Stacklet is a cloud governance company built by the team behind Cloud Custodian, the open-source policy engine that is now a CNCF project. It helps cloud, FinOps and security teams control cost, security and compliance across large cloud estates by writing governance rules as code and letting the platform find and fix resources that break them.
The same policy-as-code approach now extends to AI, where teams need to see and limit what models and agents spend.
At A Glance
| Vendor | Stacklet |
|---|---|
| Category | Cloud governance, FinOps and policy as code |
| Deployment | Commercial platform built on open-source Cloud Custodian |
| Agentic AI | Jun0 assistant, Token Custodian, Stacklet MCP, Skills for Coding Agents |
| Customers | Avalara, REPAY |
| Founded | By Travis Stanfield and Kapil Thangavelu |
| Market classification | Governance, Risk & Compliance |
What Stacklet Does
Large cloud estates drift: untagged resources pile up, encryption is skipped, someone changes a setting by hand in the console. Stacklet’s answer works in three steps: discover, fix and prevent. Teams describe policies in a declarative, human-readable language that needs about 10 times fewer lines of code than manual scripting. The platform gathers non-compliant resources, puts them in context and runs multi-step remediation, either autonomously or after a human approves, with a reported saving of up to 50% on the cloud bill.
Products
Stacklet Platform
The commercial platform runs Cloud Custodian for teams that want governance at scale without maintaining the open-source engine themselves; it upgrades automatically to the newest version. It ships with more than 1,500 out-of-the-box policies and enforces CIS, NIST CSF, PCI-DSS and HIPAA continuously. Typical guardrails include golden AMI enforcement, encryption at rest, ClickOps prevention, network reachability control, IAM best practices and tagging compliance.
AssetDB
Governance reports are slow when nobody has an accurate inventory. AssetDB keeps a real-time record of cloud resources, costs and configurations that can be queried with SQL or natural language, including cloud AI services, GPUs, custom model infrastructure and storage. Stacklet reports an 80% cut in governance reporting time.
IaC Governance
IaC Governance runs the same policy language in CI/CD pipelines, so misconfigurations are caught before deployment rather than cleaned up afterwards. Stacklet IaC Auto-fix extends this to code written by agents.
Jun0
Jun0 is an AI-enabled FinOps assistant for cloud governance. Engineers and FinOps analysts can ask ad-hoc questions about operations, cost, security and compliance, have it write and dry-run policies from a plain-language description, and receive recommendations for policies and remediation.
Token Custodian
As AI spend grows, finance and platform teams need to know who is burning tokens and why. Token Custodian acts as a control plane for AI token attribution and usage governance. It attributes tokens and agent runs to teams, projects, apps and cost centres. It enforces budgets through alerts, rerouting or approval requests, and routes requests between efficient and premium models.
Cloud Custodian
Cloud Custodian is the open-source project at the centre of the platform, created by Kapil Thangavelu and now a CNCF incubating project. Stacklet’s team are its creators and lead maintainers. The project has more than 500M downloads and more than 500 contributors.
How It Works
Cloud Custodian evaluates policies against resources in each connected Amazon Web Services, Microsoft Azure, Google Cloud or Tencent Cloud account and triggers remediation; AssetDB supplies the resource, cost and configuration data that both the policy engine and Jun0 read. The same policies run earlier in CI/CD through IaC Governance. Token Custodian is configured in the UI or as policy-as-code in Git. Alerts and remediation tasks reach teams through Slack, Jira and ServiceNow, so fixes can be approved where people already work.
Agentic AI Capabilities
Jun0 Grounding
Jun0 runs on an LLM grounded in Stacklet’s own real-time cloud asset database and the customer’s own tagging structure, which keeps its answers and generated policies specific to that environment.
Runaway Agent Containment
Token Custodian also sets limits on agent steps, run time and context growth. When a run crosses a limit it can pause the run, notify the owner or open a ticket. It covers OpenAI, Anthropic, AWS Bedrock, Google Vertex and Azure AI.
Agentic Code Governance
Stacklet Skills for Coding Agents, Stacklet MCP and Stacklet IaC Auto-fix let coding agents such as Claude Code work within governance policy, alongside AI spend detection and adaptive AI guardrails.
Integrations
| Area | Integrations |
|---|---|
| Ticketing and chat | Slack, Jira, ServiceNow |
| Developer tooling | Git, Claude Code |
Company Background
| Founders | Travis Stanfield and Kapil Thangavelu, who met at Capital One |
|---|---|
| Open source | Creators and lead maintainers of Cloud Custodian |
| Memberships | Member of the Agentic AI Foundation (AAIF) and a Premier Member of the FinOps Foundation |
Note: This overview is compiled from Stacklet’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.