Cut your AWS bill by 20%

20% cloud savings. Guaranteed.
Delivered by our Agentic DevOps, Major Tom.

Onboarding in minutes

Sign Up

Provide read-only access to AWS cost and usage data in 1 click. No infra changes. Your setup stays untouched.

Get Your Savings Estimate

Get a full breakdown of exactly how much you'll save before you commit to anything. We guarantee 20% savings.

Become a Blocks Member

Connect your account to Blocks with AWS Billing Transfer in 2 clicks. No granting root access, no moving accounts.

Why Blocks?

GROUP BUYING

We aggregate cloud spend of hundreds of companies to negotiate big volume discounts. We always unlock 20% discount. Guaranteed. (It’s usually more.)

GROWTH COMPANIES ONLY

Blocks is a curated community. Strong teams only. Every new member makes the Blocks network smarter and more valuable.

Agentic Devops (Major Tom)

Major Tom for cloud control. Our agentic DevOps optimizes cloud costs in the background. Monitors risk. Automated cloud control for your peace of mind.

ZERO RISK, NO LOCK-IN

No infra changes required. No code access. No long term contracts. And we cover the downside risk if usage shifts.

Meet Your Agentic DevOps

Major Tom is your AI DevOps Engineer who never sleeps.

Scans your cloud nonstop
Hunts down waste & cuts costs
Fixes bad setups
Catches security risks

ABC · Slack

Search ABC

ABC

Threads

Drafts & sent

Saved

Channels

#major-tom

Direct messages

Jan

Apps

Major Tom

# major-tomcost optimization findings & critical security

Major TomApp9:14 AM

[Cost] Delete idle NAT Gateway to save $499/yr

The NAT Gateway gw-prod-b in eu-central-1 of the eu-prod account has been idle for 90 days with zero bytes processed — no service has used it in that time. Delete this gateway.

1 reply

Major TomApp9:14 AM

Blast radius — non-disruptive, reversible. 0 connections in 90d.

Fix — Managed by Terraform (infra/network/main.tf)

- resource "aws_nat_gateway" "gw_prod_b" { … }

Paste into Agent:

Remove aws_nat_gateway "gw_prod_b" + route entries in infra/network/main.tf.

3 min later

Jan9:17 AM

Just updated the Terraform, can you check?

Major TomApp9:17 AM

Verified ✅ $499/yr saved.

Major TomApp10:02 AM

[Security] Critical: EC2 Instance Reachable From Internet, Allowing Denial Of Service Attacks And Undetected Data Exfiltration

Instance ec2-checkout-1 has SSH exposed to 0.0.0.0/0 on public IP address 18.185.113.24. Any host on the internet can attempt to connect, enabling brute-force attacks, exploitation of vulnerable services, and lateral movement into the private network.

1 reply

Major TomApp10:02 AM

Blast radius — Restricting SSH access on security group sg-223 to prevent unauthorized internet access. Non-disruptive.

Fix — Managed by Terraform (infra/checkout/main.tf)

+ cidr_demo = ["YOUR_TRUSTED_IP/32"]

Paste into Agent:

Find the security group "sg-223" in infra/checkout/main.tf and update cidr_demo from ["0.0.0.0/0"] to ["YOUR_TRUSTED_IP/32"].

Jan10:48 AM

@MajorTom Give me yesterday's P95 latency on all customer-facing LBs.

Major TomApp10:48 AM

Found 2 load balancers: checkout-alb P95 142 ms, dashboard-alb P95 218 ms. Both within SLO.

FAQ

Blocks is for growth companies only. We take a cut of what we save you, not what you spend. We only make money when you see big cost reductions.

GET STARTED FOR FREE

No fees. No credit card. No risk.