Core Capabilities

11 Capabilities.
One Platform.

Everything you need to see, understand, prevent, find, and fix cloud cost problems β€” with AI intelligence and enterprise governance built in.

Total Spend
Live
$12,800 ↑8%
AWS: 65%Azure: 20%GCP: 15%
πŸ€–Apex AI Agent
"What’s driving the 12% increase?"
Anomaly Detected:
EC2 instances in us-east-1 (Team: Analytics) increased by $4,200 starting Tuesday.
Waste Detection
2 High
14 Unattached EBS Volumes
Save $214/moAuto-Fix β†’
11Operational Capabilities
18+Waste Detectors
8+AI Operations
4Coverage Domains

1. Multi-Cloud Spend Visibility

Connect your cloud accounts in minutes and see consolidated spend data across AWS, Azure, GCP, and Kubernetes.

Daily and monthly spend trends with anomaly highlighting, budget posture tracking, service-level breakdowns, ingestion health, and 30-day variance summaries in one shared workspace.

< 15 minSetup time per cloud
LiveConnection verification
30-dayProjection window
AWSIAM AssumeRole, Cost Explorer, CloudWatch, 8+ detectors
AzureService Principal, Resource Graph, Azure Monitor, 5+ detectors
GCPService Account JWT, Asset Inventory, Monitoring, 5+ detectors
KubernetesIn-cluster agent, namespace attribution, rightsizing + idle workloads
πŸ€–

2. Apex AI Agent

A live operations assistant, not a chatbot. Ask questions, get answers, and create governed actions in plain English.

Guided capabilities across observability, governance, operations, and knowledge. Read operations execute immediately, write actions require explicit APPROVE confirmation, and high-impact actions route through full approval workflows.

Guided AI Operations

  • βœ“Observability: Executive Briefing, Spend Summary, Top Services, Anomaly Scan
  • βœ“Governance: Open Findings, Active Policies, Budget Status, Pending Approvals
  • βœ“Configuration: Account Verification, Integration Status, Coverage Posture
  • βœ“Operations: Load Demo Spend, Request Remediation, Verify Accounts, Commitment Negotiator
  • βœ“Knowledge: Web Research with citations from public sources
  • βœ“Read actions execute immediately; writes require APPROVE and single-use execution tokens
  • βœ“High-impact actions go through full approval workflows before execution
  • βœ“4 Instruction Profiles: Balanced, Concise, Guided, Executive
Explore All AI Capabilities β†’
πŸ‘€"What are our top 5 AWS services by cost this month?"
πŸ€–EC2 ($5,420 ↑8%), RDS ($2,880 ↑6%), S3 ($1,340 β†’), Lambda ($210 ↓2%), NAT ($95 ↑12%). Total: $10,945. Anomaly: NAT Gateway ↑12%.
πŸ‘€"Negotiate our RI portfolio for next quarter with 3-year Savings Plans"
πŸ€–Analyzing 90 days on-demand... Recommendation: 1-Year Compute SP. Current: $6,420/mo β†’ Committed: $5,120/mo. Savings: $1,300/mo (20%). Break-even: 3.4 months. Type APPROVE to create an approval-gated purchase run.

3. Pre-Merge Cost Analysis (PR Cost Diff)

Catch cost surprises before they reach production by analyzing Terraform changes from GitHub PRs.

Extracts Terraform resource changes, prices them with live cloud pricing APIs, evaluates active policies, calculates budget impact, and posts a single evolving PR review comment.

PR opened β†’ Resources extracted β†’ Live pricing β†’ Policies checked β†’ Budget impact β†’ Comment posted
  • βœ“Estimated monthly cost change (delta)
  • βœ“Risk assessment score and contributing factors
  • βœ“Policy compliance result (pass / advisory / block)
  • βœ“Budget impact projection
  • βœ“Tagging compliance check
  • βœ“Confidence score for pricing estimates

4. Waste Detection Engine

18+ automated detectors across all clouds and Kubernetes that identify structural savings.

Every opportunity includes estimated monthly savings, confidence score, effort score, risk assessment, recommended action, and a composite priority score so teams know what to fix first.

AWS Coverage8+
Unused EIPs, unattached EBS, EC2 and RDS underutilization, stale AMIs, and network waste
Azure Coverage5+
Unattached disks, unused public IPs, idle SQL databases, and zero-workload App Service plans
GCP Coverage5+
Unattached disks, unused static IPs, idle Compute Engine, idle Cloud SQL, and stale snapshots
KubernetesAgent
CPU and memory mismatch, idle pods, DaemonSet overhead, orphaned Persistent Volumes
Finding Anatomy
Estimated Savings$214/month
Confidence0.94
Effort LevelLow / Medium / High
RiskWhat could go wrong if you act
Priority ScoreSavings Γ— confidence Γ· effort

5. Automated Remediation

Don't just detect waste β€” fix it. Execute approved actions across all three major clouds.

Every remediation requires explicit human approval. Protected-tag safety, dry-run mode, credential isolation, and immutable audit trails make the workflow safe to operate in production.

πŸ”’
Protected Tags
Tag critical resources to exclude them from remediation
πŸ‘€
Human Approval
Every action requires explicit confirmation
πŸ§ͺ
Dry-Run Mode
Preview the full action without making live API calls
πŸ“
Audit Trail
Full before/after state captured for every action
⏱️
Rate Limiting
Max 10 actions per minute per workspace
AWSDelete unattached EBS volumes
AWSStop underutilized EC2 instances
AWSRelease unused Elastic IPs
AzureDeallocate idle VMs
GCPStop idle Compute Engine instances

6. AI Commitment Negotiator

Automate commitment analysis and purchasing across AWS, Azure, and GCP with integrated approval gates.

