Cloud cost visibility for AWS, Azure, Google Cloud and DigitalOcean

See every cloud resource, what it costs, and what you can turn off.

Connect your cloud accounts with read-only access. Cloud Spend Guard maps every resource with its cost, flags what's sitting idle, and gives you the exact command to clean it up.

Free plan available. No credit card required.

The Cloud Spend Guard map of an AWS account, with Idle resources highlighted

Works with

How it works

From connection to your first findings in minutes.

  1. 1

    Connect

    Launch a CloudFormation stack in AWS, or add a read-only token or key for Azure, Google Cloud or DigitalOcean. It takes a few minutes.

  2. 2

    Snapshot

    Cloud Spend Guard discovers your resources every day and reads their cost from your own billing data.

  3. 3

    Clean up

    See everything on a map, find what is Idle, and copy the command that removes it. You stay in control of every change.

Everything you pay for, in one place

Stop digging through billing consoles. See what you run, what it costs, and what you can remove.

A map of your cloud

Regions, networks, subnets and the resources inside them, each with what it costs this month.

Idle detection

Unattached volumes, stopped instances, unused IP addresses, load balancers with no targets. Each with the reason and the date it became Idle.

Recommendations you can run

What to do, why, what it saves a month, and the exact aws, az, gcloud or doctl command. You run it; we never change anything.

Changes

Every Snapshot is compared with the one before: what is new, what was deleted, and what became Idle.

Totals that match your bill

Tax, support and data transfer are shown separately as Unattributed Cost, so the numbers add up to your invoice.

Ask in plain English

Sam, our built-in AI assistant, answers questions from your data. Or connect Claude Code and other MCP clients with an API key.

Read-only by design

You are giving us a look inside your cloud. Here is how we keep that safe.

View-only access

On AWS we use the ViewOnlyAccess policy: we see your resources and their cost, not the contents of your buckets, tables or parameters.

We never change anything

Recommendations come with commands you run yourself. Cloud Spend Guard does not modify, stop or delete anything in your account.

Billing data stays in your account

On AWS the Cost Export is delivered to a bucket in your own account, and we read it from there.

Secrets encrypted, keys hashed

Tokens and keys you give us are stored encrypted. API keys are stored only as a hash.

Read more about security →

Simple pricing

Start free and upgrade when you need more accounts or a longer history.

Free

For individuals with one account per cloud.

$0$0forever

  • One Cloud Account per cloud provider
  • Map, Idle detection and Recommendations
  • 30 days of Changes
  • A daily Sam allowance
Start free

Custom

For larger estates or special requirements.

Let's talkLet's talk

  • More Cloud Accounts and members
  • A larger Sam allowance
  • Limits and terms agreed with you
Contact us

Prices in US dollars.

FreeProCustom
AWS, Azure, Google Cloud and DigitalOcean
Cloud Accounts1 per providerUp to 20, any mixAs agreed
AWS Organizations–Coming soonComing soon
Members1Up to 5 (coming soon)As agreed
Daily Snapshots
Resource map
Idle detection and Recommendations
Changes history30 days90 days90 days
Sam, the built-in AI assistantDaily allowance3× the daily allowanceAs agreed
MCP server and API keys
Alerts–Coming soonComing soon
SupportEmailPriority emailDirect contact
PaymentNoneCardCard or invoice
Csaba Boros

A note from our founder

"I've spent more than twelve years designing and running production systems. Cloud Spend Guard is the tool I always wanted: read-only, numbers that match the bill, and a clear next step for every dollar you don't need to spend."

Csaba Boros

Founder & Principal Engineer

From the blog

Guides to cutting cloud costs, and what's new in Cloud Spend Guard.

All posts →

Frequently asked questions

What access do you need?

On AWS, a role with the ViewOnlyAccess policy and a few permissions to read the Cost Export, created by a CloudFormation stack you launch and can read first. On Azure, Google Cloud and DigitalOcean, a read-only service principal, service account key or personal access token.

Can Cloud Spend Guard change or delete anything?

No. We only read. Recommendations include the command to run, and you decide whether to run it.

Will it add to my cloud bill?

On AWS, the setup creates a Cost Export and a bucket in your account to hold it, which usually costs a few cents a month. We do not call paid APIs such as Cost Explorer.

Which clouds are supported?

AWS accounts, Azure subscriptions, Google Cloud projects and DigitalOcean teams. Cost for Google Cloud projects is not read yet; their resources and Idle detection work today.

Where is my data stored?

In AWS, in the us-east-1 (N. Virginia) region.

Can I cancel any time?

Yes. Cancel from your Account page and Pro stays active until the end of the period you paid for. The Free plan has no time limit.

Get in touch

Every email is read by a person, not a ticket bot.

Find out what your cloud is really costing you

Connect your first account in a few minutes. The Free plan has no time limit.

Start free