getting started

FAQ

Frequently asked questions about Cloud Cost Guard

8 min read
Updated 2026-02-24

Frequently Asked Questions (FAQ)

General Questions

What is OpsCurb?

OpsCurb is an AWS cost optimization platform that automatically scans your AWS infrastructure to identify wasteful resources and provides actionable recommendations to reduce your cloud spending.

How does it work?

  1. You grant us read-only access to your AWS account via an IAM role
  2. We scan your infrastructure daily (or on your schedule)
  3. We identify wasteful resources (unattached volumes, idle instances, etc.)
  4. We provide recommendations and AI-powered fix instructions
  5. You implement the recommendations and save money

How much can I save?

Most customers save 15-30% on their AWS bill in the first month. Some customers save even more. Actual savings depend on:

  • Size of your infrastructure
  • How optimized your current setup is
  • Which recommendations you implement

Is there a free trial?

Yes! We offer:

  • Free Plan: Forever free with basic features
  • 14-day trial: For Starter and Pro plans (no credit card required)

Security & Privacy

Is OpsCurb safe?

Yes! Security is our top priority:

  • Read-only access: We cannot modify your AWS resources
  • No data access: We cannot read S3 objects or database contents
  • Encryption: All data encrypted at rest and in transit
  • External ID: Protection against confused deputy attacks
  • Compliance: GDPR and CCPA compliant

See SECURITY.md for detailed security information.

What AWS permissions do you need?

We only need read-only permissions for:

  • EC2 (instances, volumes, snapshots, AMIs)
  • RDS (instances, snapshots)
  • S3 (bucket metadata only, not object contents)
  • CloudWatch (metrics and logs)
  • Cost Explorer (billing data)
  • ELB, ECR, VPC (metadata)

See the complete IAM policy in terraform/main.tf.

Can you modify my AWS resources?

No. We have zero write permissions. We can only read metadata and provide recommendations. You maintain full control over implementing changes.

Can you access my data?

No. We cannot access:

  • ❌ S3 object contents
  • ❌ RDS/database data
  • ❌ EC2 instance data
  • ❌ Application logs
  • ❌ Secrets or credentials

We only read metadata like resource IDs, sizes, and configurations.

Where is my data stored?

  • Database: Supabase (PostgreSQL) in US-East
  • Backups: AWS S3 with encryption
  • Retention: 90 days (Free), 1 year (Paid)
  • Enterprise: Custom data residency available

Do you sell my data?

Never. We will never sell, rent, or trade your data to third parties. See our Privacy Policy.


Setup & Configuration

How long does setup take?

5-10 minutes for most users:

  1. Create account (2 min)
  2. Deploy IAM role (5 min)
  3. Run first scan (1 min)

See our Onboarding Guide for step-by-step instructions.

What if I have multiple AWS accounts?

You can connect unlimited AWS accounts. Each account needs its own IAM role with a unique External ID.

Can I scan specific regions only?

Yes! You can configure which AWS regions to scan in your settings. This can reduce scan time and focus on regions you care about.

How often are scans run?

  • Free Plan: Daily at 6 AM UTC
  • Starter/Pro: Configurable (hourly, daily, weekly)
  • Enterprise: Custom schedule
  • Manual: Run scans anytime from the dashboard

Can I run scans manually?

Yes! Click "Run Scan Now" in the dashboard to trigger an immediate scan.


Features & Functionality

What resources do you scan?

We scan 14 categories of AWS resources:

Storage:

  • Unattached EBS volumes
  • Aged EBS snapshots
  • Aged RDS snapshots
  • S3 buckets without lifecycle policies
  • ECR repositories with old images
  • Unused AMIs and snapshots

Compute:

  • Stopped EC2 instances
  • Zombie RDS instances (no connections)
  • Over-provisioned Lambda functions (coming soon)

Network:

  • Unassociated Elastic IPs
  • Idle load balancers
  • Idle NAT gateways
  • Missing VPC endpoints
  • Cross-region data transfer

Monitoring:

  • CloudWatch logs without retention
  • Unused CloudWatch metrics
  • High GetMetricData API usage

What's the difference between plans?

FeatureFreeStarterProEnterprise
AWS Accounts1310Unlimited
Scans/Day1UnlimitedUnlimitedUnlimited
Data Retention90 days1 year1 yearCustom
AI Explanations50/month500/monthUnlimited
AI Model Choice
Slack/Discord
API Access
SupportEmailEmailPriorityDedicated

See PRICING.md for full comparison.

What are AI-powered explanations?

