AI Observability

The AI layer for observability. Running inside your own cloud.

Kloudfuse gives you an AI SRE that investigates incidents, a governed way for your own AI assistants to query production, and tracing for the AI you ship. All three run on one data lake in your own VPC, under the access controls your engineers already work under.

# kloudfuse / ai / live · running in your VPC

ask    "why did checkout error rate spike at 14:02?"
auth   signed in as the engineer · toolsets: apm, logs
query  3 traces · 47 log lines · correlated in one lake
llm    model span 1.80s · retrieval 142ms · same trace

# the agent connects to the server
# your telemetry stays where it is

Every vendor will ship an AI feature this year. The real question is whose cloud it runs in, whose identity it uses, what it is allowed to touch, and whether the engineer stays in control.


Three ways AI shows up. One platform underneath.

An agent that investigates, a governed door for the agents you already use, and observability for the AI you ship. All on the same lake, under the same RBAC, and in all three the engineer stays the one who decides. A context-aware assistant inside the product follows.

Investigation agent

You set the guardrails. It stays inside them.

Dexter, the Kloudfuse AI SRE, onboards the way a new engineer does, learning your services, dependencies and incident history. It investigates across everything inside your boundary and hands back a drafted RCA with the evidence attached. A proposal, not a change.

  • It reads more than we collect. The lake is primary, but it pulls from Datadog, Grafana and New Relic too, so an investigation is never limited to what you have already migrated.
  • The reasoning stays inside the perimeter, and so does the bill. Dexter runs in your VPC on your own model, with an outside provider only if you want one. No AI surcharge, and no token cost that scales with how bad your quarter was.
  • It drafts, it does not fire. Every report covers what happened, blast radius, timeline and a recommended fix it will not execute without your say-so. GitHub, Jira and Slack connect only behind a human approval.
  • The engineer's call wins. Fork your own line of investigation and promote what holds up. Nothing Dexter concludes overrides the person working the incident.
See Dexter in action
generated RCA · draft · awaiting human review
01What happened · checkout p99 3.2× after v2.4.1
02Blast radius · 3 services · 1 region
03Why and how · evidence linked to traces
04Timeline · reconstructed from signals
05Recommended fix suggested only
runs in your VPCscoped to your RBACread-onlyhuman in the loop
GitHub · Jira · Slack connect only if you choose
Kloudfuse MCP Server

Most MCP servers wrap an API. This one is built for how agents work.

Your engineers already have an AI assistant open. The Kloudfuse MCP server is the governed door between it and your production telemetry, whether that is Claude, Cursor, Codex or something your team wrote. One deployment serves the organization, and your data never moves to reach it.

  • An agent does not need your whole platform to answer one question. Nine toolsets, chosen per connection: logs and alerts for on-call, traces and profiles for latency. A narrower surface means fewer wrong turns and a smaller token bill.
  • Correlation happens in the server, not the context window. Ask about a service and get health, traces, logs and dependencies already correlated, rather than four raw result sets the model reassembles and charges you for twice.
  • Query Safety Mode stops a runaway query before it reaches storage, and names the limit it hit so the agent rewrites rather than retries.
  • The agent signs in as the engineer, through your own SSO, and sees exactly what that person sees. Every question and query lands in your lake, so the security review is one you can run yourself.
Know more
agent → server → lake
MCP clientClaude · ChatGPT · Cursor · Gemini CLI · custom
your VPC
Kloudfuse MCP serverOAuth 2.1 + SSO · toolsets scoped per connection
Query Safety Modevalidates every query before execution
Unified data lakeone store · every signal · your RBAC
Agentic Observability

A model call is a span. An agent run is not.

The model call lands as a span in the same trace and the same lake as the API around it. But the call was never the hard part. Tracing was built for services calling services, and now agents call agents, where every step depends on what the last tool returned and no single step looks wrong alone. Agentic observability is tracing catching up with what it is now tracing.

  • Today, the call is open to you. Prompt and completion text, tokens, latency and errors ride on the span, so a rate-limited provider and a slow model stop looking alike. LangChain and LlamaIndex instrumented out of the box.
  • Token spend traces back to a cause. Usage arrives as Prometheus metrics split by service, model and provider, so a spike lines up against a deploy or a customer.
  • Three people need the same record. Engineering triages, support explains, compliance audits. Build it for one and the other two get nothing, which makes this a product decision rather than a debugging feature.
  • It belongs in the lake you already own. The alternative is every team designing its own capture format from scratch. Run history is trace data with a harder shape, and it should live under the retention you already set for audit.
Kloudfuse LLM observability: a model call as a span inside the request trace, with tokens, latency and the correlated log

Grounded in your data, not guessing at it.

