It's been two months since this profile received a new review

Sonrai Security Reviews & Product Details

Sonrai Security is a leading cloud privileged access management solutions provider. With a mission to empower enterprises of all sizes to innovate securely and confidently, Sonrai Security delivers identity, access, and privilege security for companies running on AWS, Azure, and Google Cloud platforms. The company is renowned for pioneering the Cloud Permissions Firewall, enabling one-click least privilege while supporting developer access needs without disruption. Trusted by Cloud Operations, Development, and Security Teams at leading companies across various industries, Sonrai Security is committed to driving innovation and excellence in cloud security. Sonrai’s Cloud Permissions Firewall, the leading cloud PAM solution, gets cloud access under control, slashes the privileged attack surface, and automates least privilege all without impeding DevOps. The Cloud Permissions Firewall uses privileged permission intelligence and usage monitoring to determine who needs what permissions in your cloud. Then, with one-click, it eliminates all unused sensitive privileges across your entire multi-cloud estate. Just-in-time access and exceptions are granted to roles on the fly as new needs come up so development goes uninterrupted. SecOps teams spend 97% less time achieving least privilege and slash the attack surface by 92%.

Seller

Sonrai Security

Discussions

Sonrai Security Community

Product Description

Sonrai public cloud security platform delivers a complete risk model of all identity and data relationships, including activity and movement across cloud accounts, cloud providers and third-party party data stores.

Overview by

Joseph Barringhaus

Pricing

Pricing provided by Sonrai Security.

Starter

$99.00

Enterprise

$125.00

Per Year

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

Sonrai Security Integrations

(4)

Integration information sourced from real user reviews.

Sonrai Security Media

Sonrai Security Demo - Cloud Permissions Firewall Homepage

In the click of a button protect excessive permissions, disable unused services and regions, and quarantine zombie identities.

Sonrai Security Demo - Protect Excessive Permissions

Know who is and isn't using their sensitive permissions, and swiftly protect them with a high-level policy.

Sonrai Security Demo - Exempt Necessary Identities Who Need Access

A high-level policy protects unused sensitive permissions, but Cloud Permissions Firewall exempts the identities who need the access so no one is interrupted.

Sonrai Security Demo - Integrated ChatOps for Access Requests

Integrate with your trusted chat tools to receive a seamless permissions-on-demand workflow that instantly grants new access needs.

G2 reviews are authentic and verified.

Here's how.

Brendan P.

Director, DevSecOps

Mid-Market (51-1000 emp.)

8/8/2025

"IAM simplified"

5/5

What do you like best about Sonrai Security?

I discovered Sonrai Security at AWS re:inforce 2024, and within 15 minutes, I had a full POC set up in AWS and running—nothing fancy, just smooth and effective. From day one, it’s filled a critical gap in our access protections.

Here’s what sticks out:

Effortless Least Privilege via Cloud Permissions Firewall: One click and it quarantines zombie roles, disables unused services and regions, and tightens permissions across the entire cloud estate—without breaking anything.

Third-party Tracking and Management: In a single screen, I can track every ISV with access to my cloud, understand if their roles use best practice protections, and disable them with a single click for later cleanup. Better is that I can prevent unapproved new access by setting the default action to block.

Super-simple Permissions-on-Demand — When someone needs access, it’s a seamless ChatOps workflow that grants just what is required, only when it’s needed. No more standing permissions, no Jira tickets for role increase, and a simple audit trail of yes/no approvals with time constraints sent easily directly to the people who need to approve.

Just-in-Time (JIT) Access with AI-powered summaries: This is the next level. Pulling temporary elevated access only when needed, policy-enforced, and fully auditable. With integration into Amazon Bedrock, each privileged session generates a concise, human-readable summary. For businesses in regulated industries, it's the perfect auditing solution for user access.

Genuine usability and visibility: G2 users say it best: “Sonrai gave us unparalleled visibility and control over identity governance and cloud permissions,” and “the solution is very easy to use and implementation was also quick.”

In short, what I appreciate most is how Sonrai simplifies complex security challenges (and how I never have to write another SCP!). It’s powerful and intelligent, but never heavy. It just works. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

Nothing. Not only is Sonrai a fantastic product that plugs a unique gap, but the team is incredibly dedicated and responsive to their customers. They take our feedback, and the next thing we know, they deliver those features. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

Sonrai security took what would have been an extremely complex challenge for my team of just even observing access controls in my AWS organization and provided a way for me to easily resolve those issues. Its literally a problem I wouldnt have been able to solve without significantly increased headcount and probably a year of dedicated effort. Instead I was able to scope AWS services and regions, quarantine zombie roles, identify and clean overly permissioned roles, and manage my third-party ISV access with literally a few clicks in their UI. Its that powerful while also allowing me to scope at various levels for Org, OU, and Account.

