Functions
Solutions by functions
meshStack - The entire Cloud Project Lifecycle from a single source
View your journey holistically with our 5 pillars of the Cloud Journey: Tenant Management, IAM, Security & Compliance, Cost Management and Service Ecosystem.
Discover more advantages of meshStack
Set up for one cloud - use with all clouds
With meshStack, multiple cloud platform integrations are eliminated. Once set up for one cloud, you can add more cloud platforms for the enterprise with just a few clicks. Instead of cloud silos with months-long integration projects, you get an integrated control center for your cloud infrastructure.
Fast implementation
Thanks to our SaaS model, implementation in your IT landscape takes place in the shortest possible time.
Excellent support
Our experienced Customer Success team is on hand to ensure your Cloud Journey is successful.
100% customer satisfaction
Our customers rely permanently on meshStack for their successful cloud journey.
Weekly updates
meshStack is constantly being developed further and regularly receives new functions.
Made in Germany
meshStack is also suitable for operation in highly regulated environments, such as in the financial or infrastructure sectors, thanks to its extensive compliance support. meshcloud is ISO27001 certified.
Well documented
meshStack has detailed documentation for onboarding, configuration and operation. In the Cloud Foundation Maturity Model (CFMM) we show best practices for the Cloud Journey.
Multiple awards & certifications
Service Ecosystem
Service Ecosystem for Cloud Infrastructure Services
DevOps tools, on-prem connectivity & more - provide centrally for all
Accelerate the cloud journey of your application teams with pre-packaged services. Cloud-native, automatable and with self-service.
Service Marketplace in the (multi-)cloud
With meshStack, you make your tools available to all clouds across the enterprise
Easily deliver customized services from a central marketplace
- Based on an open standard (OSB API)
- Self-service for service owners
- Self-service for service users
- Private and global marketplaces
- Service metering and billing
- Tenant-related services
Why is a service marketplace useful?
Certain types of cloud infrastructure services are used by different application teams because they are not tailored to a specific application. They provide additional functions required to run the application and maintain its functionality. Examples are monitoring (e.g. via ELK stack) or backend connectivity.
To avoid having to build such services from scratch and run them individually by each application team, many IT organizations choose to deploy and manage them centrally.
Your entire offering - centrally accessible in the service catalog
meshStack has a service catalog (part of the marketplace) where services can be obtained from customer accounts. In addition to the services, their prices, descriptions, purchasing options and billing models can also be presented there.
Use Case
Provide and use marketplace service
Advantages of the Open Service Broker API (OSB API)
The Service Broker is decoupled from the actual service implementation: the implementation can be changed as needed without affecting the Service Broker or the application. In addition, there are different service models, depending on the use case: services can be fully managed by the service owner or provided as unmanaged services to give developers more freedom in access and configuration.
Discover more advantages of meshStack
Set up for one cloud - use with all clouds
With meshStack, multiple cloud platform integrations are eliminated. Once set up for one cloud, you can add more cloud platforms for the enterprise with just a few clicks. Instead of cloud silos with months-long integration projects, you get an integrated control center for your cloud infrastructure.
Fast implementation
Thanks to our SaaS model, implementation in your IT landscape takes place in the shortest possible time.
Excellent support
Our experienced Customer Success team is on hand to ensure your Cloud Journey is successful.
100% customer satisfaction
Our customers rely permanently on meshStack for their successful cloud journey.
Weekly updates
meshStack is constantly being developed further and regularly receives new functions.
Made in Germany
meshStack is also suitable for operation in highly regulated environments, such as in the financial or infrastructure sectors, thanks to its extensive compliance support. meshcloud is ISO27001 certified.
Well documented
meshStack has detailed documentation for onboarding, configuration and operation. In the Cloud Foundation Maturity Model (CFMM) we show best practices for the Cloud Journey.
Multiple awards & certifications
Cost Management
Solution for (Multi) Cloud Cost Management
Efficient chargeback processes through transparent allocation of cloud costs
With meshStack, you can manage public and private cloud costs in an automated way and successfully implement FinOps practices in your organization.
