← All docs
AWS
EC2, EBS, S3, RDS, VPC, and Security Groups, with Cost Explorer and CloudWatch metrics.
What's collected
EC2 instances, EBS volumes, S3 buckets, RDS instances, VPCs, and Security Groups — plus 30 days of Cost Explorer spend by service and CloudWatch CPU utilisation for rightsizing.
Security & reliability rules
Open security groups (SSH/RDP/all-ports from the internet), public S3 buckets, unencrypted EBS volumes, RDS instances without Multi-AZ in production, and more — each finding includes the exact remediation step.
Cost recommendations
EC2 rightsizing from CloudWatch P50/P95/P99 utilisation (not raw averages, which hide spikes) and detached-EBS-volume waste detection — every dollar estimate shows the pricing assumption behind it.