Inventory is the starting point. The value shows up in the tools built on top — network path tracing, WAF review, risk-scored drift, live pricing, and the intelligence layer that turns raw data into an action list.
Four flagship tools with real screens — network tracing, WAF review, CIS audit, live pricing.
Pick any VM and Meridian walks the network chain — NIC, subnet, NSG, effective rules, route table, public IP — reproducing the same source-to-destination trace az network watcher gives you. Then the traffic simulator evaluates a given (source, port) against every rule in priority order and shows exactly which one matched.
Cost, Reliability, Security, Operational Excellence, Performance Efficiency. Every VM, storage account, key vault, and public IP is scored against the WAF checklist with letter grades and an overall roll-up. Findings link back to the exact resource — no leaving the report to drill in.
RDP, SSH, and database ports open to the Internet. Storage accounts allowing HTTP or public blobs. Key Vaults without purge protection. App Services that don't enforce HTTPS. All flagged with the CIS control ID they violate, ready to export as an audit PDF.
Every VM cost is pulled from Microsoft's public Retail Prices API for the exact SKU and region. PAYG, 1-year RI, and 3-year RI rates arrive in the same round trip.
| SKU | PAYG | 3-Yr RI | Save |
|---|---|---|---|
| Standard_D4s_v5 | $192 | $77 | −60% |
| Standard_D8s_v5 | $384 | $154 | −60% |
| Standard_B2ms | $61 | $25 | −59% |
| Standard_E4s_v5 | $252 | $101 | −60% |
Every question a cloud operator asks — IaC validation, network, security, cost, change, monitoring, custom — answered under one shell. All read-only. Reader on Azure is all it needs.
Validate any code before you deploy.
Trace, simulate, and root-cause every flow.
WAF, CIS, secrets, and NSG posture.
Live prices, not fallback estimates.
Two-line reviews, not 200-line diffs.
Your own KQL, run cross-subscription.
CPU, memory, alerts — in one shell.
Ten focused tools that answer the exact question in front of you during a change or an incident — each one collapses a dozen Portal blades into a single, read-only view.
Every classifier runs locally on data Meridian already fetched. No LLM API call, no vendor pipeline, no shared training data. The intelligence lives on the same machine as your session.
Azure Advisor tells you "downsize this VM." Meridian fetches the last 30 days of CPU metrics for every VM Advisor flags and grades each recommendation. Only high and medium confidence rolls up in trusted savings. Low-confidence claims are struck through — visible proof that Meridian disagreed with Advisor.
Every drift diff carries a risk verdict — RISKY (someone opened SSH to the Internet, storage went public), NOTABLE (a VM was resized), or benign (tags changed). Risky items float to the top of the diff table.
Meridian captures a daily rollup of your subscription — VM count, orphan waste, risky NSG rules, and eleven other metrics — into your browser. On subsequent loads it compares today's numbers to the median of the last week and flags what's out of line. No external service, no shared training data.
Meridian does the analysis for you and hands back plain-English answers — what to fix, what to save, what to watch next. No black box, no AI guesswork, and nothing about your estate ever leaves your tenant.
You get a realistic idea of next month's bill before it lands, so a creeping spike shows up as a trend you can act on early.
Shows the easiest route an attacker could take to reach your crown jewels, so you know which single link to cut first.
Recommends a size that comfortably handles real peaks without paying for capacity that sits idle.
Catches gradual problems — a slow memory leak, creeping cost — that fixed thresholds miss until it's too late.
A single 0-100 health number for how well your network limits the blast radius if one subnet is compromised.
Shows the real yearly money you'd save by committing — without pushing you to over-commit to capacity you won't use.
Every insight is backed by proven, auditable math that runs right in your browser. You get the answer up front — the how is always one click away.
Every view is wired end-to-end against Azure Resource Manager. Read-only across the board. Exportable to CSV and branded PDF.