AWS coverage
Analyze AWS spend and resource usage across EC2, RDS, S3, EBS, Lambda, EKS, and more.
Investigate AWS usage
- Cost visibility
- See every dollar and what's driving it across all AWS services, compute, storage, networking, and data.
- Waste detection
- Identify unnecessary NAT Gateway traffic and unused EBS snapshots.
- Remediation tracking
- Send findings to Slack, Jira, Teams, or ServiceNow and track each change through resolution.
AWS coverage details
| Service or resource | What PointFive analyzes |
|---|---|
| EC2 instances | Rightsizing, scheduling, generation upgrades, and idle instance detection across all instance families. |
| EBS volumes and snapshots | Orphaned volumes, snapshot bloat, gp2-to-gp3 migration, and unused AMI cleanup. |
| RDS databases | Idle databases, oversized instances, storage autoscaling, and multi-AZ right-sizing. |
| Networking and NAT Gateway | VPC Flow Log analysis to detect NAT Gateway waste, unused Elastic IPs, and idle load balancers. |
| Lambda and serverless | Memory rightsizing, duration optimization, and provisioned concurrency analysis. |
| S3 storage | Lifecycle policy gaps, storage class optimization, multipart upload cleanup, and versioning analysis. |
Service or resourceEC2 instances
What PointFive analyzesRightsizing, scheduling, generation upgrades, and idle instance detection across all instance families.Service or resourceEBS volumes and snapshots
What PointFive analyzesOrphaned volumes, snapshot bloat, gp2-to-gp3 migration, and unused AMI cleanup.Service or resourceRDS databases
What PointFive analyzesIdle databases, oversized instances, storage autoscaling, and multi-AZ right-sizing.Service or resourceNetworking and NAT Gateway
What PointFive analyzesVPC Flow Log analysis to detect NAT Gateway waste, unused Elastic IPs, and idle load balancers.Service or resourceLambda and serverless
What PointFive analyzesMemory rightsizing, duration optimization, and provisioned concurrency analysis.Service or resourceS3 storage
What PointFive analyzesLifecycle policy gaps, storage class optimization, multipart upload cleanup, and versioning analysis.
AWS services in context
Review Kubernetes workloads on EKS, data pipelines on EMR, and AI workloads on Amazon Bedrock and SageMaker AI alongside the infrastructure they use. Coordinate S3 lifecycle policies with application usage and investigate public internet access where VPC endpoints could be used.
Enterprise-grade security and controls.
Independent audits, clear privacy commitments, and controls that keep your organization in charge. Explore our certifications, security reports, and access safeguards.
Visit our Trust CenterFrequently asked questions
PointFive uses a read-only IAM role with minimal permissions for discovery. Discovery uses read-only access. Automated remediation uses customer-authorized permissions, and each customer chooses how changes are approved: per change, once for a trusted playbook, or not at all. Guided onboarding connects discovery without agents or code changes.
PointFive detects waste across EC2, RDS, S3, EBS, Lambda, EKS, Fargate, NAT Gateway, CloudWatch, MSK, SageMaker AI, Amazon Bedrock, and more.
AWS Cost Explorer analyzes AWS cost and usage and provides EC2 rightsizing and commitment recommendations. PointFive adds DeepWaste investigation across services and layers, and helps engineers fix findings in the tools they already use, with verified tracking.
Savings depend on your workloads and the changes you implement. Evaluate recommendations against workload requirements and measure realized savings against actual usage and billing after remediation.
Read-only discovery does not modify your resources. Automated remediation requires customer-authorized permissions and approval. Least-privilege IAM role with minimal permissions. Data encrypted in transit and at rest. SOC 2 Type II. No agents to install or maintain.