To accomplish the same thing of just the cleanup would have been somewhere between monumental and insurmountable, but not only have i solved the cleanup issue, its ongoing protection without my team having to worry about writing AWS SCPs and potentially breaking production. Review collected by and hosted on G2.com.

Esaie B.

Engineer III

Mid-Market (51-1000 emp.)

8/6/2025

"Streamlined and Sophisticated Cloud Privileged Access Management"

5/5

What do you like best about Sonrai Security?

Sonrai delivered an exceptionally seamless experience for implementing just-in-time access governance across our cloud infrastructure. The deployment process was remarkably straightforward—operational within minutes—with effortless Slack integration that enabled real-time access orchestration. The platform's elegant architecture combines performance with intuitive design, while the automated approval mechanisms function with impressive precision and reliability. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

My sole recommendation centers on enhancing transparency regarding automated approval workflows, particularly in scenarios involving shared role assignments among multiple users. This represents a minor consideration, and the support team demonstrated exceptional responsiveness in providing comprehensive guidance. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

Our organization has historically grappled with excessive persistent access privileges creating security vulnerabilities. Sonrai's Cloud Permissions Firewall has enabled us to systematically eliminate dormant permissions while transitioning from static access models to dynamic, approval-driven provisioning with intelligent expiration controls. This transformation has substantially mitigated risk exposure while delivering enhanced governance and operational visibility. Review collected by and hosted on G2.com.

Prashanth G.

SOC Lead Engineer

Mid-Market (51-1000 emp.)

8/6/2025

"A significant breakthrough in fixing privileges in the cloud."

5/5

What do you like best about Sonrai Security?

Sonrai's Cloud Permissions Firewall is purpose-built for cloud environments, avoiding the limitations of legacy access management solutions retrofitted for cloud use. It delivers low-latency performance with minimal deployment overhead and enables rapid, just-in-time provisioning for high-sensitivity roles. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

The only challenge we encountered was aligning initial permission set mappings within AWS Identity Center. Fortunately, the support team was highly responsive and quickly provided clear guidance to resolve the issue. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

Standing privileges, stale admin roles, and zombie accounts have consistently posed challenges for us. These common issues were quickly eliminated with Sonrai’s PAM approach. Access is now governed through policy-based controls, with approval workflows integrated directly into Microsoft Teams—our existing collaboration platform. This allows us to maintain agility without compromising auditability, control, or visibility. Review collected by and hosted on G2.com.

Muthuraj G.

Cloud Support Engineer

Mid-Market (51-1000 emp.)

8/11/2025

"Cloud PAM That Actually Works"

5/5

What do you like best about Sonrai Security?

Sonrai’s Cloud Permissions Firewall delivered the speed and simplicity we were looking for—along with real, immediate results. Deployment was quick, and within minutes, we saw it in action, automatically cleaning up thousands of unused privileges across our AWS environment. The interface is user-friendly, the controls are powerful, and it’s easy to navigate and master. We especially appreciate how fast it was to get started and how it simplifies securing our environment without requiring manual effort. It’s the first PAM solution we've encountered that truly matches the speed and agility that cloud teams demand. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

There were a couple of minor display bugs during early testing, though the Sonrai team responded with speed and delivered fixes. They’ve been transparent and proactive in regard to resolving any edge cases. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

Our biggest challenge was managing privileged human access—users were accessing resources and permissions we couldn’t fully see or control. Sonrai’s Cloud Permissions Firewall addressed this by removing unused privileges and replacing always-on access with just-in-time access. Now, access is granted only when needed and only after proper approval. As a result, our attack surface has been significantly reduced by eliminating unnecessary privileges and identities.

We also appreciate the flexibility Sonrai offers—it can be deployed broadly or targeted precisely where needed, thanks to its granular controls and customizable enforcement levels. Integration with Teams makes it easy for users and approvers to manage access in real time, while detailed session summaries give us visibility into activities we previously missed. Review collected by and hosted on G2.com.

Verified User in Insurance

Enterprise (> 1000 emp.)

8/11/2025

"AWS IAM Controls made Easy"

5/5

What do you like best about Sonrai Security?

