AI Narrative Report
A 60-second plain-English summary of where money is going and the highest-leverage moves.
Everything Refine does, on one page
Every capability, and what it costs
Cost optimization, allocation and showback, security findings, anomaly detection, tag governance, forecasting, multi-account, and an AI copilot. The Free plan is free under $2,000/month of AWS spend; where a paid plan is needed, this page says so on the card. Built by an AWS Advanced Tier Services Partner.
refine · command center3 accounts · 17 regions
Monthly spend
$26.7k
Found this month
–$8,287/mo
Optimization score
87
- anomalyNAT data processing +218% — caught 09:14, not on the invoice
- securityPublic S3 bucket — Fix Available, exact Console steps
Growth and up
marks a capability a paid plan adds. Everything unmarked is on Free.On roadmap
marks something we have not built yet.Cost Optimization
Find waste at the service and resource level. Read recommendations as plain-English narratives written by Gen-AI, not raw CSV dumps.
Service-Level Recommendations
Per-service breakdowns with right-sizing, storage class, and idle-resource recs.
Resource-Level Recommendations (CUR)
Growth and up
Drill down to individual EC2, RDS, EBS, and S3 resources that are over-provisioned or underused. Free shows your top 3 by savings; a paid plan opens the full list.
Optimization Score
Single 0–100 score that tracks how close you are to the efficient frontier of your workload.
Top Cost Drivers by Service / Time / Region
Drill from total spend to the line items behind it without leaving the dashboard.
Cost Explorer with Saved Reports
Pivot spend by service, region, resource, or any tag key. Compare two periods side by side, save the view you keep rebuilding, and export the table to CSV.
Ask Your Costs in Plain English
Type "RDS cost last 3 months" or "compare regions month over month". The question becomes a query, not an answer — the same deterministic engine computes the numbers, so what you read always reconciles with the table.
Savings Ledger
The lifetime total, not this month’s rate. Every month expands to the fixes that contributed, both measurement windows, and the method — re-derivable from your own FOCUS export.
Recommendation Workflow
Accept, snooze, or dismiss a recommendation with a reason. Dismissals are keyed to the finding, not the month, so next month’s rescan does not resurrect what you already decided about.
Data Transfer Analysis
Where the bytes went and what moving them cost — inter-AZ, cross-region, and egress flows ranked, with the insights band calling out the ones worth re-architecting.
CSV / XLSX / PDF Bill Ingestion
Upload a bill for the same analysis without connecting AWS. The file is deleted automatically 3 days after upload.
Security Findings
380+ checks across IAM, storage, network, compute, and logging. Multi-region, severity-tiered, and every finding carries the steps to fix it.
380+ Security Checks
IAM keys >90 days, public S3 buckets, unrestricted SSH, unencrypted EBS, VPC flow logs disabled, GuardDuty disabled, public ALB without WAF, and hundreds more.
Severity Tiers
Critical, High, Medium, Low — calibrated against the same risk model your auditor uses.
Multi-Region Coverage
Auto-discovers the regions your accounts use — for example ap-south-1, eu-central-1, us-east-1, eu-north-1, ap-south-2, and ap-northeast-1 — plus global services.
Security Score
A single 0–100 score for posture trend — pairs with the Optimization Score on the dashboard.
"Fix Available" Guidance
Growth and up
Findings that carry a fix guide are chipped in the list. Open one and you get the exact AWS Console steps for that resource and region, plus the official AWS doc. Refine stays read-only; you apply the change.
Full Findings List & On-Demand Scans
Growth and up
Free keeps your Security Score and critical findings. A paid plan opens the complete list across every severity, plus scans you trigger yourself rather than waiting for the schedule.
Anomaly Detection
Statistical baselines plus AI commentary spot unusual spend before it compounds. Catch the misconfigured Lambda, the missed shutdown, the runaway pipeline.
Statistical Baseline per Service
Anomalies measured against rolling baselines, not naive thresholds — fewer false positives.
AI Commentary on Each Anomaly
Each anomaly comes with a natural-language explanation: "Amazon EC2 +7% — spike in running instances, possible missed shutdown scheduling."
Email Alerts
Routed to the addresses you configure in Settings. Per-account or org-wide.
Slack / Microsoft Teams Alerts
Growth and up
Post alerts into the channel you choose via incoming webhooks, with per-alert-type routing. Webhook URLs are KMS-encrypted in your browser before they are stored.
Tunable Sensitivity, Quiet Hours & Mutes
Growth and up
Adjust thresholds per service so noisy workloads (batch, ML training) do not bury real signals. Set quiet hours, and mute an alert you have already actioned.
Delivery Failures Surfaced, Not Logged
A webhook that exhausts its retries shows up in the Notification Center for an admin to see — not in a log nobody reads.
Tag Governance
Surface untagged resources and allocation gaps so FinOps can pin every dollar to an owner — and so engineering knows when they have broken tag policy.
Untagged Resource Visibility
List of resources missing required cost allocation tags, sortable by spend impact.
Allocation Gap Report
How much of monthly spend is properly tagged vs. unallocated. Track drift over time.
Draft a Policy, Preview It, Then Activate
Exactly one policy is active per account, and a draft scores against today’s estate without failing anything. See who breaks before a stricter rule is real.
Rules, Not Just Required Keys
Per key: required or optional, an allowed-value set, a regex the value must match, case sensitivity, and the services the rule applies to. "Environment must be prod, staging or dev" is a rule, not a convention.