For each finding, our AI generates:

  • Detailed explanation: Why this is wasteful
  • Step-by-step instructions: How to fix it
  • AWS CLI commands: Copy-paste commands
  • Console steps: Click-by-click guide
  • Risk warnings: What to watch out for

Available on Starter plan and above.

Can I choose which AI model to use?

Yes, on Pro and Enterprise plans you can choose from:

  • GPT-4o Mini (fast, cost-effective)
  • GPT-4o (balanced)
  • Claude 3.5 Sonnet (advanced reasoning)

Do you support other cloud providers?

Currently, we only support AWS. Support for Azure and GCP is planned for 2026.


Billing & Pricing

How does billing work?

  • Monthly subscription: Billed on the same day each month
  • Annual option: Save 20% with annual billing
  • Automatic renewal: Cancel anytime
  • Prorated: Upgrades are prorated

What payment methods do you accept?

  • Credit cards (Visa, Mastercard, Amex)
  • Debit cards
  • ACH (Enterprise only)
  • Wire transfer (Enterprise only)

All payments processed securely via Stripe.

Can I cancel anytime?

Yes! Cancel anytime from your account settings. You'll retain access until the end of your billing period.

Do you offer refunds?

We offer refunds on a case-by-case basis within 30 days of purchase. Contact support@opscurb.com.

Is there a discount for nonprofits?

Yes! We offer 50% off for registered nonprofits and educational institutions. Contact sales@opscurb.com.

What happens if I exceed my plan limits?

  • AWS Accounts: You'll be prompted to upgrade
  • AI Explanations: Soft limit - you can purchase add-ons
  • API Calls: Rate limited, upgrade for higher limits

Technical Questions

What regions do you support?

We support all AWS commercial regions:

  • US East (N. Virginia, Ohio)
  • US West (Oregon, N. California)
  • Europe (Ireland, Frankfurt, London, Paris, Stockholm, Milan)
  • Asia Pacific (Singapore, Tokyo, Sydney, Seoul, Mumbai, Hong Kong)
  • Canada (Central)
  • South America (São Paulo)
  • Middle East (Bahrain)
  • Africa (Cape Town)

GovCloud and China regions are not currently supported.

How accurate are the cost estimates?

Our cost estimates are based on:

  • AWS public pricing (updated monthly)
  • Resource metadata (size, type, region)
  • Historical usage patterns

Estimates are typically ±10% accurate. Actual costs may vary based on your specific AWS pricing agreements.

Can I integrate with my existing tools?

Yes! We offer:

  • REST API: Programmatic access to all data
  • Webhooks: Real-time notifications (coming soon)
  • Slack/Discord: Native integrations
  • CSV/JSON Export: For custom integrations

See API_DOCUMENTATION.md and INTEGRATIONS.md.

Do you support Infrastructure as Code?

Yes! Our AI can generate:

  • Terraform code for fixes
  • CloudFormation templates
  • AWS CLI commands

We also plan to add GitHub Action integration for PR cost analysis.

What's your uptime SLA?

  • Free: No SLA
  • Starter: 99% uptime
  • Pro: 99.5% uptime
  • Enterprise: 99.9% uptime with credits

See SLA.md for details.


Troubleshooting

My scan failed. What should I do?

Common causes:

  1. IAM role issues: Verify the role exists and has correct permissions
  2. External ID mismatch: Ensure External ID matches
  3. Region restrictions: Check if you've restricted regions
  4. AWS service issues: Check AWS status page

See TROUBLESHOOTING.md for detailed solutions.

I'm not seeing any findings. Why?

Possible reasons:

  1. Your infrastructure is already optimized! 🎉
  2. Scan is still running: Wait for completion
  3. Filters applied: Check your filter settings
  4. Permissions issue: Verify IAM permissions

How do I rotate my External ID?

  1. Generate a new External ID
  2. Update the IAM role trust policy
  3. Update the External ID in OpsCurb settings
  4. Test the connection

Can I delete my account?

Yes. Go to Settings → Account → Delete Account. All your data will be permanently deleted within 30 days.


Support

How do I get help?

What's your support response time?

  • Free: 48 hours (email only)
  • Starter: 24 hours (email)
  • Pro: 4 hours (email + chat)
  • Enterprise: 1 hour (dedicated support)

Do you offer onboarding assistance?

  • Free/Starter: Self-service onboarding
  • Pro: Email onboarding support
  • Enterprise: Dedicated onboarding specialist

Still have questions?

Contact us at support@opscurb.com or visit our documentation.


Last Updated: 2026-02-24
Version: 1.0