The overall workflow was amazing start to finish when it was protecting services and identities, it made sense what/how/when things were happening.

The Setup was clear and well thought out, can deploy a top to bottom protection in a few hours.

The Customer Service was always top notch and would quickly evaluate the issue with a zoom call within a quick SLA. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

The UI was a bit tricky to navigate, when mass updating settings, it would reset or clear filters and reload the screen constantly. Future versions or deployments can easy fix that issue.

Deploying changes took a long time, would have to iterate the whole stack versus the one item you were updating, but I believe that was already on a release branch. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

From my perspective, it was controlling Identity with 1 plane of glass. Roles/Users/Policies all being controlled for all of the AWS Accounts. Made changes and updates simple. Easy to lock down a service/Account very quick and effective. With the ability to revert just as easy. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

8/12/2025

"A fix for untamed privileges in AWS"

5/5

What do you like best about Sonrai Security?

Sonrai's analytics, policies, and quarantine workflows let us lock down excessive permissions in a controlled, risk-aware way. It’s different from our other visibility tools, it’s enforcement. The ability to target unused or risky privileges and act instantly is a huge leap forward for cloud IAM. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

There’s a learning curve if you want to go deep on advanced configuration, but the Sonrai team supports you well through onboarding. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

We needed a way to implement least privilege, remove unused permissions, and secure high-risk identities in AWS. Sonrai replaces what AWS and traditional PAM tools can’t do. We now have automated control over everything from human users to machine identities to third-party access.

It’s real cloud PAM—not a bolt-on or a siloed tool. It helps our team address identity risks in AWS at scale without slowing down developers. It’s fast, clean, and flexible. Review collected by and hosted on G2.com.

Nisha J V.

Project Manager

Mid-Market (51-1000 emp.)

5/13/2025

"Exceptional Cloud Identity & Data Governance Platform"

2/5

What do you like best about Sonrai Security?

Sonrai Security gave us unparalleled visibility and control over identity governance and cloud permissions. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

Sonrai's platform provides deep insights into identity access paths, risky entitlements, and over-permissioned accounts across multi-cloud environments. The user interface is clean and easy to navigate, making complex security data more actionable. The Cloud Permissions Firewall is particularly impressive — it helps enforce least privilege policies with minimal friction. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

Sonrai Security helps us identify and eliminate excessive permissions and risky identity access paths across our cloud infrastructure (AWS, Azure, and GCP). This has drastically improved our security posture, enabled compliance with internal policies, and reduced the chances of data exposure. The platform also ensures continuous monitoring and provides actionable insights, which streamline our audits and remediation efforts. Review collected by and hosted on G2.com.

Cole H.

IT Support Specialist

Marketing and Advertising

Enterprise (> 1000 emp.)

8/6/2025

"Least privilege in days rather than months"

5/5

What do you like best about Sonrai Security?

Sonrai saved us months in manual effort to get to least privilege with Chatops permissions firewall enabler and automated SCP management which had been a painpoint for years. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

If we ever get off of it, we will have to do all of the work manually. Review collected by and hosted on G2.com.

Hitesh N.

Senior Engineer

Information Technology and Services

Enterprise (> 1000 emp.)

1/28/2025

"Best Solution for identity and data governance."

4.5/5

What do you like best about Sonrai Security?

Its ability to simplify cloud security by focusing on identity and data governance. It helps uncover over-permissioned accounts, data risks, and misconfigurations across AWS, Azure, and GCP. The solution is very easy to use and implementaion was also quick.The customer services support are really good. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

Integration are quite confusing as there is no visibility for third party solution. Review collected by and hosted on G2.com.

What problems is Sonrai Security solving and how is that benefiting you?

Sonrai Security solves problems like too many unnecessary permissions, risky data access, and cloud misconfigurations. It helps you see who has access to what, find sensitive data at risk, and fix important issues first. This makes your cloud more secure, saves time, and ensures everything is compliant. Review collected by and hosted on G2.com.

Percy R.

Technology Systems Manager

E-Learning

Mid-Market (51-1000 emp.)

1/22/2025

"Sonrai Security: Advanced Cloud Security for Cloud"

4.5/5

What do you like best about Sonrai Security?

It provides end to end visibility into cloud which I like it also inculde data and identities. Review collected by and hosted on G2.com.

What do you dislike about Sonrai Security?

I dislike the fact that it offers limited options for dashboard customization. While complex scans and running advance queries its performance gets drop. Review collected by and hosted on G2.com.