Skip to Content
Self-Hosted v1.0 Production Release | Zero Cloud Write Access Required

What Runs Where? Who Owns It?
How Much Does Each Application Cost?

The self-hosted application inventory and cloud cost workspace for IT agencies, MSPs, and engineering teams. Join multi-cloud discovery (AWS & Azure), Linux & Windows telemetry, interactive 2D topology mapping, and deterministic shared-cost allocation — 100% within your own perimeter.

Explore Interactive Demo Get a Quotation Request Walkthrough
Read-Only Collectors
Air-Gapped / Offline UI
Deterministic Conservation
Audited Ownership Records
Live Interactive Sandbox

Explore InfraLens in Action

Click on nodes, drag dependencies, or toggle between the 2D Application Map and Deterministic Cost Allocation view.

Topology Mode Showing Domain → Service → Host → Cloud relationships
Healthy (Active) Observed 4m ago

checkout.acmecorp.com

Domain & HTTP Site

Customer Owner: Acme Retail Ltd
Hosted On: aws-ec2-prod-web-01
Platform / Runtime: Ubuntu 24.04 • Nginx + Gunicorn
TLS Certificate: Valid (38 days remaining)
Allocation Rule: Equal Sites Share (33.33%)
Identity Confidence: 100% (Confirmed Link)
InfraLens Operational Insight

This domain shares aws-ec2-prod-web-01 with 2 other customer sites. Under the Equal Sites policy, its monthly server and disk cost is deterministically split at exactly 33.33333333% with zero unallocated leakage.

Engineered For Clarity

Built Around the 5 Questions That Paralyze IT Teams

Traditional tools dump raw metrics or disconnected cloud invoices. InfraLens bridges operational inventory directly with defensible financial attribution.

PR-01

Unified Multi-Cloud Inventory

Merge Linux (Ubuntu, Debian), Windows Server, AWS EC2/EBS, and Azure VMs through an explicit, immutable resource identity. Hostname alone never blindly merges hosts.

  • ✓ Canonical UUID & observation merging
  • ✓ Read-only cloud connectors (zero write tokens)
  • ✓ Stale asset & orphan identification
PR-02

2D Living Dependency Topology

Trace the exact lineage: Domain → Virtual Host → Process / Runtime → Host → Cloud / On-Prem Account. Solid edges represent verified links, dashed edges represent inferred candidates.

  • ✓ Nginx, Apache & IIS site binding discovery
  • ✓ Candidate link confirmation with confidence scores
  • ✓ Sub-second interactive graph filtering
PR-03

Deterministic Cost Engine

Enforce strict financial conservation: Input = Allocated + Unallocated + Excluded. Allocate shared servers via Direct, Fixed %, or Equal Sites policies with 8-decimal precision.

  • ✓ AWS CUR & Azure Cost Management native import
  • ✓ On-premises manual expense amortization
  • ✓ Zero cross-currency summation errors
PR-04

Health & Telemetry Monitoring

Lightweight heartbeats, CPU/Memory/Disk metrics, scheduled HTTP probes, and automated TLS/SSL certificate expiry countdowns. Unknown states are never falsely shown as healthy.

  • ✓ Host heartbeats with stale status detection
  • ✓ TLS certificate expiry tracking with day thresholds
  • ✓ Safe in-app threshold alerts
PR-05 / PR-06

Change Audit & Defensible Reports

Every configuration change, added host, and ownership reallocation is captured in an immutable audit log. Export customer statements to self-contained HTML and injection-safe CSVs.

  • ✓ Reproducible run IDs with SHA-256 inputs
  • ✓ Formula-safe CSV export (neutralizes spreadsheet exploits)
  • ✓ Clean browser print stylesheet for PDF exports
PR-08 / PR-09

Zero-Trust & Air-Gap Guarantees

Your data stays entirely in your custody. No vendor telemetry, no remote shell commands, no external font/script calls, and Argon2id + TOTP authentication out of the box.

