Ask your whole estate.See the evidence. Approve the change.
This is what we are building towards: one place to ask questions across Microsoft 365, Azure, AWS and your on-premises servers, answered from read-only evidence, with a person approving anything that changes. Some of it is live today. Most of it is not yet. Every item on this page says which.
Concept designs show where Cloudek AI is heading. What is available, and how it is scoped, is confirmed in a conversation before any engagement.
Live todayYou can use it now, or ask us for it.
In developmentWe are building it. Not available to customers yet, and it may change.
PlannedDecided, designed, not started.
ConceptA design idea we are testing. It may change or never ship.
Updated · Last reviewed
ROADMAP
What is real, and what is next.
The same status labels are used on every panel below. “In development” means we are building it; it is not yet something a customer can buy.
Live today
Live today
Real tools and services you can use or request now.
Eight things we want your estate to be able to do.
Each panel is a design concept drawn with fictional sample data for a made-up company, “Example Ltd”. None of it shows a real customer, a real result or a live system.
01 / ASKIn development
Ask your whole estate
Ask a plain question and get an answer from read-only data across Microsoft 365, Azure, AWS and your on-premises servers, with the evidence shown beside it.
Ask your estateConcept · sample data
You askWhich admin accounts can sign in without MFA, and which servers missed last month’s patches?
Sample answer. 2 of 9 admin accounts have no MFA method registered. 3 of 12 servers missed the last patch window.
ReadEntra ID · authentication methodsread-only
ReadServer agent · patch statusread-only
Not checkedAWS IAM · no access granted
Show the evidenceDraft a fix plan for an engineer to review
Where it can read fromStatus
Microsoft 365In development
AzureIn development
AWSPlanned
On-premises serversPlanned
Each source is read-only and switched on only after you agree it in writing.
Depends on: read-only access that you grant for each platform. Anything we cannot read is listed as “not checked”, never guessed.
02 / CHANGEConcept
Change risk preview
See what a change could break before anyone approves it, so approval is an informed decision rather than a hope.
Proposed change (sample)Concept · sample data
Block legacy sign-in for all users
Risk if applied
Medium (sample)
Could break
2 shared mailboxes still use IMAP (sample)
1 scanner sends mail with basic sign-in (sample)
1 PreviewAI drafts, read-only
2 Engineerreviews the preview
3 You approvea person decides
Apply change (waits for approval)
Depends on: read access to the settings and sign-in history involved. The preview is advice; it never applies a change, and a person approves every one.
03 / DRIFTIn development
What changed since last month
A drift timeline across identity, mail, servers and cost, so a surprise is something you find in a review rather than in an incident.
Example Ltd · last 30 daysConcept · sample data
Identity
Mail
Servers
Cost
30 days agoToday
Identity: a role assignment was added (sample)
Mail: a forwarding rule appeared (sample)
Cost: a resource group grew (sample)
Depends on: repeat read-only snapshots. We are starting with Azure resource changes; identity, mail and servers each need their own read access.
04 / COSTIn development
Cost drift and licence waste
Spot spend that moved, and licences nobody uses, across clouds and on-premises, as a short list to review rather than a claim of savings.
This month vs last (direction only)Concept · sample data
Microsoft 365
Azure
AWS
On-premises licences
Bright bar: this month. Dim bar: last month.
To review (sample): 14 licences unassigned for 90+ days. These are candidates, not savings.
Depends on: billing read access or exports you choose to share. Today, the licence calculators do the sums by hand, from prices you can edit.
05 / DATACENTREPlanned
Datacentre health from a read-only agent
Bring Active Directory, patching, backups and certificates on your own servers into the same view as your cloud.
Example Ltd · read-only agentConcept · sample data
DC-01 · domain controller
AD replicationOK
Patches2 pending
HV-02 · Hyper-V host
Cluster stateOK
PatchesCurrent
FS-01 · file server
Certificate21 days
Disk spaceOK
BK-01 · backup
Last successYesterday
Restore testNot checked
Design intent: the agent only reads, connects outward and can be revoked.
