CloudBridgeSupported platforms
Reads the bills you already pay
From each provider's billing API, or from the export its console gives you.
Clouds
AWSCost Explorer, Data Exports
Alibaba CloudBilling API, bill import
CloudflareDaily usage, per resource
VolcengineBill import, Ark endpoints
Model platforms
OpenAICost or usage export
AnthropicCost or usage export
DeepSeekBalance API, bill import
Model StudioPer model, in the Alibaba Cloud bill
Azure and Google Cloud are not supported yet. Logos are trademarks of their owners, shown to say which bills CloudBridge reads.
How it works
From a bill to an answer
No server to run, no account to create.
-
Add an account
A read-only key for a billing API, or just a name for a source you import. Keys go to the OS keyring.
-
Bring the bill in
Fetched from the provider, or imported from the export you downloaded — the same rows either way, named after FOCUS columns.
-
Read it, and keep watching
Where the money went, by account, service, model and business line — and a notification the day a line jumps.
Keep watch
It keeps watching with the window closed
A cost alert is only worth something while the money is still being spent. Close the window and CloudBridge stays in the menu bar with the month's spend as its title. It fetches each account once its refresh interval has passed, daily by default, runs the rules and notifies you when one fires. Open at login keeps it there after a restart.
Down to the resource
Which bucket, which Worker, which Durable Object
Cloudflare's bill says “R2 Class B operations, 734 on 3 October” — never which bucket. CloudBridge asks Cloudflare's analytics for each resource's share of the day and splits the bill across them, so a runaway namespace shows up by name. Usage inside the free allowance is kept too: that is where a runaway starts, days before the first cent.
Find what to cut
The bill, next to what is running
Insights scans your AWS and Cloudflare accounts read-only and sets the result beside the bill: stopped instances whose volumes still bill, idle public addresses, resources nobody owns, and resources billed but missing from the scan — each with what it cost this period, summarized by type before it lists a single resource.
One ledger
Every bill, the same columns
Whichever way a bill arrives, it lands as the same rows, named after the FinOps FOCUS columns, with each charge's own currency kept beside the converted one. So an Alibaba Cloud ECS instance and an AWS EC2 instance are both Compute, and the ledger answers questions in SQL.
SELECT provider, service_category, round(sum(billed_cost), 2) AS cost FROM v_charge_normalized WHERE billing_period = '2026-10' GROUP BY ALL ORDER BY cost DESC;
Privacy
Your bills stay yours
A bill says what you run, for whom, and how much it costs. CloudBridge keeps all of that on your computer.
- The ledger is a DuckDB file on your disk; bills never pass through anyone else's server.
- No account, no sync service, no telemetry.
- Credentials live in the macOS Keychain or Windows Credential Manager.
- It only reads: no provider resource is ever created or changed.
- It asks each provider at most once per refresh interval, and never pays twice for the same data.
- Open source under MIT: every line is there to read.
FAQ
Questions people ask
- What is CloudBridge?
- A free, open-source desktop app that reads your cloud and AI provider bills into one ledger on your machine — from each provider's billing API, or from the export you downloaded — and draws where the money went. It runs alerts on that ledger and keeps watching from the menu bar after its window closes.
- Which providers does it support?
- AWS (Cost Explorer, or a FOCUS Data Export in S3), Alibaba Cloud and Cloudflare through their billing APIs; DeepSeek through its balance API; and bill exports from Alibaba Cloud, Volcengine, OpenAI, Anthropic and DeepSeek. Azure and Google Cloud are not supported yet.
- Does CloudBridge send my bills anywhere?
- No. Bills go from the provider straight into a DuckDB file on your computer. There is no CloudBridge account, no sync service and no telemetry, and credentials are kept in the OS keyring.
- Can CloudBridge itself add to my bill?
- Only through AWS: Cost Explorer charges per request and S3 charges for reads. CloudBridge asks each provider at most once per refresh interval (24 hours by default), about two Cost Explorer requests per AWS account a day, never repeats a fetch that was already paid for, and does not re-download an S3 export that has not changed. Every other API it calls is free, and it never creates or changes a resource.
- How does it catch a runaway bill?
- It reads bills per day, so a spike is in the ledger the next day rather than on the invoice. Rules flag spend above its trailing baseline, budgets and low balances; while CloudBridge runs — in the menu bar, with its window closed — it refreshes each account once a day and posts a notification for each alert. Cloudflare's bill is split down to the bucket, Worker or Durable Object behind it.
- Which systems does it run on?
- macOS on Apple silicon (signed and notarized) and 64-bit Windows. Linux and Intel Macs can build it from source.
- Is CloudBridge free?
- Yes. It is free and open source under the MIT license, with the full source code on GitHub. Provider API fees, where there are any, are separate.
- Can I try it without installing it?
- Yes. The same application compiles to WebAssembly and runs in the browser demo, on a sample bill of twelve months across several providers.
Put your bills in one place
Download CloudBridge, add an account or import an export, and see the month at a glance. Or look around the demo first.