  • ✓ 100% offline-ready operations
  • ✓ Zero shell console or agent remote execution
  • ✓ Single Docker Compose control plane with PostgreSQL
Customer Personas

Purpose-Built for Infrastructure Teams

Tailored to the exact workflows of web agencies, Startup, MSPs, and internal engineering departments.

Digital & Web Agencies

"Which client sites share which VPS?"

Agencies host dozens of client WordPress, Laravel, or custom apps across shared cloud servers. When an issue occurs or an invoice is due, nobody knows who is running where.

Outcome with InfraLens:
Answer any client ownership question in under 2 minutes. Bill shared server costs fairly using Equal Sites allocation.
MSPs & Hosting Providers

"Defensible customer chargebacks"

Reconciling cloud invoices against customer contracts at month-end takes days of spreadsheet surgery. Client questions over charges lead to uncollected revenue.

Outcome with InfraLens:
Generate immutable, audited customer cost statements. Pinned run IDs prove exact calculation lineage.
Internal IT & Engineering

"Eliminate shadow IT & orphan spend"

Engineering spins up VMs and databases that nobody owns. Management demands department-level cost attribution without buying an expensive enterprise APM suite.

Outcome with InfraLens:
Uncover unowned resources instantly. Map applications directly to business units and track configuration drift across releases.

Stop Running Infrastructure on Stale Spreadsheets

See how InfraLens eliminates the manual guesswork and audit liabilities of legacy methods.

Capability The Old Way (Spreadsheets + Ad-Hoc Scripts) The InfraLens Way
Asset Inventory Manually updated Excel sheets that go obsolete the moment a VM or site changes. Automated agent intake & cloud connectors merge instances into a canonical state.
Shared Cost Allocation Crude guesswork in formulas. Rounding discrepancies cause invoice disputes. Mathematically verified conservation: Allocated + Unallocated + Excluded = Input.
Dependency Mapping Tribal knowledge in engineers' heads. Outages happen when forgotten upstreams drop. Interactive 2D topology graph showing verified domain-to-host relationships.
Cloud Permissions Broad administrative read/write keys that create severe compliance vulnerabilities. Strictly read-only APIs. No cloud write permissions or remote command execution.
Data Privacy & Egress SaaS platforms phone home, storing private architecture and telemetry in third-party clouds. 100% self-hosted on your own hardware or VPC. Operates fully offline without outbound internet.
Monthly Reporting Time 15 to 40 hours spent each month hunting down AWS/Azure line items. Instant report generation in under 60 seconds with reproducible SHA-256 run IDs.
Interactive ROI Estimator

Calculate Your Operational Time & Cost Savings

Adjust the sliders based on your fleet size and cloud expenditure to see how much billing reconciliation effort and orphan cloud spend InfraLens recovers each month.

25 Hosts
120 Applications
₹2,50,000 / mo

Estimated Monthly Return

Reconciliation Hours Saved
22 hrs
~ 75% faster month-end closing
Unallocated Waste Recovered
₹30,000
Average 12% orphan resources
Estimated Payback Period: InfraLens pays for itself in less than
< 5 Days
Predictable Licensing

Self-Hosted Editions Tailored to Your Scale

Choose an edition tailored to your fleet. Deployed directly to your own Linux host via Docker Compose.

Starter Edition Small Agencies

Ideal for boutique dev shops and small agencies managing up to 10 servers.

  • Up to 10 Monitored Hosts
  • Up to 30 Applications
  • AWS & Azure Cost Import (CUR/CSV)
  • 2D Application Dependency Map
  • 1 Organization, Single Node Deploy
RECOMMENDED FOR TEAMS
Team Edition Growing Teams

The complete reference deployment for mid-size MSPs and multi-app IT operations.

  • Up to 25 Monitored Hosts
  • Up to 200 Applications
  • Live AWS & Azure API Connectors
  • Equal Sites & Fixed % Allocation Rules
  • 12 Months Retained Financial History
  • Formula-Safe CSV & HTML Statement Exports
MSP Edition High Scale

Designed for large MSPs, hosting providers, and high-density infrastructure fleets.

