Your data team needs freedom to move fast. Your finance team needs cost control. Give everyone what they need with automated guardrails that enforce policies without blocking work.
Data teams blame you for restrictions. Finance blames you for costs. You can't win with manual enforcement.
You can't see what's running across 50+ workspaces right now. Problems surface weeks after they start, when they're expensive to unwind.
Different rules in different workspaces. No central governance. Tribal knowledge instead of automation.
Configure which policies run per workspace, with what settings and action modes. One profile can cover many workspaces.
Policies run continuously on a scan cadence. When a violation is found, Kostavo emails the resource owner and workspace admins, or stops the resource automatically.
Policies can target resources by tag. Apply stricter rules to production, lighter rules to dev, based on tags already on your resources.
Policy profiles bundle checks into reusable guardrails you assign per workspace or tag.
Size limits, autotermination, runtime versions, access modes, SSH, env var secrets
Warehouse size, auto-stop settings, channel, serverless usage, permissions
Missing cost tags, idle resources, abandoned clusters, and after-hours compute in dev/test
Route findings to email, Slack, Microsoft Teams, or webhooks by severity
IP access lists, service principal hygiene, open permissions, token expiry
Define expected workspace settings (preview features, serverless, security) and detect drift across all workspaces
Tag rules do the assigning for you: match workspaces on cloud or custom tags (with exclusions) and they inherit the right profiles and schedules automatically.
Link all your Databricks workspaces to a single Kostavo organization. Kostavo becomes a workspace admin with a minimal service principal on Azure or AWS.
Choose which policies to enable, set thresholds, and pick action modes (Notify, Fix, or Remove) per workspace or group of workspaces.
Kostavo scans on a schedule. Findings surface in the multi-workspace dashboard and trigger notifications to resource owners and workspace admins.
Connect your first workspace and see what the first scan turns up.