Automated cloud cost management
meshStack enables you to analyze and sustainably reduce your cloud costs
Central cost transparency across all clouds
- Overview of cloud costs for all stakeholders
- Cross-cloud cost allocation to cost centers
- Metering of private clouds and on-premises services (via Service Marketplace)
- PDF and CSV export
- Showback and chargeback
- Definition of quotas and budgets
- Budget Alerts
Creation and management of payment methods
Payment methods in meshStack model company-specific means of allocation (e.g. budgets, cost centers, internal orders) and can be freely configured accordingly – name, expiration date, budget, and much more. They can be created and assigned to projects by administrators or external systems in customer accounts. In addition, so-called “Substitute Payment Methods” can be stored, which e.g. allow an automatic change of the budget at a certain date (e.g. year change). In meshstack, payment methods can be managed in various ways:
- Via self-service for project and project teams by team members or administrators
- Creation via external systems and subsequent assignment to project teams
Chargeback in the multi-cloud
meshStack offers the possibility to define billing rules and prices based on measured consumption data and thus to create monetary settlements. Specifically, the chargeback module enables:
- Billing at meshProject level
- Total overview of costs for cloud resources used
- Monthly cost history
- Billing for deputies/partners: display of cost overview for managed accounts
- Cost dashboard in meshPanel (UI)
Metering for maximum efficiency
Metering enables meshStack to measure cloud resources used in connected cloud platforms and for connected cloud services if and insofar as the connected platforms technically support the collection of consumption data and have been configured for this. Own prices or cost allocations can be added flexibly in the service catalog.
The collected consumption data is consolidated at meshProject level, prepared for the user and displayed in the meshPanel (UI). Likewise, all cost data can be exported via API or as CSV to make them available for further analyses or internal billing systems.
Use Case
How all multi-cloud stakeholders gain visibility into cloud costs
1. Team Lead Tom receives monthly Project Statements to manage the costs of his projects.
2. Developer Emanuela can view the costs she incurs from cloud resources and control the chosen architecture/resource usage accordingly.
3. Platform Operator Olivia, can centrally view the costs of all private and public cloud platforms and export them for billing.
Further advantages of meshStack
Cloud cost transparency
Keep developers financially accountable by providing them with an easily accessible view of their current cloud spend at all times.
Define multi-cloud budgets
Multi-cloud budgets allow developers to leverage their preferred technologies to build applications without adding cost allocation overhead.
Fully automated cost management
Automatically allocate cloud costs to the teams that incur them. Say goodbye to tedious manual spreadsheets.
Datenexport zum Erstellen von Reports
Export all your cost data to create custom reports for effective cloud cost management using tools like PowerBI or Google Looker (formerly Data Studio).
Allocation of internal costs to application teams
Distribute the cost of shared services such as CI/CD, networking, or monitoring and governance functions such as landing zones equitably across application teams.
Custom Fees
meshStack offers the option to store your own fees and/or discount rates, which are automatically transferred by the system to the regular billing of a meshProject and are listed and calculated there.
Discover more advantages of meshStack
Set up for one cloud - use with all clouds
With meshStack, multiple cloud platform integrations are eliminated. Once set up for one cloud, you can add more cloud platforms for the enterprise with just a few clicks. Instead of cloud silos with months-long integration projects, you get an integrated control center for your cloud infrastructure.
Fast implementation
Thanks to our SaaS model, implementation in your IT landscape takes place in the shortest possible time.
Excellent support
Our experienced Customer Success team is on hand to ensure your Cloud Journey is successful.
100% customer satisfaction
Our customers rely permanently on meshStack for their successful cloud journey.
Weekly updates
meshStack is constantly being developed further and regularly receives new functions.
Made in Germany
meshStack is also suitable for operation in highly regulated environments, such as in the financial or infrastructure sectors, thanks to its extensive compliance support. meshcloud is ISO27001 certified.
