Dimension scores are derived from public data and fields; weighted into the composite. Reference only.
CloudVista is a multi-cloud asset inventory, security, and compliance platform from OSSVISOR, covering OCI, AWS, Azure, GCP, VMware vSphere/vCenter, and GitHub. Its key pitch is “asset discovery in under 10 minutes”: it connects through read-only APIs with no Agent installation required, consolidating compute, networking, storage, database, IAM, and other resources into a single dashboard, with added security checks, compliance scoring, health monitoring, and cost signals.
In terms of protection type, CloudVista is closer to a CSPM and cloud asset visualization platform. It provides 190+ automated security checks that can identify issues such as public exposure, open inbound rules, unencrypted storage, weak IAM, missing WAF, and idle resources, along with severity levels and remediation guidance. For compliance, it supports framework mapping and reporting for CIS, SOC 2, HIPAA, PCI-DSS, ISO 27001, NIST 800-53, and more. Management features include RBAC, audit logs, resource health status, configurable check intervals, Webhook notifications, and one-click evidence export. For integrations, it offers a REST API, CSV export, custom integrations, and checks for GitHub branch protection, Secret Scanning, Dependabot, 2FA, and related settings.
The product uses a SaaS subscription model plus custom enterprise plans. The Free plan is £0/month and includes 1 cloud account, 100 resources, and 1 user. Team is £99/month and includes 3 accounts, 500 resources, and 10 users. Operations is £599/month and supports unlimited cloud accounts, 2000 resources, and 50 users. Enterprise/MSP plans are customized, with support for unlimited resources, SSO, audit logs, AI security findings, custom integrations, and Docker Compose self-hosting. The free plan does not require a credit card, making it relatively easy to get started.
Its strengths are especially notable native support for OCI and VMware, making it suitable for hybrid-cloud and multi-cloud teams, as well as organizations still running vSphere. It also combines assets, compliance, health, and cost into a single view, reducing the need to switch between tools. The downsides are that many advanced enterprise features sit in the custom tier, the main content does not mention CloudVista’s own third-party security certifications, and the number of supported resource types is described inconsistently on the page as 50+ and 60+. It is a good fit for cloud security, platform engineering, audit and compliance teams, as well as MSPs managing cloud environments for multiple customers.
The main content does not specify direct access quality from mainland China, RMB/local payment options, invoices, or local node availability, so China access should be considered unknown. If you are targeting domestic cloud environments or have data export requirements, it is recommended to first verify the SaaS data storage location, self-hosting conditions, payment methods, and support time zones. Alternatives to evaluate include native security centers from cloud providers, configuration auditing tools, and CSPM/cloud security management products with localized support.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on ossvisor.com official site.
ossvisor.com is an Unknown Security provider. TG4G tracks its product information, an overall rating of 7.0/10, and a China-accessibility score of Workable. Click "Visit Official Site" to reach ossvisor.com directly.