Prismaraby SovSec

Cloud infrastructure that stays in Austria.

Prismara Cloud gives you virtual machines, Kubernetes, networking, storage and managed databases on Austrian sovereign infrastructure. SovSec runs the whole service layer itself: console, API, policy, keys, audit and billing. Manage it the way your team already works, from the console, the CLI or OpenTofu and Terraform.

Screenshots

See it working

Shown with sample data.

Tenant home: spend, forecast, secure score and recommendations

Capabilities

What Prismara Cloud does

Core services

Virtual machines, Kubernetes, virtual networks, load balancers, object storage and managed PostgreSQL.

Infrastructure as code

An OpenTofu and Terraform provider covers resource groups, every resource type in the catalogue, Vault keys, budgets, service principals, access keys and webhooks, and imports existing resources by ID.

Policy guardrails

Rules such as required cost-centre tags, Austrian regions only, customer-managed keys for production data and no public SSH, checked before anything is created.

Keys and automation

A built-in key vault, service principals and access keys for automation, and budgets with alerts.

Signed webhooks

Events are delivered as signed Standard Webhooks, written in the same transaction as the audit record, so what you receive always matches what happened.

Billing that adds up

Usage is reconciled daily with the infrastructure supplier, so there are no orphaned or unbilled resources, and monthly invoices come through Prismara ERP.

Security

How it's secured

Prismara Cloud follows the engineering rules shared across the suite, plus these product-specific measures.

SovSec owns the service layer

The infrastructure supplier is a sub-processor. Console, identity, policy, keys and audit stay with SovSec.

Fail closed

Requests are denied unless a policy allows them, and every denial is audited.

Tenant isolation

PostgreSQL row-level security separates every tenant's resources.

Safe webhook delivery

Webhook delivery is protected against server-side request forgery, so it cannot be turned against internal systems.

Want SovSec to run it for you?

SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.

Prismara

Sign in to your workspace

or

You enter your password and second factor only on Prismara Identity's own page, never here. Administrators use Admin login.

Prismara Admin Console

Administrator sign-in

Passkey required
Separate session from your user account
Every action recorded in the audit trail
or

Continues to Prismara Admin at admin.prismara.eu. Not an administrator? Use User login.