Know what’s there.
See what changed.
WatchTower collects configuration from your cloud tenants, Windows servers, switches, and firewalls, and keeps every version. Compare any change with the baseline you approved, generate documentation from what is actually deployed, and ask about all of it from Claude Code or Codex.
No credit card required. MCP is included in the trial and every plan.
- Microsoft
- AWS
- Google Cloud
- Oracle Cloud
- Cisco
- Palo Alto Networks
- Fortinet
Microsoft cloud and on-premises Windows: Entra ID, Microsoft 365, Intune, Azure, Active Directory, Group Policy, and Windows servers.
Every configuration change, kept
Each collection stores a snapshot. Open a firewall rule or a conditional access policy and see exactly what it looked like last Tuesday, and what changed since.
- Inventory
- Every resource WatchTower collects, with the relationships between them: which virtual machines sit in which subnet, which groups a policy targets, and which servers a Group Policy object applies to.
- Drift
- Mark a snapshot as your baseline. WatchTower lists each attribute that has changed since, with the old and new values side by side.
- Documentation
- Generate environment documentation from the configuration WatchTower collected, and regenerate the affected sections when that configuration changes.
Ask Claude Code or Codex about your environment
Connect Claude Code, Codex, or any other MCP client to WatchTower. It can search resources, read configuration history, and compare snapshots, limited to what your WatchTower role allows.
› What changed around our production network?
WatchTower → Search configuration history
AWS security group ingress changed.
Cisco switch VLAN assignment changed.
Palo Alto firewall policy modified.
Each result links to the before-and-after configuration and the documentation that covers it.
Limited to your organization and role.
Getting started
Connect your environment
Approve read-only access for each cloud connector, and install the collection agent on a Windows server for on-premises systems.
Set a baseline
The first collection builds your inventory. Review it, then mark it as the baseline later changes are compared with.
Review what changes
Check new changes as they are collected, generate documentation, and ask questions in WatchTower or through MCP.