FEATURES
Find $1,300+/Mo of AWS Waste
Without a FinOps Team.
CostPatrol audits your AWS accounts the way an experienced FinOps engineer would. Real dollar amounts. Specific resources. Copy-paste fix commands. Read-only access, results in under three minutes.
What CostPatrol has actually found.
Every link below is a write-up of an audit we ran. Account size, finding, fix command, and the dollar amount are all there.
What you actually share with us.
Read-only metadata, encrypted in transit and at rest, processed in eu-west-1. We cannot create, modify, or delete anything in your account. Full IAM policy is on the security page.
Two engines. Complete coverage.
CostPatrol runs two detection engines in parallel: optimization rules that scan live infrastructure, and anomaly rules that analyze daily cost patterns. Together, they catch waste that either engine would miss alone.
Proactive waste detection
Scans your live AWS resources for misconfigurations, idle resources, and oversized infrastructure. Finds savings whether costs are spiking or not.
- Idle and underutilized resources
- Previous-generation instance types
- Storage misconfigurations
- Missing lifecycle policies
- Over-provisioned capacity
- Commitment underutilization
Reactive cost monitoring
Analyzes your cost history to detect spikes, runaway trends, and unusual patterns. Alerts you before a surprise bill lands.
- Service-level cost spikes
- Runaway data transfer charges
- Log ingestion surges
- Storage growth anomalies
- Budget breach forecasting
- Credential compromise signals
Compute waste is the #1 source of AWS overspend
EC2 instances are easy to launch and easy to forget. CostPatrol detects idle instances, previous-generation types, oversized allocations, and stopped instances still burning EBS storage costs.
We find idle instances, previous-generation types eligible for Graviton ARM migration, oversized allocations needing right-sizing, and stopped instances still burning EBS storage. Off-hours scheduling on non-prod alone saves 65 to 70 percent. Spot opportunities for autoscaled compute can hit 90 percent.
Typical compute spend reduction. 30 to 60 percent.
Database instances are the most expensive resource to leave idle
CostPatrol covers RDS, Aurora, DynamoDB, DocumentDB, Neptune, MemoryDB, and Keyspaces with dedicated rules for each cost driver — from idle instances to I/O-Optimized eligibility.
We cover RDS, Aurora, DynamoDB, DocumentDB, Neptune, MemoryDB, ElastiCache, and Keyspaces. We catch idle clusters, redundant Aurora readers, oversized DynamoDB capacity, missing TTL on time-series tables, I/O-Optimized eligibility, Extended Support fee exposure, and Multi-AZ on non-production. We have rules that found $6,496 per month on a single audit.
Typical database spend reduction. 20 to 40 percent. Often more on Aurora and DynamoDB.
Serverless does not mean cost-free
Lambda costs scale with memory allocation and architecture. Step Functions charge per state transition. CostPatrol finds over-provisioned functions, architecture mismatches, and recursive loops.
We catch x86 Lambdas ready for Graviton ARM (20 percent saved on a config change), over-allocated memory, idle provisioned concurrency, recursive loops, and Step Functions Standard versus Express misuse (30 percent or more). The anomaly engine separately catches duration spikes, invocation surges, and runaway transition storms before they hit your bill.
Typical serverless spend reduction. 20 to 40 percent.
Storage volumes and buckets are the quietest source of waste
CostPatrol covers EBS, S3, EFS, ECR, snapshots, and AMIs — everything that accumulates cost silently when lifecycle policies are missing.
We cover EBS, S3, EFS, ECR, snapshots, and AMIs. We catch missing lifecycle policies, S3 version bloat, GP2 volumes that should be GP3, stale snapshots eligible for archive, Intelligent-Tiering opportunities, and EFS migration to Infrequent Access (up to 94 percent). KMS Bucket Keys alone cut S3 encryption cost 95 to 99 percent.
Typical storage spend reduction. 40 to 70 percent.
Network costs are the hardest to attribute — and the easiest to waste
NAT Gateways, data transfer, public IPv4, Transit Gateway, VPC endpoints, Route 53, and CloudFront. CostPatrol audits your entire networking cost surface.
We audit NAT Gateways, data transfer, public IPv4, Transit Gateway, VPC endpoints, Route 53, and CloudFront. One idle NAT Gateway costs $32 per month doing nothing. We catch missing S3 and DynamoDB Gateway Endpoints, orphaned Elastic IPs at $3.60 each, idle Transit Gateway attachments, idle PrivateLink endpoints, unused load balancers at $16 per month, and CloudFront price-class mismatches.
Typical network spend reduction. 30 to 80 percent. Often more if a single NAT is misconfigured.
ECS, EKS, Redshift, OpenSearch, MSK, Kinesis, Glue, EMR
Modern AWS architectures run on containers and managed analytics services. CostPatrol has dedicated rules for each — from EKS extended support fees to Glue DPU oversizing.
We cover ECS, EKS, Redshift, OpenSearch, MSK, Kinesis, Glue, EMR, and Timestream. We catch oversized ECS tasks, idle EKS clusters, EKS Extended Support fees ($0.60 vs $0.10 per cluster-hour, around $365 per month), DC2 and DS2 Redshift waiting on RA3 modernization, oversized Kinesis shards, and Glue DPU oversizing.
Typical managed-services spend reduction. 20 to 50 percent.
The costs you forgot you were paying
CloudWatch log retention, orphaned alarms, untagged resources, RI/Savings Plans utilization gaps, and cost commitment recommendations. CostPatrol surfaces what your AWS console hides.
We catch excessive CloudWatch log retention, orphaned alarms, unused custom metrics, Lambda dual-write logging waste, VPC Flow Logs over-scoping, Savings Plans utilization gaps, Reserved Instance waste, and untagged resources blocking cost allocation. Plus the visibility you need to attribute the rest.
Typical CloudWatch and observability spend reduction. 50 to 80 percent.
Built by an engineer who kept finding the same waste in every account.
I'm Mohamed Shehabeldin. I built CostPatrol after running cost audits across dozens of AWS accounts and seeing the same patterns: idle Aurora replicas, x86 Lambdas one config flag away from 20 percent ARM savings, NAT Gateways routing 4 TB through DataProcessing because a free Gateway Endpoint was missing.
The existing options were either AWS Trusted Advisor (vague suggestions, no resource IDs, no fix commands) or enterprise FinOps platforms that cost more than what they save on a $25K/month account. Nothing in between.
CostPatrol is what I wanted: 123 deterministic rules built from real waste patterns, every finding backed by CloudWatch data, every fix command copy-paste runnable. No AI guesswork. No black box. Read-only access. Results in three minutes.
Every rule at a glance
78 optimization rules and 33 anomaly detection rules across every major AWS service. We add more every day.
Optimization 78 Optimization Rules
Compute
Serverless
Database
Storage
Network
Monitoring & Logging
Analytics
Billing & Commitments
Containers
Governance & Security
Anomaly 33 Anomaly Detection Rules
Cost Intelligence
Compute & Serverless
Storage & Database
Network & Logging
Analytics & AI
Security
See your number in three minutes.
Free scan reveals your top finding with the exact fix command. Pro unlocks every resource ID, fix command, and the daily Slack digest.