Scan Your AWS
Infrastructure
See your actual waste and compliance risks. No agents. No modifications. EU-hosted.
Everything you need to secure and optimize
Four powerful scanners working together to find waste, ensure compliance, and give you complete visibility.
Orphaned Resources
AI-powered detection of idle EBS volumes, unused EIPs, and forgotten snapshots draining your budget.
SSL Certificates
Full coverage of ACM certificates and endpoint scans. Get alerts at 60, 30, 14, and 7 days before expiry.
Data Residency
EU-only compliance checks to flag resources deployed in US, Asia, or other non-EU regions.
Cloud Inventory
Complete catalog of your AWS resources. EC2, RDS, S3, ALB, and more in one unified dashboard.
How we compare
See why teams choose ScanOrbit over manual audits and native AWS tools.
| Feature |
ScanOrbit
Recommended | AWS Cost Explorer | Manual Audit |
|---|---|---|---|
| Setup time | 5 minutes | 30 minutes | Weeks |
| Real-time alerts | | | |
| Orphaned resources | | | |
| SSL expiry tracking | | | |
| Data residency checks | | | Varies |
| GDPR-safe (EU hosting) | | | Varies |
| Starting cost | €0/mo | Free (limited) | €5k-50k |
Start scanning in under 5 minutes
No agents to install. No SSH access required. Just a simple IAM role with read-only permissions.
Connect AWS
Create a read-only IAM role in your AWS account. We provide the exact policy - no write permissions needed.
Automatic Scan
Our scanner analyzes all your resources across all enabled regions. Typically completes in 5-10 minutes.
Get Findings
Review prioritized findings with cost estimates, severity levels, and actionable recommendations.
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"ec2:Describe*",
"rds:Describe*",
"s3:GetBucketLocation",
"s3:GetBucketTagging",
"s3:ListAllMyBuckets",
"elasticloadbalancing:Describe*",
"acm:Describe*",
"acm:List*"
],
"Resource": "*"
}]
} Read-only permissions only. Zero write access.
Scan Capabilities
Finding Details
No credit card required
Built for Security from Day 1
We're an early-stage startup, but security isn't a nice-to-have for us—it's foundational. Here's what we do today:
SOC2 & ISO 27001 audits scheduled for late 2026.
Simple, Transparent Pricing
Start free. Upgrade anytime.
| Feature | Free €0 | Pro €19 /month | Team €79 /month |
|---|---|---|---|
| AWS Accounts | 1 | 1 | 5 |
| Scanner Types | Limited | All | All |
| Scan Frequency | Limited | Unlimited | Unlimited |
| Data Retention | 7 days | 30 days | 90 days |
| Email Alerts | — | | |
| API Access | — | — | |
| Scan Priority | — | — | |
| Support | Community | Priority Email | |
| Custom Schedules | — | — | |
| Team Features | — | — | |
| Get Started | Start Free Trial | Start Free Trial |
Frequently asked questions
Everything you need to know about ScanOrbit security and features.
What's included in the Free plan?
The Free plan includes 1 AWS account, limited scanner types, limited scan frequency, and 7-day data retention. It's perfect for trying out ScanOrbit and getting started with basic infrastructure monitoring.
What's the difference between Pro and Team?
Pro (€19/month) is for individual DevOps engineers - you get 1 AWS account, all scanner types, unlimited scans, 30-day retention, and email support. Team (€79/month) adds 5 AWS accounts, API access, scan priority, custom schedules, team collaboration features, and priority email support.
Is there a free trial for paid plans?
Yes! Both Pro and Team plans come with a free trial period. You can also use our Free plan indefinitely to evaluate the core functionality.
How do you prevent unauthorized access?
We use a read-only IAM role with zero write permissions. Our policy only includes Describe* and List* actions - we literally cannot modify, create, or delete any resources in your AWS account.
Is my data safe?
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). We only store metadata about your resources - never the actual data inside them. Everything is hosted in EU data centers.
Do you modify any AWS resources?
Never. We only scan and report. Our IAM role has no write permissions. We can't start, stop, create, or delete anything. It's technically impossible for us to make changes.
How long does the initial scan take?
Typically 5-10 minutes depending on the size of your infrastructure. We scan all enabled regions in parallel for maximum speed. Subsequent scans are often faster as we optimize for changes.
What scanner types are available?
We offer orphaned resource detection (EBS volumes, Elastic IPs, snapshots), SSL certificate expiry tracking, data residency compliance checks, and complete cloud inventory. Free plan has limited access, while Pro and Team get all scanner types.
How long is data retained?
Free: 7 days. Pro: 30 days. Team: 90 days. You can request deletion at any time, and all data is permanently removed within 30 days per GDPR requirements.
Can I connect multiple AWS accounts?
Free and Pro plans support 1 AWS account. Team plan supports up to 5 AWS accounts with consolidated dashboards and cross-account reporting.
Can I cancel anytime?
Yes, you can cancel your subscription at any time. You'll continue to have access until the end of your billing period. No long-term contracts or cancellation fees.
Do you support other cloud providers?
Currently we support AWS only. Azure and GCP support is on our roadmap. Contact us if you're interested in multi-cloud support.
Still have questions?
Contact us directly