Skip to main content

Help us improve the Digital Marketplace - send your feedback

NETAPP

SPOT

Spot by NetApp is a cloud optimization SaaS platform for FinOps and DevOps. It ensures the best balance of cost, performance, reliability and security for cloud applications (virtual machines, container/Kubernetes clusters) and automates cost optimization at multiple level, across the public hyperscalers: Amazon AWS, Microsoft Azure and Google Cloud Platform.

Features

  • Advanced scaling
  • Supports all three lifecyles
  • Supports all three clouds
  • Resource allocation
  • Cost optimization
  • Cost visibility
  • FinOps reporting, showback and chargeback
  • Cloud best practices recommendations
  • Cloud security CNAPP
  • FinOps unit metric analysis

Benefits

  • Spot helps users automatically optimise their hyperscaler cloud costs
  • Spot makes cloud Kubernetes easier to manage, cheaper, safer
  • Spot automates FinOps management for cloud RIs and SPs
  • Spot provides detailed cloud security platform (CNAPP) to improve security
  • Spot enables safe use of spot instances 90% cheaper
  • CloudCheckr: Reduce time spent on billing management
  • CloudCheckr: Correctly aligning shared cost to increase responsible cloud spend
  • CloudCheckr: Near real time reporting to design with cost inmind
  • CloudCheckr: alerts ensure that anomalies are detected early
  • CloudCheckr: prioritized insights saves time to pursue most critical opportunities

Pricing

£0.01 to £0.01 a unit an hour

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.roberts@netapp.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

8 3 6 3 1 5 0 6 6 6 8 0 2 5 6

Contact

NETAPP Chris Roberts
Telephone: 07920284901
Email: chris.roberts@netapp.com

Service scope

Software add-on or extension
No
Cloud deployment model
Public cloud
Service constraints
Service is limited to Amazon AWS, Microsoft Azure, and Google Cloud Platform.
System requirements
Cloud administration privileges required in AWS, Azure or GCP

User support

Email or online ticketing support
Email or online ticketing
Support response times
Support questions are acknowledged in under 2 minutes. General queries are responded to in 1 day by an assigned account owner.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
No
Web chat support
Web chat
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
Users access the chat when they are logged into the Spot console. It connects to a human support engineer in under two minutes.
Onsite support
No
Support levels
Support is included in the usage contract of the SaaS platform and is not a separate charge. There is one tier, with chat and email support provided as soon as possible with a 2 minute target.

Customer Success Managers are assigned on a discretionary basis.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Documentation and direct remote training is provided.
Service documentation
Yes
Documentation formats
HTML
End-of-contract data extraction
Users contact their account team or Support, who fulfil the request.
End-of-contract process
At the end of the contract, service will be terminated after a discussion to ensure this is desired. The buyer is responsible for disconnection of the SaaS platform from their cloud environments.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
No
Service interface
Yes
User support accessibility
WCAG 2.1 AA or EN 301 549
Description of service interface
The UI is accessable via a webbrowser.
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
All functionality is performed via a browser or API as Spot is a SaaS platform.
API
Yes
What users can and can't do using the API
The API has a superset of features compared to the UI - more is available.

https://docs.spot.io/api/
API documentation
Yes
API documentation formats
Open API (also known as Swagger)
API sandbox or test environment
No
Customisation available
Yes
Description of customisation
The technologies that are deployed for the buyer are customised to integrate with applications and cloud environments as needed, since the platform provides part of the cloud infrastructure stack.

Scaling

Independence of resources
The SaaS platform is built on a highly-scalable, auto-scaling cloud infrastructure and is capable of increasing performance rapidly as needed to service user load.

Analytics

Service usage metrics
Yes
Metrics types
Spot provides service metrices for cloud-based Virtual Machines (AWS EC2, Azure VM, GCP VM) and container/Kubernetes Clusters (AWS ECS/EKS, Azure AKS, GCP GKE) via the web UI.

The service metrics include vCPU, vRAM utilization, cost for compute / storage / networking, uptime, etc.
Reporting types
  • API access
  • Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
Other locations
User control over data storage and processing locations
No
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Other
Other data at rest protection approach
https://spot.io/data-privacy-security/
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Download specific parts as files via web UI
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
https://www.netapp.com/media/66542-SLA_Spot.pdf
Approach to resilience
Detail is available upon request. At a high level, we utilise cloud availability zones for local redundancy with a regional failover process for large-scale events.
Outage reporting
Public dashboard:
We maintain a service status view here: https://status.services.cloud.netapp.com/

eMail alerts:
We also issue alerts in the console and via email to registered users.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Username or password
Access restrictions in management interfaces and support channels
Spot has a detailed RBAC model with prebuilt and customisable roles.
Access restriction testing frequency
At least once a year
Management access authentication
  • 2-factor authentication
  • Username or password
  • Other
Description of management access authentication
SSO

