The rule catalogue

Every check ZopNight
runs, in one place.

447 checks, drawn from ZopNight's 684 rules across AWS, Azure, Google Cloud, Kubernetes, Databricks, Snowflake and Microsoft 365. Kubernetes and Databricks checks run on every cloud, so one check can cover three rules. Each page says what the check finds, why it matters, and how it gets fixed.

Free to start. No card. The playground just needs your work email.

447checks, one page each

684rules in the catalogue

212resource types covered

99rules fixable in the product

AWSAzureGoogle CloudKubernetesDatabricksSnowflakeMicrosoft 365

Browse by what it protects.

The same four sections the product itself uses.

Savings

Findings with a dollar figure attached, idle, oversized, orphaned, unscheduled and undiscounted spend.

Idle resources63 checksResources running but doing no useful work: zero invocations, no connections, no traffic.Rightsizing93 checksResources sized for headroom they never use. A smaller size runs the same workload for less.Orphaned resources38 checksResources no longer attached to anything that needs them, such as unattached volumes and unassigned IPs.Scheduling21 checksResources running 24x7 with a clear off-hours usage pattern, ready for start and stop scheduling.Commitment discounts24 checksReserved Instance, Savings Plan and Committed Use opportunities, where steady usage justifies a commitment.

Compliance

Where the estate departs from your policies, frameworks and tagging rules.

Compliance121 checksConfiguration drift from best practice: public access, missing MFA, unencrypted storage, deprecated runtimes.Governance29 checksMissing tags and labels that break cost attribution, such as no environment, team or cost-centre value.

Risk

Exposure and fragility, security posture and single points of failure.

Security14 checksRisky configurations: privileged containers, containers running as root, host networking, ingress without TLS.Reliability29 checksProduction-shape issues that cause incidents and rework: single replicas, missing requests and limits, missing probes.

Advisory

What we would change and why, with no savings claim and no policy behind it.

Advisory9 checksFindings worth knowing about that carry no dollar figure and no one-click action. Each comes as a numbered playbook.Performance6 checksA measured bottleneck worth clearing: throttled operations, undersized tiers, a workload near its limit.

Or by cloud

AWS95 resource types Azure63 resource types Google Cloud47 resource types Snowflake6 resource types Microsoft 3651 resource type

Run the whole catalogue on your account.

Connect a read-only role. Every one of these checks runs on the first pass.

Start free Explore the playground

Prefer to talk it through first? Book 20 minutes with the team.

$30M+annualised cloud spend under management
550K+resources tracked since launch
20-60%off the bill in the first month
SOC 2Type II report, plus ISO 27001

Figures published on zop.dev.

Every check ZopNightruns, in one place.