Look after / Watchdog

Your AWS account, watched. Fixes offered on your approval.

Your account is not short of tools. It is short of attention. Watchdog reads what AWS already reports, ranks what matters, and puts a reviewer in front of it. After each digest we offer to fix what matters, quoted per job.

Read-only while watching. No setup fee. 7 days' notice to cancel.
7
watchers, one domain each
1
ranked digest, worst first
0
changes without your approval
15 min
to onboard, IAM role only
01 / The premise

This is not a tooling gap. It is an attention gap.

What AWS already gives you
Trusted Advisorcost, limits, security checks
GuardDutythreat detection
Cost Anomaly Detectionspend spikes
Security Hubposture findings
CloudTrail and Configwho did what, and when it drifted

Most of this is free. Most of it is already switched on. None of it is the problem.

What it does not give you

Someone who opens it, and fixes what matters.

The findings are already there. They sit in a console nobody has logged into since the build. The bucket went public in March. The certificate expires on a Sunday. Spend drifted 40% and the invoice arrived before anyone noticed.

Buying more tooling does not fix that. Someone reading it does, and someone acting on it.

The waste Skip finds often pays for a good part of it.

02 / The watchers

Seven watchers, one domain each. One digest.

Each watcher reads one thing and reports. None of them holds a permission that can change your account. Seven watch. One compiles.

01
Penny Spend

Month-on-month deltas by service. Anomaly spikes flagged the day they appear, not the day the invoice lands.

02
Skip Waste

Idle instances, unattached volumes, forgotten elastic IPs, load balancers with nothing behind them.

03
Iris Exposure

Public buckets, security groups open to the world, anything reachable that should not be.

04
Gus Access

Root account usage, missing MFA, access keys older than ninety days, users who left.

05
Archie Backups

Whether they exist, how long they are kept, and whether a restore has ever been proven.

06
Reg Renewals

Certificate and domain expiry dates. Runtimes and engine versions approaching end of life.

07
Gale Resilience

Single points of failure, single-AZ dependencies, alarms that were never set up.

08
Digby Digest

Takes the other seven and returns one ranked list. Worst first, with what it costs you to leave it.

You get one thing in your inbox. Not seven reports and a dashboard login.

03 / What arrives

One digest. Ranked, not sorted.

Every finding says what it is, where it is, how long it has been true, and what to do next. No severity scores without a sentence attached.

On Reviewed and Priority, someone reads the digest before you do and takes out the noise.

After each digest, we offer to fix what matters, quoted per job. Say yes to the ones you want, or do them yourself. Nothing changes until you approve.

WATCHDOG DIGEST / ACCT 4821 0093 7715 12 AUG / REVIEWED
Severity
Watcher
Finding
Open for
Critical
Iris
S3 bucket ar-client-assets allows public list and read.
Block public access at the bucket and account level.
We can fix this: quoted on request.
Open for 4 days
4 days
Critical
Gus
Root account signed in on 4 Aug. No MFA device registered.
Register MFA on root, then stop using it.
We can fix this: quoted on request.
Open for 8 days
8 days
High
Archie
RDS prod-pg retains snapshots for 1 day. No restore on record.
Raise retention to 14 days and test one restore.
We can fix this: quoted on request.
Open since build
Since build
High
Penny
NAT gateway spend up 41% month-on-month, €212 to €299.
Add an S3 gateway endpoint; the batch job's S3 traffic is crossing the NAT.
We can fix this: quoted on request.
Open for 26 days
26 days
Medium
Skip
An idle RDS instance and four unattached EBS volumes, still running unused.
Stop the instance and delete the volumes after a snapshot. Saves about €140 a month.
We can fix this: quoted on request.
Open for 3 months
3 months
04 / Pricing

Fixed prices. Published.

Start with the one-off if you want to see what is in there. Move to a retainer if you want it watched.

Tier
Price
Cadence
Human review
What you get
Account Check
€300
one-off
Once
Written findings

Every check runs once. You get the written findings and you keep them whether you continue or not.

Pay €300
Watchdog Auto
€50
per month
Monthly
None

The digest, unreviewed, straight to your inbox.

Watchdog Reviewed
€200
per month
Monthly
Reviewed

Every digest is read before you get it. Noise removed, findings ranked, email questions answered, fixes offered.

Watchdog Priority
€500
per month
Weekly
Reviewed

Weekly runs, a quarterly call, and a same-day response on anything marked critical.

Fix work
Around €800
per day, quoted per job
On request
Hands on

Fixes from your findings, or anything else that is broken, slow, exposed or costing too much. Every job is scoped and quoted before anything starts. Write access granted for the job, removed at the end of it.

Account Check
€300 one-off

Every check runs once. You get the written findings and you keep them whether you continue or not.

Pay €300
Watchdog Auto
€50 per month

The digest, unreviewed, straight to your inbox.

Watchdog Reviewed
€200 per month

Every digest is read before you get it. Noise removed, findings ranked, email questions answered, fixes offered.

Watchdog Priority
€500 per month

Weekly runs, a quarterly call, and a same-day response on anything marked critical.

Fix work

Fixes from your findings, or anything else that is broken, slow, exposed or costing too much. Every job is scoped and quoted before anything starts. Write access granted for the job, removed at the end of it.

Around €800 per day, quoted per job

Prices are per AWS account. Using AWS Organizations with several accounts? We quote the set. Findings within five working days of the role being created, reviewed before they're sent. Prices exclude VAT. No setup fee on any tier. Retainers cancel on 7 days' notice.

Start with one run. Keep the findings either way.

The Account Check is €300. Every check runs once, you get the written findings, and you decide afterwards whether anything needs fixing now or watching monthly.

Pay now, €300 Or talk first, then pay
Or email hello@agencyrebuilt.com and ask what Watchdog would find in your account.