AI Narrative Report
A 60-second plain-English summary of where money is going and the highest-leverage moves.
Everything Refine does, on one page
Every capability, one free product
Cost optimization, security findings, anomaly detection, tag governance, forecasting, and multi-account hierarchy. Free forever, built by an AWS Advanced Tier Services Partner.
By HabileLabs
refine · command center3 accounts · 17 regions
Monthly spend
$26.9k
Found this month
–$6,516/mo
Optimization score
76
- anomalyNAT data processing +218% — caught 09:14, not on the invoice
- securityPublic S3 bucket closed — Fix Available, one click
Cost Optimization
Find waste at the service and resource level. Read recommendations as plain-English narratives written by Gen-AI, not raw CSV dumps.
Service-Level Recommendations
Per-service breakdowns with right-sizing, storage class, and idle-resource recs.
Resource-Level Recommendations (CUR)
Drill down to individual EC2, RDS, EBS, and S3 resources that are over-provisioned or underused.
Optimization Score
Single 0–100 score that tracks how close you are to the efficient frontier of your workload.
Top Cost Drivers by Service / Time / Region
Drill from total spend to the line items behind it without leaving the dashboard.
CSV / XLSX / PDF Bill Ingestion
Upload a bill for the same analysis without connecting AWS. Deleted automatically after analysis.
Security Findings
380+ checks across IAM, storage, network, compute, and logging. Multi-region, severity-tiered, with one-click fix hooks where the change is safe and obvious.
380+ Security Checks
IAM keys >90 days, public S3 buckets, unrestricted SSH, unencrypted EBS, VPC flow logs disabled, GuardDuty disabled, public ALB without WAF, and hundreds more.
Severity Tiers
Critical, High, Medium, Low — calibrated against the same risk model your auditor uses.
Multi-Region Coverage
Auto-discovers the regions your accounts use — for example ap-south-1, eu-central-1, us-east-1, eu-north-1, ap-south-2, and ap-northeast-1 — plus global services.
Security Score
A single 0–100 score for posture trend — pairs with the Optimization Score on the dashboard.
"Fix Available" One-Click Remediation
Baseline access stays read-only. For findings where remediation is safe (e.g. enabling encryption defaults), one click applies the fix — only if you opt in to a separately scoped write policy.
Anomaly Detection
Statistical baselines plus AI commentary spot unusual spend before it compounds. Catch the misconfigured Lambda, the missed shutdown, the runaway pipeline.
Statistical Baseline per Service
Anomalies measured against rolling baselines, not naive thresholds — fewer false positives.
AI Commentary on Each Anomaly
Each anomaly comes with a natural-language explanation: "Amazon EC2 +7% — spike in running instances, possible missed shutdown scheduling."
Email Alerts
Routed to the addresses you configure in Settings. Per-account or org-wide.
Slack / Microsoft Teams Alerts
On the roadmap. Will route by severity to the channel you choose.
Tunable Sensitivity
Adjust thresholds per service so noisy workloads (batch, ML training) do not bury real signals.
Tag Governance
Surface untagged resources and allocation gaps so FinOps can pin every dollar to an owner — and so engineering knows when they have broken tag policy.
Untagged Resource Visibility
List of resources missing required cost allocation tags, sortable by spend impact.
Allocation Gap Report
How much of monthly spend is properly tagged vs. unallocated. Track drift over time.
Tag Policy Enforcement Preview
Validate proposed tag policies against current state before publishing.
Required-Tag Tracking
Configure your required tags (CostCenter, Owner, Environment) and watch compliance climb.
Forecasting & Budgets
Don't get surprised by the bill. Projected monthly cost, budget-vs-actual, and trend-aware variance let you plan a quarter without spreadsheets.
Projected Monthly Cost
Live KPI: where your bill will land if current usage trends continue.
Monthly Totals Chart
Historical and projected monthly spend on one chart for trend-spotting.
Budget vs. Actual
Set budgets per account, service, or tag. See variance live, not at month-end.
RI / Savings Plan Utilization
Track commitment coverage so you do not stack on-demand alongside an underused RI. Shipping in a future release.
Multi-Account / MSP
Run Refine across every AWS account your org or your customers own. Built-in customer hierarchy for MSPs; role-based notification routing per customer.
Customer Hierarchy
Organize accounts as Org → Customer → Account. Switch context from the header.
Unlimited Orgs and Accounts
No per-account fees. Scale to whatever your fleet looks like.
Per-Customer Reports
Email scheduled reports per customer with their data only — clean isolation.
Role-Based Notification Routing
Cost alerts to FinOps, security findings to the SecOps mailing list, anomalies to oncall.
White-Label / Co-Branded Reports
Customizable branding on customer-facing reports is on the roadmap for MSP partners.
Platform capabilities
The substrate underneath every product area — how Refine connects, stores, notifies, and integrates.
Email Notifications
Multi-recipient routing for cost alerts, anomalies, and scheduled reports. Configurable per account.
Custom Report Frequency
Daily, Weekly, or Monthly. Schedule per account, per recipient, per report type.
Multi-region Coverage
Covers the regions your accounts actually use — auto-discovers regions in connected accounts, including global services.
Stop reading. Start saving.
Free forever. Read-only access. Revoke anytime.
Refine is built and supported by HabileLabs, an AWS Advanced Tier Services Partner.