Well documented
meshStack has detailed documentation for onboarding, configuration and operation. In the Cloud Foundation Maturity Model (CFMM) we show best practices for the Cloud Journey.
Multiple awards & certifications
Security & Compliance
Cloud Security & Compliance Solution
Consistent cloud security as part of comprehensive cloud governance
A cross-cloud governance model, uniform implementation of security standards, transparency across all cloud environments, centralized in one foundation.
Best practice for cloud security
meshStack offers unique features for secure operation of public and private clouds
Security in the cloud
Tagging, landing zones, policies - consistent, by default
Comprehensive cloud governance must include cloud security and cloud compliance requirements at its core. At the same time, it should give freedom and autonomy to the application teams in your company. To help you build such cloud compliance, meshStack offers a wide range of cloud security and cloud compliance capabilities.
Cloud Landing Zones
Security and Compliance by Design
Implement a consistent security foundation to prevent security breaches so your application teams can build on a secure foundation. meshStack’s cloud landing zone capabilities enable enterprises to securely configure cloud tenants (e.g. AWS Accounts, Azure Subscriptions, GCP Projects) according to centrally defined security and compliance requirements before they are even used.
Cloud tagging
Consistent and comprehensive cloud tagging
Multi-cloud tagging is an indispensable tool when it comes to establishing comprehensive cloud governance in your organization. Tags let you capture metadata about your cloud applications and environments in a structured way. This benefits not only cloud compliance and the security settings of your cloud environments, but also other areas such as tenant management or billing.
Compliance using cloud policies
Compliance-conform cloud environments - for every use case
- Integrate organizational compliance requirements into your cloud governance workflows to achieve greater standardization
- Automate compliance requirements to accelerate application time-to-market
- Provide your application teams with an intuitive user interface to efficiently deploy compliant cloud-native applications
The three principles of meshStack
The perfect balance between agility and control
Further advantages of meshStack
Integration of external approval processes
meshStack offers externally available interfaces to seamlessly integrate systems responsible for approval processes (ServiceNow, ITSM systems) and meshStack.
Enforcement of naming schemes
meshStack provides the ability to enforce standards for project naming and create cloud tenants according to a global naming scheme (depending on platform capabilities)
4-eyes principle
When assigning authorization roles on meshProjects, two independent confirmations by administrators are optionally required. For pending approvals, meshStack sends emails to the people to be approved.
Multi-cloud policies
By defining multi-cloud policies, organizational specifications can be ensured in multi-cloud projects. The defined policies can include and restrict the assignment of users and user groups as well as the use of landing zones.
Discover more advantages of meshStack
Set up for one cloud - use with all clouds
With meshStack, multiple cloud platform integrations are eliminated. Once set up for one cloud, you can add more cloud platforms for the enterprise with just a few clicks. Instead of cloud silos with months-long integration projects, you get an integrated control center for your cloud infrastructure.
Fast implementation
Thanks to our SaaS model, implementation in your IT landscape takes place in the shortest possible time.
Excellent support
Our experienced Customer Success team is on hand to ensure your Cloud Journey is successful.
100% customer satisfaction
Our customers rely permanently on meshStack for their successful cloud journey.
Weekly updates
meshStack is constantly being developed further and regularly receives new functions.
Made in Germany
meshStack is also suitable for operation in highly regulated environments, such as in the financial or infrastructure sectors, thanks to its extensive compliance support. meshcloud is ISO27001 certified.
Well documented
meshStack has detailed documentation for onboarding, configuration and operation. In the Cloud Foundation Maturity Model (CFMM) we show best practices for the Cloud Journey.
Multiple awards & certifications
Tenant Management
Best Practice for Multi-Cloud Management
AWS Accounts, GCP Projects & Azure Subscriptions - Centrally Managed
Use meshStack to manage the tenant lifecycle end-to-end – fully integrated on one platform.
