Read-only, revocable
A read-only billing role you control, revocable at any moment. FlexRay observes execution metrics, never application content.
INFRASTRUCTURE INTELLIGENCE
Know not only how much. Know where. Know why. FlexRay joins kernel-level telemetry with your cloud billing APIs to reveal the cost, performance and security of every function, task and instance — in one view.
READ-ONLY ACCESS <1% CPU OVERHEAD NO APPLICATION DATA
Metrics of execution — never the content of your application.
FlexRay reads your billing APIs with a read-only role you can revoke at any moment, and observes execution metrics at the kernel — CPU, memory, I/O, network, stacks. It has no access to application data, and no credentials ever leave your environment.
Kernel-level visibility at near-zero overhead.
The eBPF agent deploys in one click — a single SSM command across a whole fleet, no SSH, no packages, no kernel modules — and runs at a fraction of one core. Part of the collection is agentless, via APIs and disk reads. Your heatmap populates within minutes and updates every 60 seconds.
One view across AWS, Azure, GCP — and the racks you own.
Full parity across the three major clouds, plus bare-metal and VMware support with cost modeling built from your hardware BOM and rate card. The same function-level attribution, wherever the workload runs.
FinOps and attribution — not another monitoring tool.
FlexRay doesn't replace your APM. It answers the question your APM can't: what does each function, task and instance actually cost — and is it worth it? First insights arrive in minutes, and the waste it finds is measured in dollars you can recover, not dashboards you can admire.
HOW IT WORKS
One-click setup
A read-only IAM role is created in your account via CloudFormation — AWS, GCP or Azure. No credentials leave your environment.
One command, whole fleet
The eBPF agent installs via SSM — no SSH, no packages, no kernel modules. Overhead stays under 1% of one CPU.
Minutes to first insight
Your cost-per-function heatmap and performance gap report populate within minutes, and refresh every 60 seconds. Every CPU cycle traced.
THE PRODUCT
01 · COST HEATMAP
Your bill attributes spend to services and SKUs. Your costs happen in functions, tasks and instances — a level the bill can't see and your APM doesn't price.
FlexRay attributes every dollar down to the function, by service and region. The biggest, reddest tiles are exactly where the money is going — and each one carries the number it would save you.
$ flexray top --by cost-per-function FN CPU% COST/DAY TREND checkout.tax_lookup 38.4 $1,930 ▲ 14% etl.nightly_rebuild 21.7 $ 902 ▬ api.thumbnail_resize 12.1 $ 355 ▼ 6%See this view on your environment
02 · SERVICE TOPOLOGY
Architecture diagrams describe intent. Production traffic has its own opinions — undocumented dependencies, calls nobody remembers adding, latency hiding between services.
FlexRay auto-discovers your services, dependencies and call paths from real execution — with latency measured on every edge and the hot path called out. No instrumentation, no code changes.
edge-lb ──▶ api-gw ──▶ orders ───▶ postgres-a
│ └─────▶ payments ─▶ stripe (ext)
└────────▶ search ─▶ redis-c p99 412ms ← hot path
See this view on your environment
03 · TASK EFFICIENCY
Background work is where waste hides best: retries that triple a bill, tail latency nobody watches, jobs that succeed just often enough to avoid an alert.
Success rates, retries and tail latency for every background job — with the slow and high-failure tasks surfaced first, and the cost of each retry attached.
TASK RUNS/D RETRY% P99 invoice.generate 8,420 0.2 1.9s media.transcode 1,204 11.8 44s sync.inventory 96,110 0.4 240msSee this view on your environment
04 · IDLE RESOURCES
The average enterprise wastes 20–30% of its cloud spend on capacity that sits idle. Most tools can tell you utilization is low. Few will tell you what acting on it is worth.
Underutilized instances and rightsizing opportunities, each with the exact monthly savings from acting — so the list ranks itself, and the first hour of cleanup pays for the quarter.
i-0f3a9c m5.4xlarge cpu 3.1% mem 11% → m5.xlarge save $412/mo i-8b21d0 r6i.2xlarge cpu 1.8% mem 7% → terminate save $505/mo gpu-0a1f g5.12xlarge util 4% vram 9% → g5.2xlarge save $3,118/moSee this view on your environment
05 · SECURITY GRADE
The same function-level vantage point, turned on your security posture. A composite grade across 16 domains — and every gap priced in dollars, breach-loss delta plus run-rate delta, so you rank by NPV, not CVSS.
Parallel regulatory timers (LGPD, GDPR, SEC, DORA, NIS2, CISA KEV) keep deadlines visible, and every finding ships with signed, auditor-ready evidence — RFC 3161 timestamps, immutable storage.
composite grade: B- (16 domains) GAP RANK EXPOSURE public snapshot, prod db #1 $2.4M breach-loss Δ IMDSv1 on 41 instances #2 $310k run-rate Δ stale KEV patch (CISA) #3 due in 6 daysSee this view on your environment
06 · FLEXRAY AI
Cost spikes, idle fleets, dependency risk, performance regressions — the answer is always in the data. The problem is that the data is in three systems and a billing export.
FlexRay AI reasons over your eBPF telemetry, billing data and service topology together, and answers in plain English — with the evidence and the dollar figure attached. Insight and chat modules are opt-in, per tenant.
you › why did cost spike on tuesday?
flexray › etl.nightly_rebuild ran 4× after a schema change
· +$1,912 · fix: dedupe trigger — saves $57k/yr
See this view on your environment
FINOPS FOR INFERENCE
AI workloads are the fastest-growing line on the bill — and the least attributed. FlexRay measures them at the source.
Inference cost attributed per model and per endpoint — cost per token, per request, per tenant.
GPU utilization, memory and power read directly at the agent — not estimated from the invoice.
Fleet-wide GPU capacity and headroom, so you know what you can serve before you buy more.
Route inference by performance per dollar — and see what each routing decision saves.
SECURITY & COMPLIANCE
Read-only, revocable
A read-only billing role you control, revocable at any moment. FlexRay observes execution metrics, never application content.
Encrypted end to end
AES-256 at rest, TLS in transit. Evidence is signed with RFC 3161 timestamps and kept in immutable, auditor-ready storage.
Built to the standards
Aligned to SOC 2 (in progress), LGPD, NIST CSF 2.0 and CCPA — the same frameworks the security grade audits your estate against.
RBAC, MFA, SAML 2.0
27 granular permissions, TOTP multi-factor, SAML single sign-on and IP allowlisting — enterprise identity from day one.
Cost waste and performance gaps, exposed in an initial assessment. Read-only, with no access to your application data.
Request a demo