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
Between 1 month and 6 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
Between 1 month and 6 months
How long system logs are stored for
Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Schellman
ISO/IEC 27001 accreditation date
23/2/2023
What the ISO/IEC 27001 doesn’t cover
N/A
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • Soc 2
  • ISO 27018

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
SOC2, others
Information security policies and processes
https://www.netapp.com/esg/trust-center/compliance/

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
There are a series of documented processes for common or known events. Users can report incidents via phone, chat, email or online. Production events that involve extended outages, security breaches or loss of customer data will qualify for a root cause analysis, including timeline of event, customer impact, direct and root cause of event, and improvements made or planned to prevent recurrence.
Please see https://netapp-security.trustshare.com/home
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
NetApp has a robust product security vulnerability and response handling policy. You can receive reports related to potential security vulnerabilities in NetApp products and services and learn about our standard practices in informing customers of verified vulnerabilities. NetApp follows secure development principles throughout our product development lifecycle. We expand and improve on our secure-development programs on a continuing basis. As a part of our standard procedures, we implement secure design principles, developer training, and extensive testing programs.
For more information please see: https://security.netapp.com/policy/
https://www.netapp.com/esg/trust-center/security/patch-management-vulnerability-handling/
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
NetApp maintains an Incident Response Plan that outlines the process and timelines for communicating information security incidents externally, including notifying clients if their data may have been breached. The plan takes into account legal, regulatory, and contractual obligations and requirements. The specific procedures and timelines for incident communications may vary depending on the nature of the product or service and its configuration and usage. Clients are advised to refer to their contracts and product documentation for information relevant to their operations. NetApp's Incident Response Plan ensures that incident communications are managed effectively and as per industry best practices. See https://netapp-security.trustshare.com/policies/POL-014
Incident management type
Supplier-defined controls
Incident management approach
NetApp maintains an Incident Response Plan that outlines the process and timelines for communicating information security incidents externally, including notifying clients if their data may have been breached. The plan takes into account legal, regulatory, and contractual obligations and requirements. The specific procedures and timelines for incident communications may vary depending on the nature of the product or service and its configuration and usage. Clients are advised to refer to their contracts and product documentation for information relevant to their operations. NetApp's Incident Response Plan ensures that incident communications are managed effectively and as per industry best practices. See https://netapp-security.trustshare.com/policies/POL-014

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

Fighting climate change

NetApp's hardware and software solutions are designed to help customers achieve their sustainability goals, including reducing their carbon footprint and optimising data management to conserve energy and resources. To support the complete product lifecycle management, NetApp focuses on energy-efficient technologies such as deduplication, compression, and compaction that dramatically reduce product footprint, lowering overall energy costs. Similarly, using larger capacity media also reduces customers’ footprint and can significantly impact the energy required to run their data centre(s).

Our packaging is made from 98% recycled/renewable materials and we use 80 Plus titanium power supplies for our hardware. Our e-waste and product take-back (free for all customers) programs (https://www.netapp.com/company/environmental-certifications/e-waste-management), adherence to environmental directives (https://www.netapp.com/company/environmental-certifications/), and the provision of sustainability tools like the NetApp Sustainability Dashboard (https://docs.netapp.com/us-en/active-iq/BlueXP_sustainability_dashboard_overview.html) and the Product Attribute to Impact Algorithm (PAIA) methodology to calculate product carbon footprint, all demonstrate our commitment to protecting our environment and fighting climate change.

For more information about NetApp’s environmental, social, and governance (ESG) initiatives, refer to the following URL https://www.netapp.com/esg. Our 2023 ESG report can be downloaded at https://www.netapp.com/pdf.html?item=/media/79434-NetApp-esg-report.pdf. Our Social Impact efforts include offering employees up to five days paid time off each year to volunteer at approved non-profit organizations from a global database, many of which benefit the environment. Specifically in the UK this year, a team volunteered at a nature reserve to remove an invasive species and sow wildflowers.

To summarize, our solutions adhere to circular economy principles that emphasize product durability, end-of-life management, recyclability, and environmental responsibility. For additional information on NetApp’s sustainability efforts, refer to the following URLs https://www.netapp.com/esg/sustainability/ and https://www.netapp.com/esg/sustainable-technology/.

