Early access

Find cloud waste in 15 minutes.

reCloud discovers unused VMs, disks, databases, IPs and snapshots. Understand what nobody uses, what it costs, and how safe it is to delete.

Get a free scan How it works

Google Cloud early access AWS next Azure next

read-only scan

142resources scanned

12zombies found

€1,240saving per month

Typical projects reveal 10-30% cloud waste.

What it finds

What does reCloud actually find?

Seven kinds of waste and risk, found in one read-only scan and listed in plain words, so you can see what matters in seconds.

See how it works

Unattached disksBilled, used by nothing

Idle VMsRunning, doing no work

Unused public IPsAttached to nothing

Forgotten snapshotsSource is gone

Overprivileged IAM rolesBroader than needed

Public databasesOpen to the internet

Orphaned resourcesNo owner label

Architecture map

See how your cloud is built, not just what is wasted

reCloud draws the project as a map: network, subnets, clusters, databases, buckets and identities, with the links between them. The map shows what depends on what, so you can tell what is safe to change.

The structure of every project on one page
Dependencies between resources and identities
A shared picture for engineers and CTOs

Illustration with example data.

Ownership detection

Find every resource that nobody owns

Every company struggles with ownership. reCloud lists the resources that have no owner label, so a name goes next to each one before anything is deleted.

Disks, VMs, databases and buckets without an owner
The first question to answer before a cleanup
A score that rises as owners are assigned

Illustration with example data.

The hidden cost of cloud sprawl

Cloud environments naturally decay. After a few years:

Documentation falls behind what really runs
Former projects remain active
Service accounts keep excessive permissions
Snapshots accumulate forever
Nobody knows what is safe to delete

Result: higher costs, higher risk, lower visibility.

One scan

Four answers, in one scan

Is it still used?Idle and orphaned disks, IPs, snapshots, VMs, databases and load balancers, each with the reason.

Who owns this?Every resource with its labels, and a flag on the ones with no owner.

Is it safe to delete?A safety rating and the exact command. reCloud shows it and never runs it.

What do we fix first?A 0 to 100 score per project. Critical issues first, then the biggest savings.

How it works

From connect to clean in three steps

Read-only from the first step to the last. Nothing is changed in your cloud, and the first scan is free.

Get a free scan

Connect

Enter your project ID and run one line in Cloud Shell. It creates a read-only account in your own project, and no key.

Scan

reCloud lists the resources and reads their configuration. It looks for zombies, savings, risky settings and missing owners.

Decide and fix

Get the score and a ranked list. Run the commands yourself, scan again, and watch the score go up.

The product

DashboardZombiesCostSecurityOwnership

One number per project

Your cloud on one page.

A reCloud Score from 0 to 100 for every project
Savings per month and urgent issues at a glance
What to do first, most important at the top

Zombie Detection

Find what costs money and does nothing.

Disks, IP addresses, snapshots, VMs, databases and load balancers nobody uses
Every finding has the reason, a cost and a delete-safety rating
The delete command is shown to you, never run by reCloud

Cost Optimization

Savings, ranked by effort and risk.

Each opportunity with its monthly saving
Start with the low-effort, low-risk ones
List-price estimates until your billing export is connected

Security Review and IAM Cleanup

Fix the risky settings first.

Open databases, public VMs, default accounts and missing backups
Broad roles and old service account keys
A fix for every finding, ranked by severity

Ownership

Know who owns what.

Resources without an owner, in one list
Labels shown next to every resource
Assign an owner before you delete

Screens show example data from a demo project.

Read-only. Really.

One read-only account in your own project, with no permission to read your data. It works with a one-hour token. Delete the account to end access for good.

Change anything

Findings come with a command you run

Delete anything

The command is shown, never run

Read your data

Buckets, databases and secrets stay closed

Keep a key

No key file is created

For your security team

Exactly what reCloud can read

reCloud uses one custom role in your project, the ReCloud scanner. It has 71 permissions, and every one of them lists or describes a resource. None of them reads the data inside it.

No bucket contents, secret values, table data or log contents
No SQL connections or exports, and no write permission of any kind
No key file: reCloud works with a one-hour token
Scan results are hosted in the EU
Your data is deleted within 30 days of disconnecting

Want to review the full role first? Write to support@linexa.eu and we send you the file.

What the setup line runs in your project

gcloud services enable cloudasset.googleapis.com \
  monitoring.googleapis.com recommender.googleapis.com
gcloud iam roles create recloudScanner \
  --project=PROJECT_ID --file=recloud-role.yaml
gcloud projects add-iam-policy-binding PROJECT_ID \
  --member=serviceAccount:RECLOUD_ACCOUNT \
  --role=projects/PROJECT_ID/roles/recloudScanner

End access at any time, with one command

gcloud projects remove-iam-policy-binding PROJECT_ID \
  --member=serviceAccount:RECLOUD_ACCOUNT \
  --role=projects/PROJECT_ID/roles/recloudScanner

Does reCloud change my cloud?+

No. It only reads. A finding shows the command to fix it, and you decide whether to run it.

Can reCloud read my data?+

No. The role it uses has no permission to read the contents of your buckets, databases or secrets. It reads the description of resources: names, types, locations and labels.

Which clouds does it support?+

Google Cloud, in early access. AWS and Azure are next.

How accurate are the cost figures?+

They are list-price estimates until your billing export is connected, so use them to compare and prioritise, not as an invoice.

How safe is it to delete what it finds?+

Every finding has the reason and a delete-safety rating, and reCloud suggests taking a snapshot first. Check what depends on a resource before you delete it.

Which permissions does it need?+

One custom role, the ReCloud scanner, with 71 list and describe permissions and none that read data. Write to support@linexa.eu and we send you the role file to review before you connect.

Where is my data stored, and for how long?+

Scan results are hosted in the EU. When you disconnect a project, its data is deleted within 30 days.

What does it cost?+

The first scan of one project is free. It shows a summary of the findings and your top five zombie resources. Paid plans start from €149 per month, with every finding, the command to clean up each one, and weekly scans. Early-access customers keep their launch price.

Is there a money-back guarantee?+

Yes. If reCloud is not worth it for you, write to support@linexa.eu within 30 days of your first payment and we refund your first month in full.

How can I try it?+

Choose the Free scan plan and tell us who you are. We set up a free scan of one of your projects. You run one line in Cloud Shell, and you can end access with one command.

Questions before you connect

More questions? Write to support@linexa.eu and a person answers.

See your cloud the way it really is.

Free first scan of one project: a summary of the findings and your top five zombie resources. Paid plans start from €149 per month, with every finding and weekly scans. Every plan has a 30-day money-back guarantee. Compare the plans. Read-only, with no key to store.

Get a free scan See plans and pricing