ControlMonkey
ControlMonkey is an AI-powered cyber resilience and Infrastructure-as-Code automation platform that captures daily versioned Terraform snapshots of cloud and SaaS configurations across AWS, Azure, GCP, and 30+ third-party tools, enabling enterprises to detect drift, recover from disruption, and generate Terraform code via its KoMo AI agent.
- Company typePrivate
- Founded2022
- HeadquartersTel Aviv, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What ControlMonkey does
ControlMonkey is an AI-powered cyber resilience and Infrastructure-as-Code automation platform headquartered in Tel Aviv, Israel, founded in 2022 by Aharon Twizer and Ori Yemini, both veterans of Spot.io (acquired by NetApp for approximately $450M). The platform uses Terraform, OpenTofu, and Terragrunt to reverse-engineer live cloud configurations into versioned IaC snapshots, captures daily backups of cloud and SaaS configurations across AWS, Azure, GCP, and 30+ third-party platforms, and provides one-click recovery to known-good states. Its core product, the Cyber Resilience Platform, extends beyond data backup to cover infrastructure configurations, identity systems, observability platforms, and network control planes. KoMo AI, launched in September 2025, is a GenAI-powered agent that generates organization-specific Terraform code to close the IaC skills gap, and the platform also offers drift detection, ClickOps identification, and 2-way remediation.
The company serves enterprise cloud operators, DevOps and platform engineering teams, MSPs/MSSPs, and regulated industries (notably financial services) with complex multi-cloud environments. Customers include Block (Square, Cash App), Comcast, Windward, HoneyBook, 365Scores, ReasonLabs, Rapyd, Keyrock, Cloudinary, Deluxe, and AtBay. The business model is a tiered SaaS subscription (Free Resilience Assessment, Pro, Enterprise) priced per protected environment rather than per resource, supplemented by VAR/MSP resale under a Global Partner Program launched in November 2025. Distribution combines direct enterprise field sales, inside sales for mid-market, a unified channel partner program, and listings on AWS Marketplace and Azure Marketplace.
The company holds AWS Advanced Technology Partner and Azure ISV Success Partner designations, $7M in seed funding co-led by lool ventures and Joule Ventures (January 2025), and a headcount of 11–50 employees across Tel Aviv and New York.
ControlMonkey firmographics
Firmographics- Name
- ControlMonkey
- Legal name
- ControlMonkey LTD
- Website
- https://controlmonkey.io
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- ControlMonkey is an AI-powered cyber resilience and Infrastructure-as-Code automation platform that captures daily versioned Terraform snapshots of cloud and SaaS configurations across AWS, Azure, GCP, and 30+ third-party tools, enabling enterprises to detect drift, recover from disruption, and generate Terraform code via its KoMo AI agent.
- Ownership category
- akta.pro rank
ControlMonkey industry classification
Industry- Product category
- Cloud Infrastructure Management
- NAICS
- Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Infrastructure Automation & Configuration Management (IaC) (HDABABAF)
- akta.pro secondary industries
- Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI), SaaS Security Posture Management (SSPM) (HDADADAI), Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF)
Keywords
Where ControlMonkey is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices2 records
Markets served
ControlMonkey business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Platform Subscription: Subscription-based SaaS platform providing cloud resilience and IaC automation capabilities. Pricing based on protected resources (cloud assets) and assessment scope. Pro tier for mature platform teams operating at scale across cloud providers. Enterprise tier for complex, large-scale enterprise environments with custom scope.
- Partner Resale and Managed Services: VAR/MSP partners can resell managed IaC, compliance, and drift remediation as-a-service to their customers under the Global Partner Program, with revenue sharing arrangements.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free Resilience Assessment for teams wanting to understand cloud recovery risk before buying |
| Subscription | Annual | Pro tier for mature platform teams operating at scale across cloud providers |
| Subscription | Multi-year contract | Enterprise tier for complex, large-scale enterprise environments |
Go-to-market motion4 records
Distribution channels6 records
Marketing channels10 records
ControlMonkey product offering
Product offeringCore offering
ControlMonkey is a SaaS platform that provides AI-powered cyber resilience and Infrastructure-as-Code (IaC) automation for cloud environments across AWS, Azure, and GCP. The platform captures daily snapshots of cloud and SaaS configurations as versioned Terraform code, enables one-click disaster recovery to known-good states, generates compliant Terraform code via the KoMo AI GenAI agent, and detects and remediates configuration drift and ClickOps activity.
