Pump vs Cloud Custodian: feature-by-feature summary

Pump includes all 25 capabilities in this comparison. Cloud Custodian offers 5 of 25. Cloud Custodian does not offer: Free forever plan, Commitment planner, Autopilot continuous monitoring, Rightsizing, Automatic budget alerts, Modernization recommendations, Kubernetes auto-scaling, Single-lens global overview, Customizable reports, Kubernetes deployment reports, CFO-level financial forecasting, Top movers alerts, Multi-channel notifications, Annotations & team tagging, DeepScan technology, Overcommitment insurance (Pump-Insured), Team and product permissions, Automatic budget alerts, Dedicated support staff, Bank, med-tech and fin-tech compliance.

Cloud Savings

• Free forever plan — Pump: Yes. Cloud Custodian: No. Not offered: there is no hosted product or plan; it is an Apache 2.0 engine you self-host.

• Commitment planner — Pump: Yes. Cloud Custodian: No. Not offered: no workflow purchases, exchanges, or resells RIs or SPs.

• Idle instance detection — Pump: Yes. Cloud Custodian: Yes. Garbage-collects idle resources via off-hours schedules and utilization-based policies you write.

• Autopilot continuous monitoring — Pump: Yes. Cloud Custodian: No. Not offered; policies run on a schedule or event trigger you configure, with no built-in anomaly-detection engine.

• Rightsizing — Pump: Yes. Cloud Custodian: No. Not offered: no rightsizing recommendation engine, only manual policies against chosen metrics.

• Automatic budget alerts — Pump: Yes. Cloud Custodian: No. Not offered: no budget-alert or spend-threshold feature.

• Modernization recommendations — Pump: Yes. Cloud Custodian: No. Not offered; no Graviton/ARM migration guidance is documented in the project or its policy examples.

• Kubernetes auto-scaling — Pump: Yes. Cloud Custodian: No. Not offered: K8s beta is a policy/admission engine, not autoscaling or HPA tuning.

• Zero lock-in period — Pump: Yes. Cloud Custodian: Yes. No signup: pip/Docker-installed and self-hosted; engineering setup replaces a sales call.

Cloud Visibility

• 100% virtual tagging coverage — Pump: Yes. Cloud Custodian: Yes. Tag and untag actions are core to the DSL, letting policies apply custom labels.

• Single-lens global overview — Pump: Yes. Cloud Custodian: No. Not offered; no dashboard exists, so no unified multi-cloud billing view is provided out of the box.

• Customizable reports — Pump: Yes. Cloud Custodian: No. Not offered; no cost-per-X or unit-economics reporting layer, only raw policy match output in logs or S3.

• Kubernetes deployment reports — Pump: Yes. Cloud Custodian: No. Not offered: K8s provider (beta) targets pods for label/delete actions, not cost-per-pod reporting.

• CFO-level financial forecasting — Pump: Yes. Cloud Custodian: No. Not offered; no budget dashboard or forecasting feature is documented for the open-source engine.

• Top movers alerts — Pump: Yes. Cloud Custodian: No. Not offered; no anomaly-detection capability ships with the project, visibility-only or otherwise.

• Multi-channel notifications — Pump: Yes. Cloud Custodian: No. Not offered natively: c7n-mailer sends email/SNS/SQS; Slack/Jira/ServiceNow needs custom work.

• Annotations & team tagging — Pump: Yes. Cloud Custodian: No. Not offered: no shared-allocation reporting, only whatever tags a policy author chooses to apply.

• DeepScan technology — Pump: Yes. Cloud Custodian: No. Not offered: no dollar-impact scoring for waste, only resource lists matched by custom filters.

• Multi-cloud support — Pump: Yes. Cloud Custodian: Yes. Supports AWS/Azure/GCP as core providers, with K8s, Tencent Cloud, and OpenStack in beta.

• Overcommitment insurance (Pump-Insured) — Pump: Yes. Cloud Custodian: No. Not offered; no savings guarantee or insurance product exists for a free, self-hosted policy engine.

Cloud Security

• Team and product permissions — Pump: Yes. Cloud Custodian: No. Not offered: access control relies on the cloud provider's IAM, with no Custodian RBAC layer.

• Automatic budget alerts — Pump: Yes. Cloud Custodian: No. Not offered: policies can check SOC 2/ISO/GDPR controls, but no built-in framework support.

• Multi-channel alerts — Pump: Yes. Cloud Custodian: Yes. Core function: YAML policies filter resources and apply actions such as tag, stop, or delete.

• Dedicated support staff — Pump: Yes. Cloud Custodian: No. Not offered; there is no app marketplace, only community-contributed example policies on GitHub.

• Bank, med-tech and fin-tech compliance — Pump: Yes. Cloud Custodian: No. Not offered: policy runs write logs/output to local disk or S3, without audit-trail UI.