The cuts you'd defend at standup.
One command finds orphaned disks, zombie VMs, and wasted IPs — and tells you which ones are safe to act on, with signals, blast radius, and confidence scoring behind every recommendation.
| Feature | SafeCut | Azure Advisor | Cloudability / Apptio |
|---|---|---|---|
| Blast-radius simulation before applying | ✓ built-in | ✗ | partial |
| One-click auto-apply with rollback | ✓ Solo $29/mo | ✗ manual only | ✗ ticketing only |
| Performance-based pricing | ✓ 8% of verified savings | n/a | ~3% of total spend |
| White-label reports for MSPs | ✓ Partner plan (20% revshare) | ✗ | ✗ |
| Free CLI forever | ✓ | portal only | ✗ seat-gated |
Real output from a live Azure subscription
A decision engine that doesn't just find waste — it tells you what's safe to delete, with the evidence to defend it.
Scans VMs, disks, and public IPs across subscriptions. Detects idle resources using a weighted "Relative Idle Time" metric, not just on/off status.
Tag resources with protection modes (ignore, observe, protect), criticality levels, and external dependency flags. SafeCut respects them.
Run what-if analysis before changing anything. See blast radius, decision diffs, and savings impact. Export reports as HTML or Markdown.
12-month ROI projection with confidence scoring. Know exactly how much you'll save before committing to a single change.
Builds a resource dependency graph. Won't recommend deleting a disk that's attached to a running VM. Understands relationships.
Define policies at subscription or resource group level. Resources inherit automatically. Detect drift when teams override defaults.
The CLI gives you the diagnosis. The Cloud gives you the cure.
SafeCut v1.0 ships Azure-first. The engine, rules, and policy model are cloud-agnostic.
Automated scans. Scheduled reports. Team dashboards.
The CLI is just the beginning.
Works on macOS, Linux, and Windows. Zero config required.