Connect read-only
Add an AWS account through a cross-account IAM role (read-only). GCP and OCI use the same pattern. We never gain write access to your accounts.
read-only IAM · STS:AssumeRole
An always-on engine that scans your AWS, GCP, Azure and Kubernetes estate against 18 production-grade rules — each finding shipped with a dollar-denominated savings estimate, a one-click remediation plan and a confidence score.
By the numbers
downsize · terminate · delete · RI · schedule · rightsize · cleanup · grant-perm · enable-svc
0
recommendation types
IaaS · K8s · serverless · LLM
0
detection rules
CRITICAL · HIGH · MEDIUM · LOW
0
severity tiers
AWS · GCP · Azure · OCI
0
clouds analysed
How it works
Add an AWS account through a cross-account IAM role (read-only). GCP and OCI use the same pattern. We never gain write access to your accounts.
read-only IAM · STS:AssumeRole
Twenty-one rules (idle, oversized, unused-disk, old-snapshot, RI opportunity, K8s, serverless, LLM …) score each resource against provider metrics + cost data, producing recommendations sorted by `severity × estimatedMonthlySavings`.
21 rules · 4 clouds
Apply or dismiss in-app — both events go to the audit log. Or generate a Jira ticket proposal: each ticket carries the runbook (problem · manual steps · CLI commands · expected impact · rollback).
apply · dismiss · Jira ticket
What's inside
Idle compute, oversized DB, orphan disks, unattached IPs, idle load balancers, low-utilisation commitments, expired snapshots, zombie clusters, leaked NAT gateways and more — every rule has a real-world incident behind it.
Every finding ships with a 0–100 confidence score that factors in observation window, signal stability and cross-signal corroboration — so 'rightsize this' isn't based on a 7-day spike.
Each finding offers a generated remediation plan: Terraform diff, gcloud / aws CLI script, or a Jira ticket draft pre-populated with the impacted ARN/IDs.
Capabilities
Before vs after Lumicost
Without Lumicost
With Lumicost
Where teams use it
Net-new accounts typically surface USD 8K–80K of low-risk savings on their first scan — orphan disks and idle load balancers lead the pack.
Filter recommendations by team, sort by USD impact, freeze a snapshot for the quarterly business review.
Before signing a new 1-yr Savings Plan, see which existing commitments are under-utilised and re-baseline accordingly.
From the field
“Eight focused rules with a transparent priority score beat a hundred opaque ones. You should be able to read why a recommendation exists.”
Plays nice with your stack
FAQ
Never on production. We are read-only by design. Remediation always runs in your own pipeline, on your own credentials, with your own approvals.
Daily by default; configurable to hourly on the Pro plan and continuous on Enterprise.
Connect read-only credentials. First insights in 24 hours. No credit card.
90 seconds · read-only credentials · no credit card