  • Expanded Host & App Capacity
  • Unlimited Internal Customer Records
  • Air-Gapped Offline License Key Bundle
  • External PostgreSQL Database Support
  • Priority Architecture Guidance
Technical Specification

Modular Monolith Architecture. Zero SaaS Overhead.

InfraLens deploys as a cohesive Docker Compose stack. No Redis, Kafka, Elasticsearch, or third-party cloud brokers needed. Everything is backed by trusted PostgreSQL.

Reference Sizing Target Runs comfortably on 4 vCPU, 8 GiB RAM, 100 GiB SSD. Handles 25 agents, 200 applications, 4 cloud accounts, and 12 months retained financials.
Enterprise-Grade Security Baseline Argon2id password hashing, mandatory TOTP admin bootstrap, AES-256-GCM encryption for cloud credentials at rest, strict CSRF tokens.
Rapid 60-Minute Onboarding CLI bootstrap takes minutes. Single-use enrollment tokens securely register Linux & Windows nodes with zero manual SSH key sharing.
bash — deploy/compose/docker-compose.yml 
# 1. Clone repository & configure environment
git clone git@github.com:infralens/infralens.git /opt/infralens
cd /opt/infralens && cp deploy/compose/.env.example .env

# 2. Launch production modular monolith
docker compose -f deploy/compose/docker-compose.yml up -d

# 3. Bootstrap initial administrator with TOTP
docker compose exec web python -m infralens.cli bootstrap \
  --username admin \
  --email ops@acme.com \
  --org "Acme Infrastructure"

[SUCCESS] Organization 'Acme Infrastructure' provisioned.
[SUCCESS] Admin bootstrap token generated.
[READY] Web UI listening on https://127.0.0.1:8443
Clear Answers

Frequently Asked Questions

Everything you need to know about InfraLens security, connectors, and deployment.

Does InfraLens require write permissions in our AWS or Azure clouds? −
Absolutely not. InfraLens operates under a strict read-only invariant (PR-09). Connectors only require metadata reading permissions (such as ec2:DescribeInstances, ce:GetCostAndUsage, or Azure Cost Query POST). InfraLens cannot modify, reboot, resize, or delete any cloud asset.
Can the InfraLens agent be used to execute remote commands or scripts? +
No. Remote command execution is architecturally forbidden. The InfraLens lightweight collector runs with unprivileged system access and only collects host metrics (CPU/RAM/disk), process listings, and web server configuration bindings (Nginx, IIS). There is no remote shell, no plugin upload mechanism, and no inbound network port opened on the agent.
How does the cost allocation engine handle shared hosting servers? +
InfraLens includes explicit mathematical allocation rules: Direct (100% to one application), Fixed % (custom weights summing to 1.0), and Equal Sites (allocates shared host cost proportionally based on the number of active customer sites hosted). All calculations adhere to the conservation law: input_total = allocated_total + unallocated_total + excluded_total to 8 decimal places.
Can InfraLens run in a completely isolated, air-gapped network? +
Yes. The entire user interface, dependency graphs, and reporting templates work with zero outbound internet requests. Billing data can be imported manually via standard AWS CUR or Azure Cost Management CSV exports. Licensing is verified via an offline cryptographically signed license file without contacting vendor servers.
How are customer cost reports generated and shared? +
Reports can be exported as self-contained HTML statements or injection-safe CSV files with reproducible run IDs. They include clear management notices and audit lineage. Customer records serve as internal business dimensions for your staff; external customers do not log into the instance.
Direct Specialist Consultation

Request an Architect Walkthrough

Connect directly with our infrastructure engineering team at sales@bithost.in. We will review your AWS/Azure architecture, discuss custom allocation policies, and prepare your deployment package.

Pre-filled email sent directly from your own mail client
30-Day Guided Pilot Evaluation
Fast response within 4 business hours
Direct sales inquiries: sales@bithost.in

Schedule Your Architecture Session

Fill in your details and click below to open your host mail client pre-addressed to sales@bithost.in.