Oracle Cloud inventory · audit · governance

Stop guessing what's in Oracle Cloud.
See every resource. Prove compliance.

Cloud teams and MSPs struggle with the same questions: what's deployed, what changed, and are we compliant? OCI Vision answers them with a live inventory across every tenancy — plus audit exports, governance views, and Cloud Guard reporting — without console hopping or spreadsheets.

Start free trial See demo
  • 2-dayFree trial
  • Read-onlyIAM connection
  • 1 paneEvery tenancy

The problems teams search for

OCI Vision is built around real questions cloud admins, MSPs, and compliance teams ask — not product jargon.

How do I inventory Oracle Cloud resources?

Live CMDB across compute, network, IAM, storage, databases, and cost — refreshed on demand, searchable by tenancy.

Oracle Cloud audit

Export audit-ready PDF inventory and cost reports per tenancy for customer reviews and internal audits.

OCI governance

Organisation workspaces, team roles, and policy visibility across every customer tenancy you manage.

Cloud Guard reporting

Cloud Guard problems, recommendations, and security posture alongside your resource inventory.

OCI compliance checklist

Read-only posture visibility, exposure tracking, and reporting to support compliance workflows.

Guides & how-tos

Practical articles on building an OCI CMDB, connecting read-only users, and tracking costs across tenancies.

How it works

Connect read-only, scan on demand, and answer inventory and compliance questions from one workspace.

1. Create your workspace

Register your organisation, invite your team, and add each OCI tenancy as a customer profile.

2. Connect with read-only IAM

Add a dedicated inspect/read API user — never a tenancy administrator. See setup guide.

3. Inventory, audit, and report

Refresh any domain on demand, filter by tenancy, explore the network map, and export PDF reports.

Why teams choose OCI Vision

Less console hopping. Fewer spreadsheets. One place to see and prove what's in Oracle Cloud.

One dashboard, every tenancy

Switch customer tenancies from the top bar. Overview, compute, network, IAM, cost, and more — scoped to one estate or all.

Read-only by design

No agents to deploy. Connect with inspect/read IAM policies only. Credentials encrypted per organisation.

Audit-ready exports

Reporting Studio produces PDF inventory and cost packs per tenancy — built for MSP customer reviews and internal audits.

OCI-native intelligence

Hub-and-spoke network map, estate score, change tracking, Cloud Guard findings, and drift visibility in one module.

Encrypted at rest Per-organisation credential storage
Org isolation Workspace scoped to your team
Role-based access Owner, admin, and member roles
Secure sessions Token-based authentication

What it looks like

Multi-tenancy workspaces, interactive network maps, Cloud Guard views, and audit-ready reporting — switch tenancies without leaving the dashboard.

Product walkthrough — tenancy filtering, network map, Cloud Guard, and reporting.

Screens from the workspace

OCI Vision - hub-and-spoke network map OCI Vision portal - overview with tenancy filter OCI Vision - estate score and change intelligence OCI Vision - Cloud Guard problems and recommendations OCI Vision - NSGs, public IPs, and Cloud Guard OCI Vision - VCNs, subnets, gateways, and DRG attachments OCI Vision portal - searchable CI catalog OCI Vision portal - compute inventory OCI Vision - OS patch management OCI Vision - AI Data Platform inventory OCI Vision portal - cost analytics OCI Vision portal - Reporting Studio
Interactive OCI network map - VCN hexagons, DRG hub links, gateways, and subnets in one pan/zoom canvas.

Who uses it

Built for teams managing Oracle Cloud at scale

Whether you run one tenancy or hundreds of customer estates, OCI Vision keeps every profile isolated, searchable, and report-ready.

MSPs & service providers

Per-customer tenancy profiles, parallel scanning, and PDF reports for QBRs and audits.

Cloud & platform engineers

One inventory for compute, network, IAM, and cost — without logging into every console region.

Security & compliance

Cloud Guard reporting, exposure tracking, and read-only posture evidence for checklists.

Platform coverage

Compute Network IAM Storage Databases Network Map Cloud Guard Cost AIDP Reporting

Every paid plan includes the full feature set. See pricing.

Simple tier pricing - all features included

Every paid plan includes the full OCI Vision feature set. Individual is priced per tenancy; Team and above include unlimited OCI tenancies.

Free trial - 2 days

Full product access · no credit card required

Individual

£10/month

  • 1 user
  • 1 OCI tenancy included
  • +£5/month per extra tenancy
  • Full feature set

Best for solo cloud admins and single-tenancy setups

Team

£60/month

  • Up to 15 users
  • Unlimited OCI tenancies
  • Full feature set

Best for engineering teams and small enterprises

Business

£150/month

  • Up to 50 users
  • Unlimited OCI tenancies
  • Full feature set

Best for multi-team organisations and serious OCI governance

Enterprise

£400/month

  • Unlimited users
  • Unlimited OCI tenancies
  • Full feature set + priority support

Best for MSPs, large enterprises, and regulated environments

Individual plan: includes one OCI tenancy. Add more from the portal billing page at £5/month each. Team, Business, and Enterprise include unlimited tenancies.
Inventory refresh times: OCI tenancies are scanned on demand when you click Refresh - not in real time. Scan duration depends on estate size, number of regions, and OCI API response rates; large tenancies may take several minutes.

Ready to inventory your Oracle Cloud estate?

Start a free 2-day trial. Connect your first tenancy with read-only IAM and see live inventory in minutes.

Create workspace

Technical setup

Connect Oracle Cloud the right way

OCI Vision only needs to read your estate. Create a locked-down service identity with inspect/read access — not your personal login, and never the tenancy administrator.

Recommended: dedicated read-only user

Provision a separate IAM user (e.g. oci-vision-readonly) used only for OCI Vision. Generate an API signing key for that user and store the config in your workspace. This user should have no manage, use, or admin privileges anywhere in the tenancy.

Setup steps in OCI

  1. Create an IAM group - e.g. oci-vision-readers.
  2. Attach a read-only policy at tenancy level (see example below). Use inspect and read only - never manage or use.
  3. Create a dedicated IAM user - not an existing admin or human operator account. Add the user to the group.
  4. Generate an API signing key for that user only. Download the private key and fingerprint; build an OCI config profile pointing at this user.
  5. Add the profile in OCI Vision under Organization & Tenancies. Credentials are encrypted at rest in your organisation workspace.
  6. Test with Refresh on Overview. If a section is empty, the policy may need a targeted read rule for that service - still read-only, never admin.

Example read-only IAM policy

Adjust group name and scope to your security model. Keep verbs to inspect/read only.

Allow group oci-vision-readers to inspect all-resources in tenancy
Allow group oci-vision-readers to read all-resources in tenancy

For stricter estates, replace all-resources with compartment-scoped statements per customer. OCI Vision does not require tenancy administrator or any identity-domain admin role.