Docs/Detection Catalog

Detection

Detection Catalog

Detections power prioritization and remediation recommendations across FinOps, Security, Governance, and Audit.

Detection Conventions

Detections are grouped by FinOps, Security, Governance, and Audit outcomes.
Each detection declares provider scope, cloud partition support, severity, and fixability.
Fixable detections include a recommended action and required evidence fields.
Customer-facing reports show the detection name, affected resource, control mapping, severity, and impact.

FinOps detections

  • Unattached storage volume
  • Underutilized compute
  • Underutilized database
  • Stale snapshot retention
  • Unattached public IP
  • Commitment savings opportunity
  • Burn-rate anomaly

Security detections

  • Unauthorized region deployment
  • Public network exposure
  • Overly permissive IAM policy
  • Database public access enabled
  • Logging disabled
  • Unencrypted storage resource

Governance and audit detections

  • Missing owner tag
  • Missing cost center tag
  • Missing environment tag
  • Missing project/application tag
  • Missing managed-by tag
  • Evidence readiness baseline

TurboFinOps

Start with one cloud scope. Prove savings fast.

Connect AWS, Azure, or GCP and get actionable findings, score trends, and auditable remediation paths in minutes.

Built for FinOps, governance and audit workflows