Cloud Tenant Management rethought
With meshStack you manage the accounts of all cloud platforms in just one place
One multi-cloud project for all your clouds
- Automated tenant creation (e.g. Azure Subscriptions or Resource Groups, AWS Accounts, Google Projects)
- Consistent configuration of secure Landing Zones
- Overview of user and cloud platforms
- Cross-cloud project metadata (project owners, cost centers etc.)
- Cross-cloud assignment of cloud access rights
- Direct access to native cloud tools (APIs, CLIs, consoles, etc.)
- Easier switching between cloud platforms (reduced lock-in)
- Cloud inventory for more transparency
The Leading Solution for AWS Accounts, Azure Subscriptions & GCP Projects
Simplify your cloud governance
In meshStack, a cloud tenant refers to an account with a cloud provider. For example, a tenant can be an account with AWS, a subscription with Azure, or a project with GCP. Companies with a large number of cloud tenants with different cloud providers need central tenant management: the structured creation and management of accounts across all clouds.
Multi-cloud project management
Combined management of users and access permissions - from all cloud accounts
meshStack enables true multi-cloud project management: For this purpose, cross-cloud account projects are created – so-called meshProjects. A meshProject is a cross-cloud organizational unit in which all components belonging to a cloud application are bundled organizationally. At the same time, meshProjects always remain isolated from each other (multi-tenancy).
What is included in a meshProject
- Overview of the cloud platforms, people and their roles involved in a project.
- Uniform management of users and their access roles
- Consolidated view of cloud tenants and services belonging to a project
- Management of project metadata ("tags") via a company-specific tag catalog
- Management of consumption and billing data
Quota management
Some cloud platforms have interfaces that allow the configuration of restrictions on a tenant’s resource consumption (quota). These can be stored in meshStack: Either as default quota for newly created meshProjects (via landing zones) or on project level.
Use Case
Cloud tenant creation with meshStack
1. Team Lead Tom or one of his developers create a meshProject on the meshStack platform and assign appropriate access roles within the team.
2. Tom selects the cloud platform(s) his team will need for the project, such as Azure.
3. Tenants are created, given an appropriate landing zone, and then given the desired access roles for the team for the team – fully automated by the system.
4. The meshStack platform continuously replicates the meshProject to the connected cloud platforms in case of changes (e.g. user permissions).
Discover more advantages of meshStack
Set up for one cloud - use with all clouds
With meshStack, multiple cloud platform integrations are eliminated. Once set up for one cloud, you can add more cloud platforms for the enterprise with just a few clicks. Instead of cloud silos with months-long integration projects, you get an integrated control center for your cloud infrastructure.
Fast implementation
Thanks to our SaaS model, implementation in your IT landscape takes place in the shortest possible time.
Excellent support
Our experienced Customer Success team is on hand to ensure your Cloud Journey is successful.
100% customer satisfaction
Our customers rely permanently on meshStack for their successful cloud journey.
Weekly updates
meshStack is constantly being developed further and regularly receives new functions.
Made in Germany
meshStack is also suitable for operation in highly regulated environments, such as in the financial or infrastructure sectors, thanks to its extensive compliance support. meshcloud is ISO27001 certified.
Well documented
meshStack has detailed documentation for onboarding, configuration and operation. In the Cloud Foundation Maturity Model (CFMM) we show best practices for the Cloud Journey.
Multiple awards & certifications
Identity & Access Management
Multi Cloud Identity & Access Management (IAM)
Management of identities, users, roles & permissions
Roles, users, permissions – for all clouds in one place: Manage cloud access and get developers into the cloud in minutes.
The leading cloud IAM solution
meshStack simplifies IAM in single or multi-cloud environments
IAM for AWS, Azure, GCP & co.
Multi Cloud IAM - One of the first steps in the Cloud Foundation
Clean management of identities and permissions in the environment of cloud providers such as AWS, Azure or Google Cloud Platform is an integral element of a compliant (multi-)cloud strategy. meshcloud provides a simple and secure solution for managing users and permissions across all the cloud platforms you have in use.
