The Lord's Twins - Governance Suite

Manage and control your GCP resources across all projects.

OAuth is not configured. Set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET.
Sign in with Google

Your credentials are used only to call GCP APIs on your behalf. Tokens are stored server-side and never exposed to the browser.

The Lord's Twins - Governance Suite

Sign out

Resource filters
Lifecycle
Runtime status
Hygiene
Raw GCP state
Category
Service
Record type
Collector
24/7 Always-On Resources

Resources listed here are configured to stay available around the clock. Switching off a Cloud SQL instance sets its activation policy to NEVER; dependent apps cannot connect until it is switched on again.

Some projects could not be loaded

No project loaded

Select a billing account and project, then choose Resources or Audit Logs.

Scanning resources and loading costs...

Reading audit logs...

Cloud Audit Logs

Rows per project

Cloud Audit Logs

Rows
No audit log entries were returned for this page.

Vault

Browse GCP Secret Manager and HashiCorp Vault. Reveal actions are audited.

NameVersionsCreatedAction
HashiCorp Vault is not configured for this environment

Billing

Month to date
Forecast
Services
Top cost groups
Matching resource active Matching resource ready, min 0 No matching active resource Live resource state not loaded
Billing history
Latest month
MoM change
Previous month
Top cloud services
Top projects
Long-term trend
Invoice charges
Tax, adjustments, rounding, and invoice-level charges from the billing export.
Cost improvement opportunities
Recommendations are inferred from BigQuery billing export history and current inventory state.

CI/CD Management

GitHub Actions workflows and run audit history are discovered live from GitHub and grouped through Governance Suite policy.

Repositories
Workflows
Runs

Env Vars & Secrets

GitHub secrets are names only. Values are protected by GitHub and never returned.

Variables

NameValueUpdatedCopy

Secrets

NameStatusUpdatedCopy

Confirm Secret Reveal

This action is audited. Confirm to reveal value.

This reveal session auto-dismisses after 30 seconds.