~/finops $ generate-invoice --from idle-resources

Your idle resources
sent you an invoice.

Here's what they're charging you this month. We found them; you decide what to do. Read-only AWS scanner. Findings to Telegram. Open-source CFN.

▶ Stop paying it (5 min)see how we found it
47
CHECK TYPES
14
REGIONS
$1,284
AVG SAVINGS/MO
INV-2026-05 · prod-aws · auto-generated
i-0a1b2c3d (idle EC2 · 14d)$128.40
vol-9f8e7d (orphan EBS · 47d)$42.10
snap-bee123 (old · >1y)$18.75
db-prod-2 (RDS oversized)$312.00
nat-fa12bc (NAT low-use)$45.00
DUE THIS MONTH$546.25
01 / WHAT YOU GET

By tomorrow morning, you'll know exactly where your AWS bill is leaking.

Six things change once you connect your AWS account. No "platform", no "capabilities" — just what's different for you.

You see every idle resource
EC2 nobody uses, disks nobody attached, databases way bigger than they need to be. 47 things we check for.
You understand each one in a sentence
Every finding comes with a plain-English explanation. No graphs to interpret.
You get them on Telegram
Where your team already is. One tap to dismiss, one tap to acknowledge.
You see savings in dollars, not estimates
We pull your actual Cost Explorer data daily — so the savings number matches the bill.
You roll it out org-wide in one shot
Every AWS account in your organization in one deployment. No account-by-account setup.
You can audit every number
Each finding shows the AWS API responses we used. Disagree? Click through and check.
02 / A FINDING, END TO END

Every finding ships with its receipts.

Resource, evidence trail, savings math, and a plain-English why — bundled into one card. Nothing inferred we can't point at.

f-0428[idle-ec2]i-0a1b2c3d · us-east-1 · t3.large$128.40/mo

This instance has averaged 0.4% CPU over the last 14 days with no network egress. It looks like a dev box someone forgot to terminate. Stopping it saves $128.40/mo; terminating it (and the attached 50 GiB EBS volume) saves another $5/mo.

evidence: cloudwatch:GetMetricStatistics (CPUUtilization, 14d) · ec2:DescribeInstances · pricing:GetProducts
03 / DELIVERY

Findings come to where you already are.

No new dashboard to babysit. Critical findings page immediately. Medium-priority ones land in a daily digest. Every message has Acknowledge / Dismiss / Open buttons — your workflow is one tap, not a context-switch.

Slack and email coming next; Telegram first because that's where our beta users already are.

⚠ New finding · $312/mo
db-prod-2 (RDS) is oversized
P95 CPU 8% over 30d on db.r5.4xlarge. Right-sizing to db.r5.xlarge saves $312/mo.
✓ Ack✕ Dismiss↗ Open
📊 Daily digest · 11 new
$847/mo across idle EC2, orphan EBS, old snapshots.
↗ View all
04 / COVERAGE

47 checks today. The full list, no marketing fluff.

Each green dot is a check that ships today. Grey is on the roadmap. We list them so you can verify we're checking the things your bill actually spends on.

idle-ec2
unattached-ebs
old-snapshots
rds-oversized
rds-idle
nat-low-use
elb-no-targets
unused-eip
old-rds-snapshots
idle-redshift
idle-elasticache
s3-incomplete-mpu
cw-logs-no-retn
opensearch-idle
previous-gen-ec2
kms-key-unused
... 31 more
savings-plan-fit (Q3)
spot-eligibility (Q3)
graviton-migrate (Q4)
05 / TRUST

Least-privilege by default. Auditable by design. Connect however you want.

No managed AWS policies. No write actions. No data-plane reads. The role you create — by CFN, StackSet, or by hand — only ever lets us describe and measure.

# Inline IAM policy · open-source · version-pinned
Action:
  - ec2:Describe*          # scanner
  - rds:Describe*          # scanner
  - cloudwatch:Get*        # utilization metrics
  - ce:GetCostAndUsage     # spend attribution
  - organizations:List*    # multi-acct (optional)
# What's NOT here: s3:GetObject, kms:Decrypt, iam:*, *:Create*, *:Update*, *:Delete*
CFN stack5 min
One-click CloudFormation deploy. Single account. Easiest path.
CFN StackSet
Org-wide rollout via AWS Organizations. Multi-account in one apply.
Manual IAM
Copy our policy JSON, create the role yourself. For security-team review workflows.
AWS API cost~$0.04 / scan~$1.20 / month at default cadence. Shown again before you enable scans.
06 / PRICING

Free in beta. Pay-as-it-pays-back after.

Free for the first 10 design partners. Post-beta: tiered by AWS spend scanned, capped so the tool always costs less than it saves. If a month's findings don't exceed our fee, that month is free.

▶ Join beta