The evidence under every AWS number, one click from the verdict.
Leadership and the cloud team read the same screen. They stop at the verdict; you open the accounts, services and resources that carry it.
What it answers
The questions that come to you, and where each answer lives.
- Which resources break the tag policy?
Each taggable resource type is scored against the tags you require, listed by account, with the spend left untagged priced beside it.
Cost Attribution
- Where can we save?
Cost Optimization Hub's recommendations across the organization, with Compute Optimizer's rightsizing wherever the hub finds nothing.
Costs · Savings
- Which accounts have gone quiet?
An account not reporting to Security Hub is named as not reporting. Nothing renders as an all-clear until the source behind it is on.
Security
- Which AWS events touch us?
AWS Health events across the organization, read from its organizational view.
Dashboard · AWS Health
- What does it need from us?
An AWS Organization with all features on, and access to its management account. Every other setting is optional, turns on one part of the product, and that part says so until it is on.
Setup
Where it starts
The pages you will open first.
Cost Attribution
You declare the tags that count. Every taggable resource is scored against them, and what is left unowned is priced.
68%of taggable resources have an owner
Config · Cost Explorer
Resources
Everything you are running, by type, account and Region, down to the row and the tag it is missing.
18Regions with something running
AWS Config
Security
Open findings by severity, the accounts not reporting at all, and the identity hygiene behind them.
61open, 9 older than 30 days
Security Hub · IAM
Deployed into your AWS account, and read-only.
- Read-only
- Your AWS account, your Region
- Encrypted at rest in your account
- Revocable in one action
To cut compute without forecasting commitments yourself, see Cloud Saver.
Also in Solutions
Point it at your organization and see the first answer the same afternoon.
30 minutes of one engineer · your AWS data stays in your account