Depends on: a small agent on a server you choose, with your written agreement. The security design is drafted, but nothing is installed on any customer server today.
06 / REPORTIn development
Customer-ready executive reports
A branded, readable summary in one click, with a plain section for everything we could not check.
Report previewConcept · sample data
Estate review · Example Ltd
Sample · draft until reviewed
Summary
Mail and identity settings read; two items need attention.
Server patch status read for 12 servers.
Needs attention
Two admin accounts have no MFA method (sample)
One certificate expires within 30 days (sample)
What we could not check: AWS IAM (no access granted), restore tests (not run).
Reviewed by an engineer before sending.
Depends on: what you let us read. A report only covers what was checked, and it always says what was not. Today, the sample assessment shows the style.
07 / INCIDENTConcept
Incident copilot
When an alert fires, explain what it probably means and suggest read-only checks, so the engineer starts with context instead of a blank page.
Incident (sample)Concept · sample data
Alert: mail queue growing on EX-01 (sample)
AI explanation · for an engineer
The queue is growing because outbound delivery to one domain is failing. Confidence: medium. Verify before acting.
Suggested next steps (read-only first)
Check the queue for the failing domain
Check recent DNS changes for that domain
Review the connector log for the same hour
An engineer decides what to do. The copilot never acts on its own.
Depends on: alert feeds you choose to share. Today you can paste a masked log into a free tool and press Explain with AI.
08 / POSTUREPlanned
Security posture over time
A one-off review shows where you are. Repeat reviews show whether you are getting better, and what moved when it did not.
Example Ltd · direction onlyConcept · sample data
MFA coverageTrend (sample)
Admin accountsTrend (sample)
Patch currencyTrend (sample)
Backup successTrend (sample)
Lines show direction, not a score or a result.
Why it movedConcept
Patch currency dipped (sample). Two servers missed the patch window after a maintenance slot was moved.
See it on the change timeline.
Explanations point to evidence and say when they are a guess.
Depends on: repeat read-only snapshots on a schedule you agree. A trend only exists once there are at least two snapshots.
PROOF, NOT PROMISES
Already live, so the direction is anchored.
Everything here exists today. You can try the free tools now, or ask us about the services.
Live today
Explain with AI
On selected free tools, such as the SPF, DKIM and DMARC inspectors and the security headers reviewer, press one button for a plain-English explanation. You see exactly what will be sent, masked first.
Cloudek’s own read-only workspace for Microsoft 365 and Azure reports. It is not open to the public, and customer tenants are not connected through this website.
A guided set of read-only mailbox checks turned into one readable report, with the items that need attention first. Scope and fee are agreed before any access.
These match what the trust centre and privacy notice already say. If a future feature cannot meet them, it does not ship.
01
Read-only first
Checks read; they do not change your environment. OpsPilot runs fixed, named read-only queries, not free-form commands.
02
A person approves every change
AI can explain and suggest. It does not change anything on its own, and it does not silently run AI-generated commands.
03
Evidence, and its limits
Answers point to where they came from and say what could not be checked. AI can be wrong, so consequential results are checked against your own records.
04
Minimum data
Tool inputs are masked before an AI service sees them, requests are size-limited, and Cloudek does not save the text you send or the reply. The trust centre lists the third-party services involved.
05
Your access, agreed in writing
Access, scope and fees are confirmed in a conversation and in writing before any engagement. Nothing connects to your tenant through this website.
06
Honest about status
Every capability here carries a status. Concept designs use fictional sample data, never real customers, counts or results.
Tell us what you would want to ask your estate first.
Cloudek AI grows from real engagements. We will talk through what is live today, what is in development and how it could be scoped for you, then agree it in writing.
Concept designs show where Cloudek AI is heading. What is available, and how it is scoped, is confirmed in a conversation before any engagement.
This page describes direction, not an offer. Concept panels are illustrations with fictional sample data; they are not live products, customer results or commitments, and they may change or never be built. Availability, scope, fees and responsibilities are agreed in writing for each engagement. AI output can be wrong or out of date.