Reviews historical on-demand usage, recommends commitment strategies with projected savings and break-even periods, supports dry-run simulation, and executes purchases on approval.

15–30%Typical Savings
3–5 monthsBreak-even Period
TrackedLifecycle Events
AWS1-Year RI, 3-Year Savings Plan (partial or all upfront)
Azure1-Year Reserved Instance or 1-Year Savings Plan
GCP1-Year or 3-Year Committed Use Discounts
1Analyze Usage
2Recommend Strategy
3Simulate Purchase
4Approve
5Execute
6Track
πŸ“ˆ

7. Predictive Cost Forecasting

Two competing ML models run in parallel β€” the system automatically selects the more accurate one.

Daily predicted spend for 7, 14, 30, or 90-day horizons with confidence intervals, MAPE and RMSE transparency, and automatic fallback if data is too sparse.

  • βœ“Confidence intervals (80% and 95%)
  • βœ“Daily forecasts for 7, 14, 30, or 90-day horizons
  • βœ“MAPE and RMSE accuracy reporting
  • βœ“Budget breach probability calculation
  • βœ“Automatic model selection with fallback to linear extrapolation
Prophet (Meta)
Best for: Seasonality, holidays, trend changesMethod: Additive regression
ARIMA
Best for: Steady-state, consistent patternsMethod: Classical time series
πŸ›‘οΈ

8. Policy Engine & Governance

Define and enforce cost policies across your organization β€” from advisory warnings to hard blocks.

Tag requirements, risk thresholds, resource restrictions, and budget guardrails are enforced consistently across pull requests, findings triage, approvals, and audits.

Example Rules

BlockingBlock PRs adding GPU instances to staging
TagRequire cost-center tag on all EC2 instances
AdvisoryWarn if monthly forecast exceeds $15K
BlockingBlock new resources without team owner tag
AdvisoryCreates findings but does not block the workflow
BlockingPrevents non-compliant infrastructure from progressing
Tag RequirementsEnforce mandatory tags such as team, service, env, and owner
Budget GuardrailsSoft limits warn; hard limits block when thresholds are crossed

9. ChatOps Integration

Bring cost operations directly into Slack and Microsoft Teams.

List pending approvals, approve or reject with inline buttons, and verify actor authorization β€” all from your team's communication channels.

  • βœ“Actor authorization verification
  • βœ“HMAC signature verification on inbound webhooks
  • βœ“Timestamp replay protection
  • βœ“Inline approve/reject buttons for fast review
  • βœ“Weekly digests and anomaly notifications
/finops pendingList pending approvals
/finops approve <id>Approve a request
/finops reject <id>Reject with optional note
/finops helpShow available commands

10. Cloud Control Tower 360

See the operational health of every connected account and provider in one posture view.

Control Tower 360 scores account trust posture, ingestion SLO posture, reconciliation posture, and detector coverage so teams know when their data and workflows are actually ready for decision-making.

0–100Maturity score
3 statesHealthy / Warning / Critical
PrioritizedNext actions
TPTrust PostureWhich accounts are verified, stale, or failing verification
ISIngestion SLOHow fresh and reliable provider data is right now
REReconciliationWhether connected accounts match coverage and inventory expectations
DCDetector CoverageHow deep active scanning is per provider and environment

11. Kubernetes Cost Attribution

Turn opaque cluster bills into namespace, deployment, and team-level accountability.

The native Kubernetes agent ingests in-cluster metrics, maps costs to owners, and generates rightsizing and idle workload recommendations for teams running containerized platforms.

AGAgentLightweight Helm-deployed collector running inside the cluster
ATAttributionNamespace, deployment, and label-based cost allocation snapshots
OPOptimizationCPU and memory drift, idle pods, and orphaned PV detection
OWOwnershipTeam mapping from labels and annotations for chargeback clarity
  • βœ“Namespace and deployment-level cost attribution
  • βœ“Team-mapped allocation using Kubernetes labels and annotations
  • βœ“Rightsizing recommendations from request-vs-actual-usage drift
  • βœ“Idle pod identification for sustained zero-request workloads
  • βœ“Orphaned Persistent Volume detection for unused storage costs

Where These Capabilities Show Up

Move from product capability to day-to-day workflow with GitHub, CLI, ChatOps, IDE, and event delivery integrations.

GitHub App
Org-wide PR governance
Install once and get cost comments, policy checks, and comment upserts across repositories.
GitHub Actions
Custom CI control
Run cost analysis in workflow YAML when teams need pipeline-level customization.
FinOps CLI
Local and CI estimates
Estimate Terraform plan costs locally, in CI/CD, or before opening a pull request.
VS Code Extension
Inline Terraform hints
Surface estimated monthly resource cost while engineers are still editing infrastructure.
Slack & Teams
Approval workflows
Approve, reject, and route remediation or commitment decisions from collaboration tools.
Event Bus
Webhooks, EventBridge, Pub/Sub
Push findings, approvals, and execution events into alerting, ticketing, and data platforms.

See Every Feature In Action

Free trial. All 11 capabilities unlocked. No credit card required.