Getting started

1. Register your organization

Go to the registration page and enter your organization's name, your name and email,and a home region. The home region is where your organization's data is stored.

You also choose an organization ID: 3 to 24 lowercase letters and digits, such as acme. It becomes your organization's address, acme.app.assethermit.com, so pick one your team will recognize.

2. Verify your email and wait for approval

We send a link to the email you registered with. After you open it, our team reviews the registration. Once it's approved, your organization is set up in its home region, which usually takes a few minutes.

Your 14-day free trial of Starter starts once the organization is ready, and needs no card. Before it ends, we agree a plan with the owner, invoiced monthly. See plans.

You then get an email with a temporary password. Sign in at your organization's address, choose a new password and set up MFA with an authenticator app.

Your team can also sign in with Google or Microsoft once an admin turns it on. See Team and sign-in.

Forgot your organization's address? Find my organization emails it to you.

3. Create a workspace

A workspace is an isolated data environment, such as Production or EU subsidiary. Asset sources, assets, change history and cost reports each belong to one workspace. Create as many as your plan allows.

Each workspace has a short ID of up to 10 lowercase letters and digits, such as prod, and a full ID made from it, such as ws-acme-prod. You see the full ID in the app's addresses.

A workspace keeps its data in your organization's home region, or in another region where one is available, for data residency. Its name and members stay with your organization.

4. Connect a cloud

In the workspace, add an asset source: an AWS Organization, GCP organization or Azure tenant, or a single AWS account, GCP project or Azure subscription. AssetHermit gives you what to set up in your cloud, then checks every permission and names any that's missing.

Collection then runs on a schedule, and Sync now starts one at any time. Add a cost source too, to see what your assets cost.

5. Invite your team

Organization admins invite people by email. Invites expire after 7 days. Each person gets an organization role, and a role in each workspace they need. The roles are in Team and sign-in.

6. Search your inventory

Once the first sync finishes, the inventory lists every asset it found. The search bar takes a query, and completes properties and values as you type:

$type:compute.vm $tag:env=prod $region:eu-*

Open any asset to see its normalized fields, tags, groups, findings, cost, related assets, the raw data from its cloud, and a timeline of every change. Search covers the query language.

7. Find what needs fixing

• Findings lists what the audit rules found after each sync, with a guide to fix it.
• Costs shows cost reports, savings you could make and unusual changes in spend.
• Notifications tell you when a sync can't read your cloud, findings open or spend jumps.