CleanCloud is read-only by design - it cannot delete anything, even by accident. Scans AWS/Azure for orphaned resources and gives you evidence-based recommendations.

Key differences from other tools: - No Delete permissions required (read-only IAM policy) - No automated cleanup (you decide what to delete) - Conservative confidence scoring (HIGH: 90%+, MEDIUM: 70-90%) - Open source (MIT), runs locally

1,800+ downloads in 6 weeks. Interesting signal: 21% manually download to audit code (vs 2% typical).

Technical details: - Python CLI, uses standard AWS SDK (boto3) - Finds: Unattached EBS, old snapshots, infinite CloudWatch retention - CI/CD ready: JSON output, exit codes - No external API calls (runs entirely locally)

Would love feedback on what resources to check next!

GitHub: https://github.com/cleancloud-io/cleancloud Website: https://getcleancloud.com