An agent pointed at raw telemetry invents metric names, invents label values, and answers confidently from nothing. Everything in the Kloudfuse AI layer is built so it has to check first.

It looks up your labels before it writes a query

Before querying, the agent can list the metric names, log labels and label values that actually exist in your cluster. It works from what is there rather than what a model expects to be there.

It reads the manual, not its memory

Kloudfuse documentation is exposed to the agent as a toolset of its own, so query syntax and platform behavior come from the current docs rather than from whatever the model absorbed about some other vendor's query language.

Tunable per connection

Define several connections against the same cluster with different scopes, and point separate connections at separate clusters, so an agent working on staging can never pull from production.


Already running. Inside the strictest boundaries.

Three industries, three different reasons for needing the data to stay put, one architecture underneath.

Observability inside its own security boundary

  • 300+ TB of telemetry a day, and growing
  • 78 engineering teams on one queryable lake
  • More than 30 tools consolidated into one
  • Sensitive telemetry never leaves the boundary

From vendor lock-in to open standards

  • Consolidated off legacy SaaS observability
  • Predictable cost on their own infrastructure
  • 86% reduction in mean time to resolution
  • High-cardinality metrics kept without a premium tier

Unified observability for healthcare engineering

  • Hundreds of users across engineering, DevOps, QA and support
  • 23% reduction in mean time to resolution
  • 50% fewer customer-reported incidents
  • Data residency preserved inside the customer VPC
Read customer stories

The moat is the governance. Not the model.

Vendor AI features and AI-native observability look adjacent on a feature list. They differ on who controls the data, the identity and the record.

Vendor AI featuresKloudfuse
Where the AI runsThe vendor's cloudYour VPC
Which agents workThe vendor's own assistantAny MCP client: Claude, ChatGPT, Cursor, Gemini CLI, custom
Identity on AI queriesVendor-side identityOAuth 2.1 with your SSO, policies set All, None or Filtered per stream
Runaway query protectionWhatever the vendor runs internally, with nothing for you to see or tuneQuery Safety Mode validates every query before it runs, and tells the agent which limit it hit
Audit trailHeld in the vendor's system, at the vendor's retentionEvery MCP query logged in your own lake: user, prompt, generated query, duration
LLM telemetrySeparate product, separate storeSame lake, same query languages, same RBAC
Agent scopingOne assistant with whatever access it was given, not adjustable by youNine toolsets, selected per connection
Cost of the AI itselfMetered by the vendor, per featureYour own model, your own inference cost, every token accounted for in your lake

What engineers ask before they wire up an agent.

Does my telemetry leave my VPC for AI to query it?

No. The MCP server runs against your data lake, inside your VPC. The agent connects to the server. Your data does not move to the agent or to a vendor cloud.

How does an agent authenticate?

The remote server supports OAuth 2.1 with Dynamic Client Registration, so a client registers itself on first connection and the user signs in through the SSO they already run, whether that is Okta, Azure AD, Google or SAML. They get a short-lived token bound to their identity. Headless and programmatic clients use a service account token instead, scoped to that account's policy.

Can I limit what an agent is allowed to reach?

Yes, on two levels. Toolsets narrow the surface: expose only the tools you want on a given connection, and define several connections against the same cluster with different scopes. Underneath that, RBAC policies decide which streams the identity can query at all. Toolset scoping applies to the remote server; the local Docker container exposes the full set.

What stops an agent from running a query that overwhelms the platform?

Query Safety Mode validates every AI-generated query before it reaches the storage engine. It rejects bare selectors with no filters, caps the ratio between lookback and resolution, and refuses queries that would return an impractical number of data points. The rejection explains which limit was hit, so the agent reformulates rather than retrying blind.

Is LLM telemetry stored separately?

No. LLM spans flow into the same unified data lake as your APM traces, with the same query languages, the same retention and the same stream-level access control.

What does the AI cost to run?

There is no AI surcharge on top of your Kloudfuse license. Dexter runs on a model inside your own VPC, so you pay your own inference cost directly. If you connect an external provider you pay that provider at their rate, with no markup in between.



Independently verified Know more
SOC 2 Type IIIndependent CPA examination
27001Certification in progress
140-3 validatedCMVP #5186 · #5209
GDPREU data protection compliance

Audited by third parties, not asserted by us. Deployment inside your own VPC means residency and data-handling requirements are governed by your controls, not ours.

Bring an incident. We'll bring the platform.

Thirty minutes on your telemetry. The cause, before the call ends.