The right IAM architecture is crucial
The bridge between existing identity management systems and the cloud
We integrate flexibly with your existing and established identity management systems. To do this, we work with you to develop a cloud IAM architecture that addresses the specific needs of your organization, considers regulatory requirements of your industry, and provides your application teams with a cloud-native onboarding experience for platforms such as AWS, Azure, and GCP.
One click to all clouds
- Multi-cloud SSO
- Self-Service User Interface
- Integration with existing solutions (AD, LDAP, etc.)
- RBAC (Role-based Access Management)
- Integrated approval workflows (4-eyes principle)
- Central control of cloud access rights
- Auditable access logs
- IAM integrations to AWS, Azure, GCP, OpenShift, OpenStack and Cloud Foundry are integral elements of the product
- Recertification processes integrated
- Simple, API-driven import of user groups
- External access: "Partners" can create customer accounts for others and take over administrative tasks
Cloud-native tooling meets enterprise IAM
Challenges with Cloud IAM
From developer onboarding to long-term management of user and permission lifecycles, managing access to cloud infrastructure is complex and security-critical. Authorizations should be granted as sparingly as possible (principle of least privilege) to reduce security risks. At the same time, you don’t want to limit the productivity of developers due to a lack of access rights. A simple and transparent process for assigning access rights is therefore essential.
Further advantages of meshStack
Self-Service
Conveniently assign and revoke permissions for all cloud platforms via self-service
Faster cloud onboarding
Replace tedious approval processes with cloud-native self-service approaches to accelerate your cloud onboarding
User Lifecycle Integration
Connect your cloud permissions to the central user lifecycle according to SCIM standard to prevent the emergence of unwanted "zombie" users in active cloud environments
Transparency
Avoid shadow IT through a central and transparent overview of all cloud users and projects
Compliance
Benefit from our experience in the multi-cloud environment and balance agility and control optimally - with cloud-native processes that meet your compliance requirements
Automated IAM
Define once, use everywhere. Leverage existing IAM groups and assign permissions to specific cloud tenants without manual effort
Use Case
Cloud onboarding with meshStack
1. Tom is Application Team Lead. He registers the new product, which his team is developing on the meshcloud platform.
2. He invites his development team, which is notified by e-mail.
3. The team creates cross-cloud meshProjects centrally. Access and costs are managed here.
4. Developers get direct cloud access and can start development.
Best Practice for Multi Cloud IAM
How IAM works with meshStack
One identity across all cloud platforms
Control identities and access rights centrally via the meshcloud platform. This reduces the complexity of your cloud environment and increases control and auditability.
Integration with local identity provider
You can integrate one or more identity providers (Active Directory, LDAP, etc.) with meshStack to leverage identities from multiple sources and manage access to the connected clouds.
Multi-Cloud Single Sign-On (SSO)
After logging in to the meshcloud platform, developers get directly into the cloud tenants of the connected cloud platforms with one click and can use their native tools.
Discover more advantages of meshStack
Set up for one cloud - use with all clouds
With meshStack, multiple cloud platform integrations are eliminated. Once set up for one cloud, you can add more cloud platforms for the enterprise with just a few clicks. Instead of cloud silos with months-long integration projects, you get an integrated control center for your cloud infrastructure.
Fast implementation
Thanks to our SaaS model, implementation in your IT landscape takes place in the shortest possible time.
Excellent support
Our experienced Customer Success team is on hand to ensure your Cloud Journey is successful.
100% customer satisfaction
Our customers rely permanently on meshStack for their successful cloud journey.
Weekly updates
meshStack is constantly being developed further and regularly receives new functions.
Made in Germany
meshStack is also suitable for operation in highly regulated environments, such as in the financial or infrastructure sectors, thanks to its extensive compliance support. meshcloud is ISO27001 certified.
Well documented
meshStack has detailed documentation for onboarding, configuration and operation. In the Cloud Foundation Maturity Model (CFMM) we show best practices for the Cloud Journey.
Multiple awards & certifications