9 apps · free to try

Cloud security and FinOps apps

Tools for checking cloud security, controlling cloud spend and training people to spot attacks. Each one opens in your browser, with no sign-up.

Cloud security

Security posture

Problem: Missing security headers, weak redirects and no DMARC record are the first things attackers check on a public site, and assessments often live in one-off spreadsheets.
Built: A posture platform that runs passive checks of a public website (security headers, redirects and DMARC), tracks vulnerabilities from discovery to fix, and produces remediation blueprints and reports, with workspaces per client and role-based access.
Gives you: A posture score and header grade for each site, with the fixes written out and ready to hand over.

Azure security

Problem: Publicly accessible storage and over-privileged role assignments are common Azure risks and easy to miss.
Built: An app that reviews Azure Storage accounts and RBAC role assignments.
Gives you: Risky settings, such as public access and over-broad roles, flagged for review.

AWS security

Problem: Exposed S3 buckets and broad IAM permissions are among the most common AWS security gaps.
Built: An app that reviews S3 buckets and IAM configuration.
Gives you: Gaps, such as publicly exposed buckets and overly broad permissions, flagged for fixing.

Multi-cloud FinOps

Problem: Comparing the same workload across AWS, Azure and Google Cloud means matching instance types and price sheets by hand.
Built: An app that sizes a workload, maps it to equivalent compute, database and storage services on each cloud, and adds performance benchmarks, forecasts and an AI advisor.
Gives you: A side-by-side hourly, monthly and annual cost comparison that can be exported as a report.

FinOps

Problem: With several subscriptions, Azure invoices arrive as separate exports, so spend trends and anomalies are hard to see.
Built: An app that merges the exports into one view with monthly trends, reservation coverage and an assistant for questions. Files stay in the browser.
Gives you: Cost anomalies and FinOps recommendations in one place instead of spread across spreadsheets.

Cost optimization

Problem: Spend across Azure, AWS and Google Cloud sits in three consoles, with no easy way to judge commitment coverage.
Built: An app that tracks monthly spend across the three clouds and benchmarks Reservation and Savings Plan coverage against FinOps peers.
Gives you: A list of optimization opportunities and early warning of spending spikes.

FinOps game

Problem: Cost-saving work is easy to put off: idle resources pile up because nobody is rewarded for finding them.
Built: A multi-cloud FinOps dashboard for AWS, Azure and Google Cloud that turns savings into bounties, with a leaderboard, milestones, a savings simulator and Cloud Raid, a game for hunting down zombie resources.
Gives you: A playful way to practise spotting waste, such as unattached volumes and idle NAT gateways, and to see how the savings add up.

Cyber defense training

Problem: Phishing, phone scams and insecure code are where many breaches start, and awareness training is often slides rather than practice.
Built: A training suite with a phishing campaign simulator, email and link threat filter, vulnerability code-audit lab, vishing call trainer and breach-risk forecasting, plus an end-to-end encrypted habit tracker and password vault.
Gives you: Hands-on practice spotting lures, social engineering and vulnerable code, and a view of how hardening steps reduce breach risk.

Security awareness · Teens

Problem: Young people meet phishing, scam DMs and fake Wi-Fi every day, but most security advice is passive.
Built: A game with hands-on drills for phishing and QR-code scams, rogue Wi-Fi, “compromised friend” DMs, password strength and a 45-second ransomware response, with a breakdown of every mistake.
Gives you: Practice spotting real attack patterns in a safe sandbox, with ranks, badges and progress tracking.