Frequently asked questions.

An AI-native autonomous cloud operations system. It connects to your AWS (Azure/GCP soon) via read-only IAM role, scans your infrastructure, reasons about cost/security/drift, generates Terraform-backed execution plans, and applies approved changes — with a full audit trail and pre-verified rollback.

Cost tools alert. Axiom operates. It doesn't just list findings — it generates phased execution plans with Terraform code, runs the change behind your approval, verifies the outcome, and learns from the result. The same engine handles security, drift, and resilience.

No. Axiom runs above CloudWatch, AWS Config, Terraform, GitHub Actions, ServiceNow, etc. It coordinates and analyzes them — it does not replace any of them.

AWS is fully implemented (scan, reason, plan, execute, monitor, learn). Azure and GCP have working connectors with scan + topology mapping; the reasoning and execution layers are rolling out in Q2 and Q3 2026.

Read-only by default — Describe, Get, List actions only. Execution requires a separate, more-scoped role you opt into per action class. Full details at /docs/aws-setup.

Never. Axiom uses assume-role with External ID. Temporary credentials live in memory for the scan and are discarded immediately after. We don't see access keys.

Delete the IAM role in your AWS console. Axiom immediately loses all access. Optionally also disconnect from the Axiom dashboard.

First scan on a typical mid-size account: 60–180 seconds. Initial scans on accounts with 1000+ resources can take 10–15 minutes. Subsequent scans are incremental and usually complete in under 2 minutes.

Yes — daily, hourly, or custom. Recurring scans live under /dashboard/workflows. Each scan feeds the operational memory.

Outcome of every action — which action types succeed on which resources. After repeated failures on a class of action, the agent auto-downgrades that class from auto-fix to human-review. Confidence calibrates per service, per change type, per team.

Yes. Every recommendation includes a reasoning trace — observe → interpret → reason → plan → verify — with per-step evidence and confidence. See it in the Command Center or directly on the run page.

Never by default. Every execution requires explicit approval. Multi-party approval kicks in for broad blast-radius changes. The agent cannot grant itself more autonomy.

Rollback fires automatically. Every plan item ships with a pre-verified rollback strategy and a measured RTO (typically under 60 seconds). The audit log records both the failure and the rollback outcome.

Yes. Every execution plan generates Terraform you can download, review locally, and apply through your own pipeline. Axiom doesn't have to execute — it can be the intelligence layer above your existing IaC flow.

GitHub Actions, GitLab CI, Azure DevOps, Jenkins, ArgoCD, and ServiceNow on the workflow side. Terraform Cloud / Enterprise on the IaC side. AWS/Azure/GCP on the infrastructure side.

By default no — it observes and scores. Once governance is configured, ReleaseOps can orchestrate approval-gated deployments through your existing pipelines without bypassing them.

A composite 0–100 score across 9 operational dimensions: branch governance, rollback readiness, observability, deployment maturity, operational coordination, audit completeness, Terraform governance, drift detection, release communication. Trackable per service over time.

macOS preview is available now. Windows is rolling out in Q2 2026, Linux in Q3 2026. The web platform is available on all browsers immediately.

Local Terraform execution, OS keychain credential storage, secure workstation mode, background scanning with native notifications, and offline audit log export. The same dashboards as web — but the data never leaves your machine.

Visit /download for OS-detected install links and the full platform roadmap.

Yes — Starter is free forever with 1 cloud account and monthly scans. Growth ($149/mo) adds the full cognitive loop, execution plans, and unlimited scans. Scale, Enterprise tiers add more accounts, multi-cloud, and compliance frameworks. Pricing at /operator/pricing.

No. Starter tier requires no payment. All higher tiers include a 7-day free trial.

Yes — SAML + OIDC on the Growth tier and above. Enterprise tier adds custom IdP integration and SCIM.