Home Services About Blog Contact Română
AWS Cost & Security Quick Check

Find the AWS spend you don't need.

A fixed-price, read-only review of your AWS account by a working DevOps engineer. You get a prioritised list of what to cut and what to lock down, within 48 hours of access.

Read-only accessReport in 48hFixed priceNo savings promised before we look

What we check

Focused on where money and risk usually hide in startup accounts. Not a 60-page audit.

cloud_done

Cost

  • Top cost drivers by service, account and region
  • Idle and orphaned resources: unattached EBS volumes, old snapshots, unused Elastic IPs, idle load balancers
  • Oversized EC2, RDS and ECS/Fargate tasks
  • NAT gateway and data transfer costs
  • S3 storage classes, lifecycle rules and CloudWatch log retention
  • Savings Plans and Reserved Instance coverage
security

Security essentials

  • Root account usage and MFA
  • IAM users with old access keys or without MFA
  • Publicly exposed S3 buckets, snapshots and databases
  • Security groups open to the internet on sensitive ports
  • CloudTrail, GuardDuty and logging coverage
  • Encryption at rest on storage and databases

How it works

Four steps. Nothing in your account changes at any point.

Book

Tell us roughly what you spend and which services you use. We confirm fit within one working day.

Grant read-only access

Deploy our CloudFormation template. It creates a read-only role with an external ID. Read it before you run it.

Review

We analyse billing data, resource usage and configuration with AWS-native tools plus open-source scanners.

Report and call

A 3–5 page PDF with the top 5 issues and estimated impact, plus a 30-minute walkthrough. Then you delete the role.

Is it a fit?

Good fit

  • Spending roughly $1,500–$15,000 a month on AWS
  • No one dedicated to cloud cost or FinOps
  • The bill has grown faster than the product
  • Preparing for a funding round or a customer security questionnaire

Probably not yet

  • Under ~$500 a month: the review would likely cost more than it finds
  • You need a formal compliance audit or a penetration test
  • Large multi-account organisations with an in-house platform team

Pricing

Launch offer · first 5 clients
$99 $249

One AWS account, up to 3 regions. Report within 48 hours of access, plus a 30-minute call.

In return we ask for honest feedback and permission to publish an anonymised summary.

After the review

Fixed-scope implementation

If you want the fixes done, we quote a fixed price per item: rightsizing, lifecycle policies, Savings Plans planning, security hardening in Terraform. No retainer.

Prices exclude VAT where applicable. Invoiced by VaultForge S.R.L., an EU company registered in Romania. We don't guarantee a specific saving: if your account is already lean, the report will say so plainly.

Book your Quick Check

We reply within one working day to confirm fit and send the access template.

FAQ

Do you need write access to our AWS account?

No. You deploy a read-only IAM role from a CloudFormation template you can inspect first. It uses an external ID, cannot modify resources, is explicitly denied from reading S3 objects, database items and secrets, and you delete it when the review is done.

Do you guarantee savings?

No. Savings depend on how the account is built, and we won't promise a number before looking. Accounts that have never been reviewed usually have something to find, but if yours is already lean, the report will say so.

Is this a full security audit or a compliance certification?

No. It is a quick check of essential security configuration, such as root account protection, MFA, public exposure and logging. It does not replace a penetration test or a SOC 2, ISO 27001 or NIS2 assessment.

Will you make the changes for us?

Only if you ask. The report is written so your own team can act on it. Implementation is available as a separate, fixed-scope engagement, and nothing is changed without written approval.

How do you handle our data?

We only access billing data, resource metadata and configuration through the read-only role. Findings are shared only with you, and we're happy to sign your NDA before access.

Who is behind VaultForge?

VaultForge S.R.L. is an EU company registered in Romania (company ID 55078449, trade register J2026042297008). The reviews are done by a working DevOps engineer with hands-on AWS, Terraform and cloud security experience.