Daily scans, without lifting a finger
Every connected account is scanned again each day. New problems appear on their own, so nobody has to remember to run anything.
AWS security, made simple
Find the AWS security risks that matter, every day
Connect an AWS account with a read-only role in under five minutes. teemops runs 149 checks across 17 AWS services every day, ranks what it finds, and tells you how to fix each one.
$1 for your first 30 days, then from $20 a month.
- Read-only access
- Scanned every day
- CIS AWS Foundations checks
- Email and Slack alerts
Features
Know what's wrong, and how to fix it
A list of problems with no fixes just hands the work back to you. Every check in teemops comes with the steps to put it right.
See what to fix first
Findings are ranked by severity. A health score from 0 to 100 shows where your accounts stand, with the breakdown that tells you which area to work on.
A fix with every finding
All 149 checks include remediation steps. Each finding also has a ready-made prompt you can paste into Claude or your coding agent.
Alerts when it matters
When a scan finds a new critical or high finding, teemops emails your owners and admins, and posts to Slack if you connect a channel.
149 checks, CIS included
IAM, S3, EC2, RDS, CloudTrail, KMS, Lambda, DynamoDB, load balancers, SNS, SQS, GuardDuty, Security Hub, Config and IAM Access Analyzer, covering 31 controls of the CIS AWS Foundations Benchmark v5.0. teemops also checks that you'd be alerted to use of the root user and to IAM policy changes.
Read-only by design
teemops reads your configuration through a read-only IAM role. It stores no access keys and never changes anything in your cloud.
How it works
From sign-up to first findings in minutes
Sign up
Use Google, Microsoft, GitHub or your email.
Connect AWS
One CloudFormation stack creates a read-only role in your account. You can read the template before you launch it, and delete the stack to revoke access. Your first scan starts as soon as it's connected.
Fix it, $1 for 30 days
Your scan gives you a health score and ranks every issue by severity. Choose a plan for $1 to see the affected resources and how to fix each one, and teemops scans every day from then on.
Web, terminal and AI agents
Works where your team already works
Use the web app, or bring the same findings into your terminal, your CI pipeline and Claude.
- The teemops CLI. Start scans and list findings from the terminal, with JSON output for scripts.
- A gate for CI.
--fail-on highfails the build while an open finding is high or worse. - An MCP server for Claude. Ask about your accounts, findings and health score in plain English.
Pricing
Simple plans. $1 for your first 30 days.
Every plan includes every feature: pick the one that fits your team and number of accounts, and change it whenever you need to.
Solo
For one person looking after one account.
$20/ month
$1 for the first 30 days
- Users 1
- Cloud accounts 1
Team
For a small team with a few environments.
$50/ month
$1 for the first 30 days
- Users 5
- Cloud accounts 5
Business
For growing teams running many accounts.
$100/ month
$1 for the first 30 days
- Users 10
- Cloud accounts 10
Included in every plan
- All 149 checks, including CIS AWS Foundations
- Daily scans of every connected account
- Remediation steps on every finding
- Health score and insights
- Email and Slack alerts
- CLI, CI gate and MCP server for Claude
Prices in US dollars. Billed monthly through Stripe. Cancel any time.
Subscriptions are covered by Teem's Terms of Service and Privacy Policy.
FAQ
Questions, answered
What does the $1 get me?
Thirty days of the plan you choose, with everything included. We charge $1 up front to check your card, and the full monthly price starts on day 31 unless you cancel first. The offer applies once per organization.
What access does teemops need to my AWS account?
Read-only. A CloudFormation stack creates an IAM role that teemops assumes, with an ExternalId unique to your account. teemops stores no access keys and cannot change anything. Delete the stack and access ends straight away.
Which clouds do you support?
AWS today. Google Cloud, Azure and Cloudflare are next on our roadmap. When they arrive, a GCP project, Azure subscription or Cloudflare account will count as one cloud account on your plan, the same as an AWS account.
Can I change plans or cancel?
Yes, any time, from the Billing page in the app. Upgrades apply straight away and are prorated. Downgrades and cancellations take effect at the end of the month you've paid for.
What happens if I need more accounts than my plan includes?
teemops asks you to upgrade before connecting another account. If you move to a smaller plan, the most recently connected accounts beyond the limit stop being scanned, but their findings are kept, and scanning resumes when you upgrade.
Does teemops fix problems for me?
teemops tells you what's wrong and exactly how to fix it, and gives you a prompt your coding agent can act on. You, or your agent, make the change with your own credentials, because teemops never has write access to your cloud.
Is a clean scan the same as passing an audit?
No. A clean scan means none of teemops' checks found a problem, which is a strong signal but not a certification. It does help you stay ready between audits, because the same checks run every day.
See what's in your AWS account today
Connect an account in under five minutes. $1 for your first 30 days.
Scan your account now