Compliance Scoring per Policy Run
Each scan writes a compliance score and the non-compliant resource count back to the report, so the trend line is the policy’s, not a moving target.
AI Tag Suggestions with Confidence Bands
Growth and up
Refine infers the likely value for a missing tag from the resource’s own signals and shows the confidence behind it. Suggestions are never applied until you select them.
Bulk Fix as a Script You Run
Growth and up
Select the violations, and Refine generates a ready-to-run AWS CLI script or a Terraform patch covering exactly those resources. You run it with your own credentials — Refine never writes to your account.
Required-Tag Tracking
Configure your required tags (CostCenter, Owner, Environment) and watch compliance climb.
Allocation & Showback
Turn a tagged bill into a number each team recognises as theirs — including the shared costs that no tag can attribute.
Allocate by Any Dimension or Tag Key
Growth and up
Split the bill by account, service, or the tag key your org actually organises around — team, cost centre, product.
Four Shared-Cost Rules
Growth and up
Support, tax, data transfer and the rest go proportionally, evenly, by percentages you agreed with finance, or not at all — left on their own line where everyone can see them.
Shared Services, Seeded Then Edited
Growth and up
Refine seeds the shared-services list from the services on your own bill so the first preview is sensible, then you correct it. Every tenant names these differently; guessing silently would be worse than a guess you can see.
Reconciliation Against the Bill
Growth and up
The allocated total is checked back against the source total, so a chargeback report finance can challenge is one you can defend line by line.
Scheduled Monthly Packs
Growth and up
Pick the day of the month and the recipients; each pack goes out with its own allocation and a CSV detail sheet. The preview on screen runs the same allocator the scheduled job runs.
CSV Export
Growth and up
Summary and per-resource detail, in the shape a finance system expects to import.
FinOps AI Copilot
Ask about your spend in plain English. Every figure in the answer is verified against your own data before the answer is released.
A Drawer on Every Cost Page
The copilot opens where you already are, grounded in the account and months on screen. No separate destination to navigate to and re-explain yourself in.
Every Figure Verified Before You See It
A guard re-checks each number in the answer against the same data you are looking at. If one figure cannot be verified, the whole answer is withheld rather than shipped with a plausible wrong number in it.
Links It Cannot Invent
Answers come back with link specs, and the app builds the Cost Explorer URLs itself. The model never authors a URL, so a link in an answer always goes where it says.
Grounded in Your Data Only
The context is assembled in your browser from data your session already holds — so there is nothing from another tenant for the model to reach for.
Forecasting & Budgets
Don't get surprised by the bill. Projected monthly cost, budget-vs-actual, and trend-aware variance let you plan a quarter without spreadsheets.
Projected Monthly Cost
Live KPI: where your bill will land if current usage trends continue.
Monthly Totals Chart
Historical and projected monthly spend on one chart for trend-spotting.
Budget vs. Actual
Set budgets per account, service, or tag. See variance live, not at month-end.
Commitment Coverage & Utilization
How much of your eligible spend a Reserved Instance or Savings Plan is actually covering, and how much of what you bought you are actually using — so you do not stack on-demand alongside an idle commitment.
Commitment Lifecycle
What expires when, so a renewal decision arrives before the coverage gap does rather than after it.
Purchase Planner & Simulator
The planner proposes what to buy from your own usage; the simulator is there to second-guess it. Both derive from the FOCUS export you have already connected — no extra IAM permissions.
Multi-Account / MSP
Run Refine across every AWS account your org or your customers own. Built-in customer hierarchy for MSPs; role-based notification routing per customer.
Customer Hierarchy
Organize accounts as Org → Customer → Account. Switch context from the header.
Connect the Management Account Once
Growth and up
Point Refine at one AWS Organizations payer export and every linked account is discovered from the data itself — no connection to add per account.
As Many AWS Accounts as You Have
Growth and up
Free covers one standalone AWS account. A paid plan lifts the limit — as many standalone connections as you like, on top of anything a payer export brings in.
Per-Customer Reports
Growth and up
Email scheduled reports per customer with their data only — clean isolation.
Role-Based Notification Routing
Growth and up
Cost alerts to FinOps, security findings to the SecOps mailing list, anomalies to oncall.
White-Label / Co-Branded Reports
On roadmap
Customizable branding on customer-facing reports, for MSP partners. Multi-customer management is live today; the branding layer is not built yet.
Platform capabilities
The substrate underneath every product area — how Refine connects, stores, notifies, and integrates.
Email Notifications
Multi-recipient routing for cost alerts, anomalies, and scheduled reports. Configurable per account.
Event × Channel Routing Matrix
Growth and up
Decide per event type where it goes — email, Slack, or Microsoft Teams — with quiet hours and per-event mutes. Webhook URLs are encrypted with KMS in the browser and only ever decrypted inside the dispatcher.
CFO, CTO and CISO Dashboards
Three role-shaped views over the same data: finance leads on budget and realized savings, engineering on waste and anomalies by service, security on exposure priced in dollars.
Custom Report Frequency
Growth and up
Weekly and monthly schedules on every plan, per account, per recipient, per report type. The daily digest is a paid capability.
Multi-region Coverage
Covers the regions your accounts actually use — auto-discovers regions in connected accounts, including global services.
Stop reading. Start saving.
Free under $2,000/month of AWS spend. Read-only access. Revoke anytime.
Refine is built and supported by HabileLabs, an AWS Advanced Tier Services Partner.