CloudPeek Platform - From the first alert to the final decision.
CloudPeek is an agentic security operations platform that investigates and automates work across your existing tools, using your choice of models and deployment.
Platform features
Investigations
Findings, approvals and actions remain available for review and audit. Estate knowledge and investigation history give the next investigation more context than the last.

The conclusion and the data sources behind it stay together in the incident workspace. Automations
Build automations on the same reasoning layer and hand off tasks to agents you already run. Set authority per workflow, environment and action type.

Build a flow from playbooks, run steps in parallel and publish what it found. Deployment
Deploy CloudPeek with dedicated hosting, on premises or fully air-gapped. Use one platform across connected and disconnected environments, including operational technology.
One platform across connected and disconnected environments, including operational technology.
Dedicated hosting
Your own deployment, hosted and run for you.
On premises
Runs in your own infrastructure, inside your boundary.
Air-gapped
Fully disconnected, with local models and tools.
Choose where CloudPeek runs for each environment, from fully connected to fully disconnected. Tooling & integrations
Connect internal tools and remote MCP servers, add any external API as a custom provider, or let the builder agent draft a new tool for your review. Choose internal, open-weight, sovereign or frontier models for each workload, and query your existing tools where the data lives.
MCP servers
Remote or local, including legacy systems on your network.
Custom providers
Connect any external API declaratively, without new code.
Self-building tools
Name a service. The builder agent drafts the integration for you to review and save.
Agents discover a tool, inspect its capabilities, then call it, with credentials kept encrypted.
Three ways tools reach CloudPeek's agents. Each is governed, enrolled once per tenant and reusable in every workspace.
Explore the platform
Architecture
See how your tools, models and operators connect. Explore the network boundary, security harness and approval flow, with answers to deployment and control questions.
Control, built in - Machine speed. Human judgement.
Your operating policy decides how far the workflow goes.
- Advise. CloudPeek investigates and recommends. Your operators decide what happens next.
- Approve. Actions are prepared with their scope declared, then held for operator authorisation.
- Act. Execute within the boundaries your workflow permits, with each step recorded for review.
Put CloudPeek to the question.
Tell us about your environment and the work your team needs help with. Or start today with our free, live Vulnerability Intelligence agent plugin service.

