One scanner. Every cloud you run.
The same honest, read-only pass across AWS, GCP, Azure, Alibaba Cloud, Oracle Cloud, and Kubernetes, including the two estates most tools forget. Pick a cloud to see exactly what we check and what it tends to surface.
AWS
Your biggest cloud bill, read end to end.
From EC2, EBS, and S3 to RDS, Lambda, EKS, and ~70 services, InfraSweep sweeps every region for waste and exposure with live AWS pricing behind every dollar. Connect a read-only role and see what a single scan surfaces.
See what we scan →GCP
Compute Engine to BigQuery, swept in one read-only pass.
InfraSweep covers Compute Engine, Cloud SQL, GKE, Cloud Storage, BigQuery, Pub/Sub, and more, with CIS-aligned security checks alongside the cost findings. Connect a Viewer service account and see your GCP estate end to end.
See what we scan →Azure
VMs, disks, SQL, and subscription security in one Reader scan.
From VMs and managed disks to SQL, AKS, Cosmos, and Key Vault, InfraSweep reads your subscriptions for waste and exposure, including standouts like a DDoS Network Protection plan billed a flat monthly fee even with no networks attached. Connect a Reader service principal to begin.
See what we scan →Alibaba Cloud
The cloud your other tools don't cover.
Most cost and security platforms barely touch Alibaba Cloud. InfraSweep scans ECS, OSS, RDS, SLB/ALB, VPC, RAM, KMS, and Security Center, with a security-first lens, so your China-region and Aliyun estate isn't a blind spot. Connect with an AccessKey or RAM role.
See what we scan →Oracle Cloud
Oracle Cloud, finally on the same radar as the rest.
OCI is the other estate your tools forget. InfraSweep scans Compute, Block/Object/File storage, Autonomous Database, VCN, IAM, Vault/KMS, Cloud Guard, and more, security-heavy and validated against the real OCI SDK. Connect with an API signing key.
See what we scan →Kubernetes
In-cluster waste and posture, wherever it runs.
Connect a kubeconfig and InfraSweep inspects workloads in-cluster, over-requested pods, idle namespaces, orphaned PVCs, and risky pod specs, inferring the hosting cloud from node providerIDs. Right-size where the waste actually lives.
See what we scan →Connect one cloud, or all of them
Read-only access, a scan in minutes, and every finding priced in real dollars with the evidence behind it.
Start scanning free