts.
CIDR overlaps surface at the worst time
You only discover a conflicting range when routing breaks in production — or during a cross-cloud VPN or peering incident at 2 am.
You don’t know you’re out of space until you are
IP exhaustion creeps up silently. The /16 that felt enormous three years ago is now 94% allocated.
What you get
Everything your network team needs.
Nothing it doesn’t.
VNet IQ is a purpose-built read-only intelligence layer on top of your existing cloud networks — not another IPAM tool that tries to replace them.
Automatic Network Discovery
Connect a read-only role per account, subscription, or project. VNet IQ syncs every VPC, VNet, subnet, and address space across AWS, Azure, and Google Cloud — automatically, on a schedule.
No manual inventory. Ever.
Real-Time CIDR Conflict Detection
Overlapping ranges — across any cloud or your on-prem — are flagged the moment they appear. Acknowledge known conflicts, mark intentional overlaps, and get clear before any deployment.
Catch problems at sync, not at 2 am.
Hierarchical IP Pool Management
Organise your entire address space into named pools — from RFC-1918 roots down to individual /24s, across every cloud. Track utilisation at every level with colour-coded progress.
One view for your whole IP estate.
Instant CIDR Suggestions
Tell VNet IQ the prefix size you need. It scans your pools and recommends the safest, most contiguous available range — no spreadsheet hunting, no miscalculations.
Right-size every allocation first time.
Terraform provider + allocation API
BetaReserve and allocate CIDRs from your Terraform workflows — or call the REST allocation API directly from CI/CD. Discovery and analysis stay fully read-only. Available on Pro Plus.
From plan to provisioned — no spreadsheet handoff.
How it works
From zero to full network visibility
in under 10 minutes
Connect your clouds
Create a read-only role in each AWS account, Azure subscription, or GCP project and connect it to VNet IQ. We request the minimum read-only permissions — never write access.
About 3 minutes per connection.
VNet IQ maps your topology
VNet IQ syncs every VPC, VNet, subnet, and IP range across all your clouds. Conflicts are detected automatically, and your map stays current on a schedule — or trigger a sync any time.
A typical 200-network estate syncs in under 60 seconds.
Act with full visibility
Review conflicts, manage IP pools, get instant CIDR recommendations, and optionally generate Terraform-ready allocations (beta). Share live views with your team — no extra accounts needed.
Export to CSV for audits and reporting.
Pricing
Transparent pricing. No surprises.
Every workspace starts with a 7-day full-feature trial. Pick a paid plan to keep everything; otherwise you stay on Free with conflict detection and pool hierarchy. Annual plans save 2 months.
Free
Evaluate VNet IQ with real infrastructure.
Free forever
Up to 50 networks
1 cloud connection
- 7-day full-feature trial
- After trial: conflict detection + IP pool hierarchy
- Upgrade to keep CIDR suggestions, reservations, Terraform
- Community support
Starter
For teams running a single cloud.
Billed monthly
Up to 200 networks
5 cloud connections (1 cloud provider)
- Everything in Free
- Full conflict management
- IP pool hierarchy
- CIDR suggestions
- Static CIDRs (on-prem ranges)
- CSV export
- Email support
Pro
For teams planning across two clouds.
Billed monthly
Up to 600 networks
10 cloud connections (up to 2 clouds)
- Everything in Starter
- Future reservations
- Utilisation tracking
- Sync history
- Priority email support
Pro Plus
For platform teams standardising IP across every cloud.
Billed monthly
Up to 1,000 networks
20 cloud connections (AWS + Azure + GCP)
- Everything in Pro
- AWS + Azure + Google Cloud
- Terraform provider + allocation API (beta)
- Team workspace — up to 5 seats
- Priority support
Enterprise
Custom pricing for large, complex environments.
Contact us for a quote
Unlimited networks
Unlimited cloud connections
- Everything in Pro Plus
- Custom network / connection limits
- Overage pricing for burst usage
- SSO / SCIM — coming soon
- SLA guarantee
- Dedicated support contact
- Custom onboarding
All plans include GDPR-compliant data storage in Europe · Cancel anytime · No setup fees
FAQ
Frequently asked questions
Which clouds do you support?
VNet IQ supports Azure, AWS, and Google Cloud. How many clouds you can connect depends on your plan: Starter is single-cloud, Pro covers up to two, and Pro Plus covers all three.
What happens when the 7-day trial ends?
Every new workspace starts on a 7-day full-feature trial. After it ends, pick a paid plan to keep using the full product. If you don’t upgrade, your workspace drops to Free — conflict detection and IP pool hierarchy stay available for up to 50 networks; CIDR suggestions, reservations, Terraform allocation, and other features become read-only or upgrade-gated.
How is this different from cloud-native tools (Azure AVNM, AWS IPAM)?
Native tools manage their own cloud well. What they don’t do: see across clouds, see your on-prem ranges, or trend conflicts over time. The peering failures that wake people up at 2 am are almost always between clouds, or cloud-to-on-prem — that’s the gap VNet IQ closes.
How is this different from our IPAM tool or spreadsheet?
Most “IPAM” is a spreadsheet or a tool that never synced to reality. VNet IQ auto-discovers what’s actually deployed via read-only roles — no manual updates, no drift — then overlays your declared on-prem ranges and planned reservations to surface conflicts before they ship.
How exactly do the read-only connections work?
You create a read-only role in each cloud (Reader on Azure, a read-only IAM role on AWS, a Viewer role on GCP) and connect it. We read — never write — every network, subnet, peering, and address space. You can revoke access on your end in 60 seconds. We never touch your infrastructure.
Ready to see your entire cloud network
clearly for the first time?
Join network teams who’ve replaced guesswork with visibility across AWS, Azure, and Google Cloud. Start free — no credit card, no infrastructure changes.
Start free today7-day free trial · Setup in 5 minutes · Cancel anytime