Stop a runaway
$10k cloud bill
before it runs all night.

Arc-Guard enforces hard spending caps on AWS, GCP, and Azure. When you hit your limit, we suspend the runaway resources, not just send you an email that arrives 8 hours too late.

It won't prevent the first dollar of a spike, but it will stop a runaway process from billing your account for hours while you sleep.

Founder rate · No credit card · No spam

The Problem

You've seen the HN posts.

Every month, a dev wakes up to "Ask HN: I got a $47k AWS bill overnight, what do I do?" AWS sent an alert. It arrived 18 hours later.

8-24h

Alert delay

AWS Cost Anomaly Detection sends an email hours after the spike. By then, the damage is done.

$0

Native hard caps

AWS, GCP, and Azure have no built-in spending cap, only soft budget alerts you can't enforce.

$600+

Cheapest that enforces caps

CloudThrottle starts at $600/mo. Built for governments, not your side project running on a $20 budget.

Under the Hood

Your infra. Your control.

The suspend switch never runs on our servers. Here's exactly what happens when Arc-Guard fires.

Step 1

You run the agent

Deploy a single Docker container in your own cloud account. It runs there, with your credentials, and never phones home with sensitive data.

Step 2

Arc-Guard reads billing

Arc-Guard only holds read access on your billing API. It sees spend numbers, nothing else. No write permissions, no access to your workloads.

Step 3

Agent is open source

The suspend-switch agent will be fully open source. Audit every line before deploying. Trust the code, not our word.

How It Works

Three steps, then forget about it.

Step 1

Deploy the agent

Run the Arc-Guard Docker container in your own cloud account and create a read-only billing IAM role. Takes 10–15 minutes; no root credentials needed.

Step 2

Set your hard cap

Define a monthly spending limit: $20, $50, whatever your threshold is. Per project, per service, or per account.

Step 3

Sleep. We watch.

Arc-Guard polls your spend on a schedule: every 15 min on Free, every 5 on Builder, every minute on Hacker. If your cap is hit, we suspend the runaway resources and notify you instantly.

Features

Not just alerts.
A suspend switch.

Vantage gives you dashboards. CloudZero charges $10k/yr. The tools that actually act are SaaS that take your keys. Arc-Guard runs in your own account, and you audit it before it touches anything.

Suspend, not just alerts

When you hit your cap, Arc-Guard suspends the runaway resources. An action, not a reminder—and reversible once you're back in control.

Dry-run mode

See exactly which resources would be suspended before Arc-Guard takes any action. Validate your rules without touching anything.

Slack, Discord, SMS & email

Alerts at 80% of your cap, and again at the moment of suspension. Get notified wherever you actually are.

Polling as fast as every minute

Free checks every 15 min, Builder every 5, Hacker every minute. Not once per day like native AWS Cost Anomaly Detection.

Protected resource allowlist

Tag any resource as protected and Arc-Guard will never touch it, regardless of spend. Your production database stays up.

Minimum permissions

Uses least-privilege IAM roles. We publish the exact policy, you audit it before connecting. Your keys stay yours.

Pricing

Cheaper than one runaway Lambda.

All plans include the suspend switch. No surprise charges. Cancel anytime.

Free
$0
forever
  • 1 cloud account
  • Up to $100 monthly cap
  • Email alerts
  • 15-min polling
  • Slack / SMS
Get on waitlist
Most Popular
Builder
$8/mo $12
Founder rate
  • 3 cloud accounts
  • Unlimited cap amount
  • Email + Slack + Discord
  • 5-min polling
  • SMS alerts
Get on waitlist
Hacker
$19/mo
billed monthly
  • Unlimited accounts
  • All alerts + PagerDuty
  • 1-min polling
  • REST API access
  • 5-seat team sharing
Get on waitlist
Universe
$99/mo
billed monthly
  • Everything in Hacker
  • White-glove onboarding
  • 99.9% SLA
  • Dedicated Slack channel
  • Unlimited seats
Get on waitlist
FAQ

Good questions.

Get early access

Stop worrying.
Start building.

Join the waitlist. If enough devs sign up, we build it. You get early access.

Founder rate · No credit card · No spam