Features
Controlled Azure address space, end to end.
Spot IPAM gives platform teams one control plane for CIDR planning across every Entra tenant — with conflict checks before allocation and an audit trail after.
-
Address-space inventory
View CIDR blocks, VNets, subnets, and reserved ranges across every Entra tenant in one register.
-
Conflict detection
Flag overlaps between VNets, peerings, on-prem RFC 1918 ranges, and reserved blocks before allocation.
-
CIDR allocation workflow
Request, approve, and assign subnets with per-tenant scoping. Approvers pick a prefix from free blocks.
-
DNS reconciliation
Compare address-space records against Azure Private DNS zones and Cloudflare DNS records.
-
Read-only collectors
Deploy an SPN per tenant with Reader rights — no Owner or Contributor access to subscriptions.
-
Immutable audit log
Every allocation records requester, approver, and tenant context. Entries cannot be edited or deleted.
-
IaC webhooks and API
Push allocation events to Terraform, Bicep, or Pulumi pipelines via webhook or REST API.
-
Exportable register
Download the full address-space register as CSV for reviews, handoffs, and compliance evidence.
-
Utilisation tracking
See used and free space per prefix — down to /24 subnets — from synced Azure subnet data.
Core workflow.
-
Connect a read-only collector per tenant
Register a service principal with Reader role in each Entra tenant. Spot IPAM syncs VNets, peerings, and address spaces on a schedule.
-
Import and run conflict checks
Azure address spaces, on-prem CSV imports, and reserved blocks land in one register. Overlaps between tenants surface before anyone requests a CIDR.
-
Request a CIDR block
Engineers submit a prefix size and tenant scope. Spot IPAM shows free blocks and flags any clash with peerings or on-prem ranges.
-
Approve, assign, and record
Approvers assign a subnet, DNS records reconcile against Azure Private DNS and Cloudflare, and the action writes to the audit log.
Connect your first Entra tenant.
Read-only collectors, conflict checks, and audit logging from day one. 30-day trial, no credit card.