Product overview
ControlMonkey is an AI-powered cyber resilience platform built around Infrastructure-as-Code automation, offering a unified platform-plus-modules architecture. The core Cyber Resilience Platform provides continuous discovery, backup, and recovery of cloud and SaaS configurations. Key modules include: KoMo AI (GenAI-powered Terraform code generation); Cloud Inventory (unified asset visibility across cloud and code); Cloud Disaster Recovery (infrastructure configuration backup and rollback); SaaS Configuration Disaster Recovery (operational SaaS settings protection); Network Disaster Recovery (network vendor configuration protection); Identity Resilience (identity provider backup and recovery); and Ransomware Recovery (comprehensive cloud operational recovery). The platform competes directly with Terraform Cloud through its Terraform Cloud Replacement module, which adds code generation and disaster recovery capabilities absent from Terraform Cloud. The company also offers free assessment tools (Cloud Resilience Assessment, Terraform Cloud Replacement Assessment) and a Global Partner Program for channel engagement.
Differentiator
Problem solved
Functional benefit
Brands
- KoMo AI: GenAI-powered agent designed to eliminate the Infrastructure-as-Code skills gap by enabling any engineer to generate compliant, contextual Terraform code.
Products and services
- Cyber Resilience Platform AI-powered cyber resilience platform providing full visibility into resilience posture and continuously updated, recoverable versions of cloud and SaaS environments. Includes continuous validation of disaster recovery posture, daily snapshots of cloud configurations, and deterministic recovery from known-good states.
- KoMo AI GenAI-powered agent that generates compliant, contextual Terraform code by operating with full context across IaC repositories, running cloud resources, policies, and deployment history. Targets engineers needing to produce organization-specific infrastructure code.
- Cloud Inventory Unified asset inventory providing complete visibility into every cloud resource across accounts and providers, mapped to IaC coverage, ownership, and state. Includes IaC coverage insights, ClickOps detection, and drift identification.
- Cloud Disaster Recovery Cloud configuration disaster recovery solution that backs up, versions, and recovers cloud infrastructure configurations across AWS, Azure, and GCP environments. Includes time machine for cloud architecture, one-click rollback, and automated Terraform-based snapshots.
- SaaS Configuration Disaster Recovery SaaS configuration recovery solution that continuously discovers, versions, governs, and recovers SaaS operational configurations at scale across identity, DevOps, monitoring, collaboration, and cloud management platforms.
- Network Disaster Recovery Network disaster recovery solution that protects network control plane components from third-party vendors including Cloudflare, Akamai, Fastly, and F5. Uses Terraform to reverse-engineer live configurations into code for daily versioned snapshots and one-click recovery.
- Identity Resilience Identity disaster recovery solution that enables organizations to restore access configurations and regain control of IT environments when identity systems are compromised. Supports Okta, Microsoft Entra ID, OneLogin, Ping Identity, and JumpCloud.
- Ransomware Recovery Ransomware recovery solution that combines continuous cloud configuration discovery, known-good recovery states, anomaly detection, and identity and operational recovery to restore cloud operations after ransomware attacks.
- Terraform Cloud Replacement End-to-end Terraform automation platform with AI-powered code generation, drift auto-remediation, and disaster recovery built in. Supports OpenTofu and Terragrunt alongside Terraform and positions as an alternative to HashiCorp Terraform Cloud.
Quantifiable outcome
- 80% faster cloud infrastructure recovery
- +10 more outcomes
Companies that use ControlMonkey
Customer profileNamed customers13 records
Segments5 records
Ideal customer profiles3 records
ControlMonkey technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration49 records
AI capability4 records
Feature10 records
ControlMonkey partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- DatadogcoreCritical Cloud became the first partner to earn Datadog's 'Powered by Datadog' accreditation using Datadog as operational foundation. ControlMonkey expanded disaster recovery platform to protect Datadog observability configurations including dashboards and alerts. Partnership highlights growing third-party reliance on Datadog in enterprise cloud operations.
- Critical CloudminorFirst partner to earn Datadog's 'Powered by Datadog' accreditation. Uses Datadog as operational foundation for managed cloud services across AWS and Azure. Works with ControlMonkey for disaster recovery of Datadog observability configurations.
- MidLinkcoreEarly supporter of ControlMonkey Global Partner Program. MidLink Cloud's expertise combined with ControlMonkey's automation platform enables DevOps teams to move faster and scale with confidence. Partnership allows partners to help customers bring automation and visibility to cloud infrastructure and Terraform environments.
- GlobalDotscoreEarly supporter of ControlMonkey Global Partner Program. GlobalDots partnership strengthens Cloudflare disaster recovery offering worldwide. Together they help customers automate Terraform environments, ensure consistent governance, and achieve faster recovery across multi-cloud infrastructure environments.
- Amazon Web Services (AWS)coreAWS Advanced Technology Partner with competencies in DevOps and Cloud Operations. AWS Co-Sell Partner (SCP). Integrates natively with core AWS services including Amazon EC2, ECS, EKS, Lambda, S3, and CloudFormation. Supports Terraform state storage in S3 and IAM-based access controls. Customer Block achieved 100% cloud resilient using ControlMonkey and AWS.
