See AWS waste and risk before they burn runway.

One read-only scan. Cost findings and security posture in plain English — ranked so you know what to fix first.

AssumeRole only · You click Scan · Free forever core · Pro when you need volume

How it works

Three steps. Under five minutes.

Deploy our CloudFormation role in your account. Read-only. You keep the keys.

Pick a region and press Find savings. Nothing runs until you start it.

Open each finding in the AWS Console. Export CSV or print a leave-behind report.

Sample findings

~$91/mo illustrated savings in the demo — plus security items with zero dollar cost but real exposure.

security

Open to the entire internet

Security group bastion-sg allows SSH (22) from the entire internet. That is a common breach path.

Risk

security

Storage bucket may be public

Bucket acme-backups-prod may allow public access. Confirm Block Public Access is on.

Risk

cost

Server looks unused

staging-worker-3 shows near-zero CPU for the lookback window while still billing.

$88/mo

Pricing

Free

5 scans / month · 1 account · CSV export

Pro

$49

Unlimited scans · print reports · priority volume

FAQ

Do you store my AWS keys?

No. We AssumeRole into a role you create. Temporary session only.

Can Rectifyr change my infrastructure?

No. The role is read-only. You start every scan.

Is this affiliated with AWS?

No. Rectifyr is an independent product.

Free to start. Connect a role. Scan when you are ready.