What's shipped

Split a month’s spend across teams and have it land in finance’s inbox on the 1st, with CSV and Excel attached. Untagged cost gets its own line rather than being spread across teams — you can see the tagging gap instead of quietly invoicing someone for it.

• Allocate by tag or service, with proportional, even, fixed-% or no shared-cost split
• An explicit “Unallocated” line, always shown
• Monthly email to chosen recipients, CSV + XLSX attached
• Every row links through to Cost Explorer, filtered to that team and month

Totals are reconciled against your billed spend for the period, and a report that does not tie out says so on its face rather than looking fine. Recipients are checked against account access when the mail is sent, not when the address was typed.

The month-end projection is now a forecast with a measured range, not a straight-line extrapolation. It learns your weekly rhythm and your month-end pattern, shows a P10–P90 range, and prints the error it actually achieves on your own history — so you can judge how much to trust it.

• P50 forecast with its P10–P90 range on the dashboard
• Backtested “typical error” shown alongside, measured per tenant
• Budgets: create your first budget from the forecast in one click, pre-filled at P80
• Under a month of history falls back to a run-rate and says so — no invented band

Accuracy is enforced in CI: the model must beat a naive run-rate on a seeded backtest suite or the build fails. Method and current numbers are written up in the forecast methodology doc.

Full marketing-site rebuild covering 38 routes — hero pages, product deep-dives, solutions personas, customer stories, compare pages, an honest /security-trust surface, and a rebuilt /documentation with 7-section IA. Built on a shared component set and a single brand-facts source of truth so claims can't drift.

• New /product/* pages: cost-optimization, security, anomaly-detection, tag-governance, forecasting, multi-account
• New /solutions/* persona pages × 5 (startups, enterprise, MSP, FinOps, engineering)
• New /roi-calculator with full per-lever breakdown
• New /customers index + 3 anonymized detail stories
• New /compare/aws-cost-explorer with honest comparison
• Rebuilt /documentation with 7-section sidebar IA + 23 topics

Anomalies now carry a plain-English AI-generated explanation alongside the statistical signal. Reduces alert-fatigue for on-call rotations by making the cause visible at a glance.

Org → Customer → Account hierarchy is live with strict data isolation between customers. Role-based notification routing sends cost alerts to FinOps, security findings to SecOps, and anomalies to on-call. See Multi-Account & MSP for the full architecture.

Security Score launched alongside the Optimization Score. 80 new findings added across IAM, network, and logging — catalog now at 380+ checks. Browse the catalog.

Findings where remediation is safe and well-known now offer a one-click Fix Available button. Requires a scoped opt-in policy per fix type — baseline IAM role stays strictly read-only.

New no-login flow: upload a bill to the free analyzer and get a savings report in 60 seconds. Files deleted after analysis.

Untagged resource visibility ranked by spend, allocation gap trends, drift detection, and dry-run policy enforcement preview. See Tag Governance.