- Microsoft AzurecoreAzure ISV Success Partner and member of Microsoft AI Cloud Partner Program. ControlMonkey enables Azure customers to optimize, govern, and scale cloud infrastructure with complete Terraform coverage from day one. Supports Azure DevOps, Azure Storage, and Azure organization integration.
Scale indicators14 records
Recent moves9 records
Expansion highlights6 records
ControlMonkey competitors and assessment
Company assessmentDirect peers
- HashiCorp Terraform Cloud (IBM): The leading Infrastructure-as-Code automation and collaboration platform, built on Terraform and now owned by IBM. ControlMonkey explicitly positions its 'Terraform Cloud Replacement' module against this product with claims of superior AI code generation, drift auto-remediation, and built-in DR.
- Spacelift: Infrastructure-as-Code orchestration and collaboration platform supporting Terraform, OpenTofu, Pulumi, CloudFormation, and Kubernetes. Directly competes in the same IaC automation category with similar policy-as-code, drift detection, and enterprise governance capabilities.
- env0: Self-service cloud infrastructure automation platform for Terraform, OpenTofu, Pulumi, and CloudFormation. Targets platform engineering teams with policy-as-code, cost controls, and drift detection — overlapping substantially with ControlMonkey's enterprise IaC automation wedge.
- Scalr: Terraform automation and collaboration platform with hierarchical state management, policy framework, and cost estimation. Targets large enterprise platform teams — directly comparable to ControlMonkey's Pro and Enterprise tiers for IaC at scale.
- Firefly: Cloud asset management and IaC governance platform that discovers cloud resources, detects drift, and codifies unmanaged assets. Highly comparable to ControlMonkey's Cloud Inventory and Terraform Import Engine capabilities, with similar target buyers in cloud platform teams.
Emerging players
- Atlantis: Open-source Terraform pull-request automation tool focused on collaboration and workflow. Referenced by ControlMonkey as a supported integration and represents a partial competitor in the Terraform workflow and CI/CD governance space.
- Rubrik: Cloud data management and cyber resilience platform expanding into cloud configuration and identity recovery. Named on ControlMonkey's planned Data Backup Correlation expansion roadmap as a future integration target — represents an adjacent competitor moving into ControlMonkey's expanding DR scope.
- Veeam: Data protection and backup vendor expanding into cloud-native and SaaS configuration backup. Listed on ControlMonkey's planned integration roadmap for Data Backup Correlation — represents a large incumbent moving into the configuration DR space.
- Druva: SaaS-based data protection and cyber resilience platform covering workloads across cloud and SaaS environments. Comparable in the SaaS Configuration Disaster Recovery category where ControlMonkey is expanding its platform with daily snapshots of SaaS operational settings.
Broad incumbents
- Pulumi: Infrastructure-as-Code platform supporting multiple programming languages with cross-cloud provisioning and policy-as-code. Competes in the broader IaC platform category where ControlMonkey positions its Terraform/OpenTofu/Terragrunt automation stack.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks5 records
Key highlights6 records
Customer concentration
ControlMonkey social profiles
Digital presenceControlMonkey compliance and trust
Trust signalCompliance3 records
ControlMonkey financial estimates
Financial estimateRevenue estimate
Valuation estimate
ControlMonkey leadership team
Management profileNumber of profiles
Profiles8 records
ControlMonkey funding detail
Funding detailFunding overview
Funding rounds2 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ControlMonkey M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ControlMonkey
What does ControlMonkey do?
ControlMonkey is a SaaS platform that provides AI-powered cyber resilience and Infrastructure-as-Code (IaC) automation for cloud environments across AWS, Azure, and GCP. The platform captures daily snapshots of cloud and SaaS configurations as versioned Terraform code, enables one-click disaster recovery to known-good states, generates compliant Terraform code via the KoMo AI GenAI agent, and detects and remediates configuration drift and ClickOps activity.
Is ControlMonkey a public or private company?
ControlMonkey is a private company. It is classified as venture growth investor backed and is currently operating.
When was ControlMonkey founded?
ControlMonkey was founded in 2022. It employs 11 to 50 people.
Where is ControlMonkey based?
ControlMonkey is headquartered in Tel Aviv, Israel, in the Middle East region.
How does ControlMonkey make money?
Two revenue lines are on record. SaaS Platform Subscription is the primary driver. The others are partner Resale and Managed Services.
Who are ControlMonkey's main competitors?
Direct peers on record are HashiCorp Terraform Cloud (IBM), Spacelift, env0, Scalr and Firefly. Emerging players are Atlantis, Rubrik, Veeam and Druva. Pulumi is listed as a broad incumbent.
Does ControlMonkey have an API?
No public API is recorded for ControlMonkey.
What industry is ControlMonkey in?
ControlMonkey's product category is Cloud Infrastructure Management. Its primary akta.pro industry code is HDABABAF, Infrastructure Automation & Configuration Management (IaC), with a secondary code of HDABAHAI, Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC). Its NAICS code is 54151 and its SIC code is 7372.