Idle instances, orphaned volumes, forgotten load balancers. SpendGuard finds what your AWS account is quietly paying for and hands you the command to shut it off.
Monthly waste found
$399.16
Per year if left running
$4,789.92
Idle RDS instance db-staging-old
db.r5.large · avg CPU 0.8%, 0 connections
Idle EC2 instance i-07b4d2aa91c3
m5.xlarge · avg CPU 1.2% over 14d
Unattached EBS volume vol-0a3f9c21e7
500 GB gp3 · detached 47 days ago
Low-traffic NAT gateway nat-04c1e8b77d
0.02 GB processed in 14d
Unused Elastic IP eipalloc-09f2ab
not associated
Suggested fix
$ aws ec2 delete-volume --volume-id vol-0a3f9c21e7 --region us-east-1Coverage
Nine scanners look for the most common, and most expensive, kinds of AWS waste. Every finding comes with a monthly cost estimate, the reason it was flagged, and a fix.
Volumes left behind after an instance is terminated keep billing by the gigabyte, every hour.
Instances running at near-zero CPU: forgotten dev boxes, stale staging environments, abandoned experiments.
Databases with almost no CPU and no connections that still cost the same as busy ones.
EBS snapshots whose source volumes were deleted long ago. Individually cheap, collectively not.
Every Elastic IP that is not attached to a running resource is billed hourly. We flag each one.
ALBs and NLBs with no healthy targets behind them still charge a fixed hourly rate.
NAT gateways that process almost no data but bill around the clock, in every AZ you forgot about.
Incomplete uploads are invisible in the console but their parts are stored, and billed, indefinitely.
Functions with zero invocations that add clutter, risk, and storage cost to every region.
New waste appears every day. Pro scans every account each night and emails a savings report every Monday.
Setup
Three steps, about five minutes. No agents, no CloudFormation stacks, no infrastructure to run.
Create a read-only IAM user with the policy we give you and paste in its keys. Nothing to install or deploy.
Nine scanners check each region for idle compute, orphaned storage, and networking you no longer use.
Get a prioritized list with a monthly cost for every finding and the AWS CLI command that removes it.
Pricing
Start free with one account. Upgrade when you want every account scanned automatically.
See what one AWS account is wasting.
No credit card required
Every account, scanned every night.
Works out to $24.17/month, billed annually
Prices in USD. Cancel anytime from Settings. Payments are processed securely by Stripe.
Security
SpendGuard only calls Describe, List, and Get APIs. Your credentials are encrypted before they are stored and never leave our backend. We cannot create, modify, or delete anything in your account.
Credentials encrypted at rest
Decrypted only inside the scan worker, only while scanning.
Read-only IAM policy
You grant the permissions. We publish the exact policy.
No resource mutations
Fixes are commands you review and run yourself.
FAQ
Everything you need to know before connecting your AWS account.
Only read-only describe, list, and get actions for EC2, EBS, Elastic Load Balancing, RDS, Lambda, S3 multipart uploads, and CloudWatch metrics. We never call an API that creates, changes, or deletes anything. The exact IAM policy is shown when you add an account, ready to copy.
Your access keys are encrypted before they are stored and are only decrypted inside the scan worker at scan time. Because the policy is read-only, the keys cannot be used to modify your infrastructure. You can revoke access at any moment by deleting the IAM user or removing the account from SpendGuard.
No. SpendGuard tells you what is wasting money, why, and gives you the exact AWS CLI command to fix it along with a note on the risk. You decide what to run.
Yes. Cancel from the Settings page in a couple of clicks. You keep Pro until the end of the period you have paid for, then your organization moves to the Free plan. There are no contracts or cancellation fees.
A full scan across all 10 regions typically completes in a couple of minutes. Findings appear in your dashboard as soon as it finishes.
us-east-1, us-east-2, us-west-1, us-west-2, eu-west-1, eu-west-2, eu-central-1, ap-southeast-1, ap-southeast-2, and ap-northeast-1.
Estimates use published AWS on-demand list prices, so they are a close guide rather than an invoice. Reserved pricing, savings plans, and negotiated discounts are not factored in.
Connect an account, run your first scan, and see the number. It takes about five minutes and costs nothing.
Get Started FreeQuestions? support@getspendguard.io