READ-ONLY IAM  ·  CLOUDFORMATION DEPLOY  ·  NOTHING EXECUTES WITHOUT YOUR APPROVAL

Your AWS bill is
leaking.

LEEKi starts in read-only shadow mode. It scans continuously, scores every finding with a calibrated confidence model, and shows you exactly what it would remediate and why. You switch on automation when you're ready.

leeki @ aws://482731
iam · read-only · shadow mode · --:--:-- UTC

The system shows its work.

Every finding comes with a full explanation. Why LEEKi acted, and why it was certain enough to act without asking.

Finding

i-0a4f3b8c9d2e1c2e1

$847/mo

Confidence 97%
SKIP REVIEW AUTO ▲ 97%
Signal Weight Value
CPU avg / 14 days ×0.35 0.2%
Network egress / 72h ×0.30 0 bytes
Production tag ×0.20 absent

Action taken

> STOPPED

14:35:22 UTC · 2026-05-24
Executed autonomously · confidence ≥ 95%

Safety window

Instance stopped, never terminated. Restart at any time, no data loss. The IAM role you deploy denies termination outright.

Checks run before execution

Production tag · IAM deny list · instance name pattern · SSM heartbeat · confidence ceiling (97%)

Fully reversible: restart at any time

Built to be distrusted.

LEEKi assumes you don't trust it yet. Every guardrail below is enforced in code or by AWS IAM, not by a promise on a website.

> Kill switch

A global halt flag stops all execution instantly. LEEKi checks it before every single action. If the check itself fails, nothing runs.

Checked before every action

> Reversible by default

Stopped instances are never terminated and can be restarted at any time. Volumes are snapshotted and a restore map is written before deletion. If either step fails, the delete is refused. Safety snapshots are kept for 30 days.

Snapshot before delete, always

> IAM-level denies

The CloudFormation role you deploy explicitly denies instance termination and database deletion. AWS enforces it. Even a bug in LEEKi can't cross that line.

Enforced by AWS, not by us

> Blast-radius cap

Hard ceiling per run: 5 actions and $500/month of changes. Anything past the cap routes to your approval queue instead of executing.

Overflow requires your approval

Other tools tell you.
LEEKi acts.

FinOps dashboards surface recommendations. LEEKi closes the loop, autonomously and safely.

Capability LEEKi FinOps Dashboards AWS Native
Continuous scanning
Confidence scoring
Autonomous execution
Safety guardrails ~
Flat monthly fee From $499 % of spend Bundled
No engineer required

Flat fee. Sized to your AWS spend.

No contracts. No percentage of savings. Not satisfied in your first 30 days? We'll refund you.

Starter

$10K to $50K spend / mo

$499

/ month

  • Continuous waste scanning
  • Autonomous EC2 remediation, one-click EBS cleanup
  • Daily email summary
  • Every action reversible or snapshotted first
  • Slack alerts
> Get started

Scale

$200K+ spend / mo

$2,499

/ month

  • Everything in Growth
  • Multi-account / AWS Organizations
  • Custom confidence thresholds
  • Dedicated onboarding call
  • Dedicated onboarding support
> Contact us

30-day money-back guarantee  ·  Cancel anytime  ·  No contracts

Ready to stop the leak?

Connect read-only in 5 minutes. Your first waste scan is free, and nothing changes until you say so.

> GET FREE WASTE SCAN

Not ready to connect anything? See a sample report first

I built LEEKi because every AWS account I've looked at was leaking money, and every tool that found the waste stopped at a dashboard. Someone still had to do the work. LEEKi does the work. If you have a question about what it does, what it can't do, or how the guardrails hold up, email me directly. I read everything.

William Occhi, founder  ·  william@leeki.io