CloudArq

Scan your AWS, get the exact fix for every finding

SaaS

Developer Tools

Artificial Intelligence

Visit WebsiteSee on Product HuntTwitter ⧉

Hey Product Hunt, I'm Abdallah, founder of CloudArq. A while back I was using my personal AWS account for school work and side projects, and the monthly bill kept creeping up. Nothing dramatic, just more than it should have been for what I was actually using. When I went into the console to figure out where the money was going, I spent the better part of an evening clicking through tabs, trying to work out each line item, whether I still needed it, and how to turn it off if I didn't. I found old EC2 instances from a class I'd taken months earlier, EBS volumes attached to nothing, an Elastic IP I'd forgotten about. A surprising amount of stuff just sitting there, billing quietly in the background. While I was in there I checked the security side too. A public S3 bucket from a prototype. An IAM user with way more permissions than it needed. An access key I should have rotated long ago. I went looking for a tool that would just tell me, straight up, what's costing me money I don't need to spend and what's a security risk worth fixing. Something I could point at my account and get answers in five minutes instead of spending an evening playing detective. The options weren't a great fit: Wiz and Lacework are excellent but priced for enterprise, Prowler and Steampipe are great if you have time to wire your own pipeline and read JSON, AWS Security Hub is fine if you already live in the console. There wasn't a middle option: hosted, monthly price, tells you the actual fix not just the problem, for small teams and indie projects. So I built one. CloudArq runs 172 automated checks against an AWS account, maps the findings to 8 compliance frameworks (CIS, SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, NIST 800-53, AWS Well-Architected), and for each finding gives you the actual fix: the CLI command, the Terraform block, the CloudFormation snippet. There's also a built-in AI assistant you can ask about any finding, and on Max it writes the remediation for your exact resource, not a template, the exact commands for the bucket, role, or instance that's failing. It runs under a read-only IAM role you provision, so it never has long-lived keys and never sees the data inside your resources. Free under 50 resources, $79/mo Pro, $199/mo Max, custom for organizations that need pooled scans across multiple accounts. There's a live demo you can try with no signup (link above). If you run AWS for anything, point it at your account and tell me what's broken. If you spot something I'm missing, that's exactly what I want to hear. I'll be in the comments all day.