unusd.cloudYou keep the client.
We never meet them.
You subscribe. You attach accounts you already operate. Read-only unused-resource scans across 30+ AWS services and every enabled region (51+ detection types). Weekly digest to your inbox. You bill the fix.
// who this is for
- You already operate the accounts
Landing zone, retainer, or a cleanup you are already on the hook for. The client stays yours.
- You bill the work
Well-Architected, workshops, remediations. You do not want to maintain another scanner.
- You do not share the book
No intro. No second vendor in the relationship. We never meet your clients.
// why it fits your practice
- You subscribe
Paid plan on your AWS Marketplace invoice. Fold it into the retainer, or eat it.
- Digest lands with you
Email, Slack, or Teams to your practice. You decide what the client sees.
- White-label if you need it
Org name and logo already sit on reports. Digest and app under your brand only: ask. Optional.
// how you run it
- 01
You subscribe on AWS Marketplace, against your own org. Startup or Business. Private offer if procurement wants it.
- 02
You deploy a read-only IAM role in accounts you already touch. CloudFormation, Terraform, or StackSets. You inspect the template.
- 03
Weekly digest to you. You run the cleanup. That is still your SOW. The scan stays on between workshops.
// what the scan names
Idle EC2, unattached EBS, forgotten NAT gateways, gp2 to gp3, EKS extended support, CloudWatch waste, idle RDS, unused EIPs, and the rest of the 51+ rules. Deterministic. Field detections Cost Explorer will not name. Unlimited accounts from Startup. 1 credit is 1 resource on one scan.
Startup $149/mo · 15,000 credits · email and Slack. Business $500/mo · Teams. Prices monthly, billed annually, on AWS Marketplace. Your org pays. Not theirs.
Not an MSP that takes the account. Not auto-remediation. We do not email your clients. ZOPH.IO SASU, France. Control plane in eu-west-1. Public /security. DPA on request.