Covid-19 recovery

2021 ESG NetApp’s response to the global pandemic began in January 2020, months before major steps were taken in much of the world launching Thrive Belonging. From matching COVID-related charitable donations to shifting rapidly to remote work, NetApp has taken a mix of steps to keep our teams and communities safe while also delivering products and services uninterrupted.
At the outset, we assembled a company-wide crisis management team to execute our Business Continuity Plan and prepare to mitigate the impact of COVID-19. We put in place measures requiring most of our global workforce to work from home.
Our leadership monitored and managed the situation to mitigate impact to sales, global supply chains, and support and services.
As pandemic risks recede, we’re shifting to a hybrid workplace, a mix of remote and onsite work that promises to deliver a productive balance of engagement and tailored flexibility for employees.
2024 in a COVID-19 recovery world NetApp WX introduced Thrive Together, taking steps such as consultancy with an external organisation to take feedback on how we run an approach to being more present in the office by adjusting the office to meet a post COVID-19 world and taking feedback from internal stakeholders including employees and Employee Business Resource Groups.
While retaining hybrid working, all offices are suitable for social distancing and flexibility is available for those wishing to socially distance such as attending during off-peak times or attending meeting remotely.
In the UK a renovation has taken place to adapt our office to a post Covid-19 based of feedback after a return to the office. NetApp offices have washing and hygiene facilities suitable for all members of staff.
Office workspaces that individuals or groups can also work from flexible across the world booked via a service, including a weekly office day in London.

Tackling economic inequality

We believe that community engagement has the power to bring positive, measurable change to our communities. Through our social impact programs, NetApp empowers our people to care for our communities and harness the power of data/AI for good—investing in programs and partnerships that support economic equality and community vitality in the communities where we live and work around the world.
Our social impact initiatives fall into three categories: data/AI literacy, equity, and sustainability. While the demand for data/AI skills will only increase in the years ahead, students experience significant racial gaps when it comes to data literacy. Through our Data Explorers program, we help bridge those inequities and prepare students for the jobs of the future.
Our equity programs focus on expanding access to data/AI skills and careers for underrepresented groups, closing the racial and gender gaps in the data science field and creating career paths. Finally, we work to accelerate data/AI solutions to support environmental sustainability, recognizing the urgent need to address environmental risks—and the employment opportunities that will accompany these new solutions. In addition to these NetApp investments, we also support employee community engagement programs that empower employees to support the causes they are most passionate about—including organizations that tackle inequality and create career and economic opportunities for others. NetApp supports those efforts through paid volunteer time off, matching donations, grants tied to employee volunteering, and more.

Equal opportunity

NetApp’s work environment is based upon respect for the individual and their particular talents and qualities. We strive to recognize and optimize each employee’s unique differences and individual contributions to foster an environment where everyone has access to equal opportunity and can thrive in their role here at NetApp. NetApp is an equal opportunity employer and makes employment decisions on the basis of merit. We want to have the best available persons in every job. Our policy prohibits unlawful discrimination based on race, color, creed, sex, gender/transgender status, gender identity, gender expression, religion, marital status, age, citizenship status, national origin or ancestry, physical, physiological and mental health condition, medical condition including but not limited to AIDS/HIV, genetic characteristics, pregnancy, sexual orientation, veteran status, or any other consideration made unlawful by federal, state, or local laws.
This policy includes the prohibition against discrimination against any individual who is perceived to have any of the protected characteristics or is associated with a person who has or is perceived as having any of those characteristics. All such discrimination is unlawful. NetApp adheres to legal requirements by offering reasonable adjustments for individuals with disabilities, enabling them to fulfil their job responsibilities, provided there is no undue hardship. An interactive effort is made to discover and mitigate obstacles, ensuring workplace success. Possible adjustments are identified in collaboration with the person to mitigate any limitations. When an accommodation is feasible and does not cause undue hardship, NetApp will implement it to support an accessible work environment. NetApp is committed to compliance with all applicable laws providing equal employment opportunities. This commitment applies to all persons involved in Company operations and prohibits unlawful discrimination by any NetApp employee.

Wellbeing

NetApp are committed to helping employees manage their health and wellbeing. One way we do this is by taking intentional breaks as a company to ensure we come back refreshed and healthy. We have a global Company shutdown at year end (between Christmas & New Year) and three global wellness days during the year to give employees space and time to focus on wellbeing. In addition to this we have a ‘No Meeting Friday’ once per month to allow for uninterrupted focused, productivity time to get work done or to take advantage of the many opportunities NetApp offers for continued career development and growth. We encourage employees not to hold internal meetings (Zoom/Teams, in-person or otherwise) on these days if possible and to use their best judgement for external-facing meetings on these days. NetApp also offers a variety of financial benefits to support financial wellbeing. Employees are eligible for income protection, life assurance and a contributory pension plan.

In the UK, employees have the opportunity to avail of Eyecare tests, dental insurance, private medical insurance and a monthly contribution towards gym membership. Employees also have access to our Employee Assistance Program which supports all aspects of life – physical, financial, emotional and social – through our partnership with Workplace Options, employees can access a variety of resources and confidential support. A Health, Wellbeing & Community Impact team has been set up to creating a supportive environment where we come together to promote physical and mental wellness, foster connections and forge a sense of UK team spirit by connecting employees through health and wellbeing activities and certified ‘mental health first aid’ training.

Pricing

Price
£0.01 to £0.01 a unit an hour
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
Up to 20 VMs free tier

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.roberts@netapp.com. Tell them what format you need. It will help if you say what assistive technology you use.