Zero-IAM Local Evidence Engine • AWS, GCP & Kubernetes

See Every Dollar Leaking Through Your Cloud Before SecOps Review.

TerraSight combines local-first billing pseudonymization, live topology waste mapping, and automated Terraform Pull Requests to cut 30% to 45% of AWS, GCP, and EKS spend in 60 seconds.

$ curl -sL terrasightops.com/xray.sh | bash [Copy]
live-topology-xray // production-vpc-us-east-1
● ZERO-IAM MODE
Interactive Cloud Waste Topology
Click "After TerraSight PR" to watch how the Terraform patch reroutes expensive traffic.
EKS Worker Nodes
ecr-image-pulls (92 TB/mo)
Private Subnets (3x AZ)
$0.045/GB →
aws_nat_gateway (Bleeding)
Managed NAT Processing
⚠ $4,890 / month
Kubernetes Workloads
prod-microservices (19% CPU)
P95 Memory: 28%
Static ASG →
eks_node_group (Overprovisioned)
32x m5.2xlarge On-Demand
⚠ $18,400 / month
Block Storage & Ghosts
84x Volumes + 19 Orphans
3,000 IOPS Baseline
Unoptimized →
aws_ebs_volume (Legacy gp2)
gp2 + Unattached Zombies
⚠ $3,460 / month
github.com / acme-corp / infra-terraform / pull / #418
TerraSight FinOps Bot bot commented just now
✓ Monthly Cloud Cost Impact: -$14,620/mo (-34.1% | -$175,440/yr)
Verified against anonymized CUR evidence pack ev-9042a with 0 downtime impact.
# File: modules/vpc/endpoints.tf - # 92TB/mo ECR & S3 traffic routed via NAT ($4,890/mo) + resource "aws_vpc_endpoint" "s3_zero_cost_gateway" { + vpc_id = aws_vpc.prod.id + service_name = "com.amazonaws.us-east-1.s3" + vpc_endpoint_type = "Gateway" # $0.00/GB + } # File: modules/eks/karpenter_nodepool.tf - instance_types = ["m5.2xlarge"] # Static On-Demand ($18,400/mo) + requirements = [ + { key = "karpenter.sh/capacity-type", values = ["spot", "on-demand"] }, + { key = "kubernetes.io/arch", values = ["arm64", "amd64"] } # -$6,900/mo + ]
Checks passed: terraform validate • tflint

3 Under-the-Radar Engineering Engines Built Into TerraSight

Why security-conscious CTOs run TerraSight in 60 seconds while traditional FinOps vendors wait months for IAM approval.

1. Local Evidence Pseudonymizer

Automatic Secret & Account ID Scrubbing

Before any billing row is analyzed, our in-browser engine strips your AWS Account IDs, internal tags, and resource names, leaving only mathematical usage and cost structure.

RAW: arn:aws:ec2:us-east-1:849201948201:vol/vol-09a8b
SAFE: arn:aws:ec2:us-east-1:[REDACTED-ACCT]:vol/ev-01
2. Cloud Ghost Detector™

Instant Zombie & Orphan Asset Sweep

Automatically isolates forgotten infrastructure draining budget 24/7: unattached EBS volumes, idle ALBs with zero active connections, unassociated Elastic IPs, and 3-year-old snapshots.

✓ 19 Zombie EBS Volumes Found (-$1,420/mo)
✓ 6 Idle Load Balancers Found (-$890/mo)
3. Zero-Downtime Terraform PRs

Code You Can Merge, Not a 90-Page PDF

Dashboards don't reduce your bill. Engineering changes do. Every finding includes a validated Terraform or OpenTofu patch ready for your team's standard Git review.

✓ Gateway VPC Endpoints (0ms downtime)
✓ Karpenter Graviton3 NodePools

Interactive Multi-Cloud Savings Simulator

Switch cloud providers or drag the monthly spend slider to inspect your recoverable run-rate.

$42,850/mo
Current Monthly Spend
$42,850/mo
Recoverable Monthly Savings
+$14,620/mo
Annual Capital Unlocked
+$175,440/yr
Efficiency Gain
34.1%
Line-Item Remediation Plan & Terraform Modules
Cloud Resource Detected Ghost / Waste Pattern Monthly Burn Verified Savings Terraform PR Fix