Free Basic plan · read-only access

Cut your cloud costs. Stop paying for resources you don’t use.

VeriKost is a cloud cost optimization tool. It scans your cloud account, finds idle and oversized resources, and shows exactly how much each fix cuts from your cloud bill.

Get started free See plans and pricing

Supported clouds

AWSLIVE
Google CloudLIVE
AzureSOON
OCISOON

VeriKost Connect Cloud: choose a provider — AWS, with Azure, GCP and OCI coming soon

You connect with a read-only role.

We give you the policy. You create the role in your own AWS console and paste its ARN. There is no password and no access key to hand over.

Describe, list and get. Nothing that writes.
You press the button to scan. Daily automatic scans (Premium) stay off unless you turn them on.
Delete the role and we're out.

§ 01What we check

83 checks on AWS and 77 on Google Cloud, across the services that quietly cost the most.

Counted from the shipped rule packs, not typed. Azure and OCI are marked soon above; their checks are listed here once they ship, not before.

AWS · 83 checks

Compute

EC2 and its generations
EKS
Fargate
Lambda
SageMaker
WorkSpaces

Storage

EBS volumes and types
Snapshots
AMI snapshots
EFS
FSx
S3
CloudWatch Logs

Network

NAT Gateway
Load Balancers
Elastic IP
VPC endpoints
Transit Gateway
Data transfer and architecture

Data

RDS & Aurora (incl. Graviton)
DocumentDB & Neptune
DynamoDB
ElastiCache & MemoryDB
OpenSearch & Redshift
MSK & EMR
DMS & MWAA

Commitments

Savings Plans
Reserved Instances
Reserved nodes

Google Cloud · 77 checks

Compute

Compute Engine VMs and GPUs
GKE and its extended support fee
Cloud Run
Cloud Functions
Dataproc
Vertex AI endpoints
Cloud Composer

Storage

Persistent disks and types
Snapshots and custom images
Filestore
Cloud Storage
Artifact Registry
Cloud Logging ingestion and retention

Network

Cloud NAT
Load balancers
Static IP addresses
Cloud VPN tunnels
Data transfer and architecture

Data

Cloud SQL, including HA and extended support
AlloyDB
Memorystore for Redis
BigQuery
Spanner
Bigtable
Pub/Sub

Commitments

Committed use discounts

§ 02Security

We can look. We can't touch.

Read-only access

Describe, list and get only, on AWS and on Google Cloud. Nothing that can create, change or delete. Both permission lists are published.

No keys to hand over

On AWS we assume a role you own, with an external ID. On Google Cloud you grant our service account a read-only role; no key is ever created. Remove either and our access ends.

Rules in the open

Every threshold is published. Think one is wrong? Tell us and we'll argue it out.

The complete permission lists for AWS and Google Cloud — every action, no summary — are on the security page.

What’s in your bill?

Create an account, connect one cloud account read-only, and see what each fix would save — priced, with the evidence behind it.

Get started free

Basic is free. Premium is ₹99/month. Pricing