Destroying an Environment
Destroying an environment tears down all cloud resources — VMs, DNS records, firewall rules, and storage. This stops all cloud costs immediately.
⚠
Destruction is permanent. All data stored inside tools — Kibana dashboards, TheHive cases, Caldera operations, OpenCTI threat intel — is deleted. Export anything you need before destroying.
How to destroy manually
1
Open the request detail
Go to Environments → click your environment → open the associated request.
2
Click Destroy
The Destroy button appears at the bottom of the request detail page for live environments. It is only available to operators.
3
Confirm
Type the environment name to confirm — this prevents accidental destroys. Click Confirm Destroy.
4
Wait 2–5 minutes
OpenTofu destroy runs and removes all GCP resources. You can watch progress in the live job log.
What gets deleted
✕GCE virtual machines
✕Static external IP addresses
✕VPC network and subnets
✕Firewall rules
✕Cloud DNS zone and all records
✕GCS bucket (Terraform state)
✕All tool data and configurations
What is NOT deleted
✓Your Aithroyz dashboard account
✓Your cloud credentials / API keys
✓The plan record and audit log
✓Any exported Terraform files