Managed FinOps for Azure, run by DynamoNet

Azure cost, mapped
to your products.

Savings found,
checked, delivered.

We run FinOps for your Azure estate. AI proposes a product for each resource, keeps unassigned cost visible and finds savings with the evidence attached. An AI critic and a named engineer check every finding. You approve each change and get a monthly Excel report.

Read-only access. Nothing changes without your approval.
For Azure estates spending 20k or more a month.

✦ MAP · INVESTIGATE · CHALLENGE · REPORT
Dynamo · Northwind CareAgents working
Overview
Read-only

Project map

Resources clustered by project, dots sized by cost

30 resources
Claims $26.6KCare $20.6KMember $8.4KData Platform $23.5KShared $12.6KUnassigned $1.2K
Project map: resources clustered by projectClaims: 8 resources, $26,590. Member: 4 resources, $8,450. Shared infrastructure: 5 resources, $12,580. Care: 5 resources, $20,610. Data Platform: 5 resources, $23,510. Unassigned: 3 resources, $1,170. Shared infrastructure connects to every project. One observed call links Claims to Member. Dashed lines are configured links with no observed traffic.sql-claims-prod · Azure SQL · $7,450 in October 2026asp-claims-prod · App Service · $6,840 in October 2026ca-claims-api-prod · Container Apps · $3,920 in October 2026st-claims-docs · Storage · $2,860 in October 2026func-census-worker · Functions · $2,140 in October 2026asp-claims-staging · App Service · $1,260 in October 2026redis-claims-prod · Redis · $1,180 in October 2026appi-claims-prod · Application Insights · $940 in October 2026asp-member-prod · App Service · $3,980 in October 2026ca-identity-prod · Container Apps · $2,310 in October 2026redis-member-prod · Redis · $1,240 in October 2026asp-member-dev · App Service · $920 in October 2026log-platform-prod · Log Analytics · $5,260 in October 2026afd-public · Front Door · $3,120 in October 2026agw-internal-prod · Application Gateway · $1,840 in October 2026vnet-hub-weu · Networking · $1,380 in October 2026agw-nonprod · Application Gateway · $980 in October 2026aks-care-prod · AKS · $9,780 in October 2026sql-providers-prod · Azure SQL · $4,610 in October 2026aks-care-staging · AKS · $4,120 in October 2026redis-care-staging · Redis · $1,460 in October 2026func-notify-prod · Functions · $640 in October 2026vm-sqldw-prod-01 · SQL on VMs · $8,640 in October 2026vmss-ingest-prod · VM Scale Sets · $6,980 in October 2026st-datalake-prod · Storage · $4,350 in October 2026vm-reporting-01 · Virtual Machines · $2,410 in October 2026vm-ingest-dev-01 · Virtual Machines · $1,130 in October 2026st-legacy-exports · Storage · $690 in October 2026disk-unattached (3) · Virtual Machines · $410 in October 2026pip-unused (2) · Networking · $70 in October 2026ClaimsMemberShared infrastructureCareData PlatformUnassigned
⌑

Read-only accessScoped reads, revocable by your admin.

✦

AI investigates. An AI critic challenges.Two independent agents on every finding.

⌁

Code checks. An engineer signs.Costs come from billing data; every saving is checked against it.

WHAT YOU GET

Three things.
Every month.

Cost by product, not by resource group. Savings with the evidence and risk attached. A report your CFO and your engineers can both open.

01

AI PROJECT MAPPING

Your resources, mapped to
product, component, environment.

Resource groups and tags tell part of the story. The mapping agent reads names, tags, pipelines, App Insights dependencies, identities and traffic, then proposes where each resource belongs, with a confidence level and the evidence. In the report this grouping is called a project: the product or application a resource serves.

  • High, medium or low confidence, with evidence, on every mapping
  • Owners confirm or correct; unsupported mappings stay unassigned
  • Shared services split by requests or ingested GB
⊞

Project mapping

98.7% of cost mapped

Proposed by the mapping agent. Confirm what is right, correct what is not.

Claims 28.6%Care 22.2%Member 9.1%Data Platform 25.3%Shared 13.5%Unassigned 1.3%

Claims

4 of 8 resources shown

Proposed
C
asp-claims-prodClaims Portal · prod · Tag app=claims; deployed by the claims-portal pipeline; App Insights dependency to ca-claims-api-prod
High confidence, Confirmed
C
ca-claims-api-prodClaims API · prod · Observed calls from Claims Portal (App Insights); same release pipeline
High confidence, Proposed
D
redis-claims-prodClaims API · prod · Only client is ca-claims-api-prod (observed connections)
Medium confidence, Proposed
C
func-census-workerCensus Worker · prod · Name similarity; managed identity writes to st-claims-docs
Low confidence, Needs review
Waiting for the product owner

Care

4 of 5 resources shown

Proposed
D
sql-providers-prodProvider Directory · prod · Observed dependency from scheduler pods
High confidence, Confirmed
C
aks-care-prodScheduler · prod · Helm release labels app=care; namespaces scheduler and notify
High confidence, Confirmed
D
redis-care-stagingScheduler · staging · Only client is aks-care-staging
Medium confidence, Proposed
C
func-notify-prodNotifications · prod · Identity access to the Care key vault only; no observed traffic yet
Low confidence, Needs review
Waiting for the product owner
02

RECOMMENDATIONS WITH ESTIMATED SAVINGS

Savings you can approve,
because you can see why.

The investigator agent looks at patterns, not averages: peaks, memory, schedules, commitments and licences. An independent AI critic challenges every finding and rejects what the evidence does not support. The AI proposes a saving range, code checks it against the recorded cost, and an engineer signs it off.

  • A monthly saving range per item, with checks listed apart
  • Risk, confidence, evidence and rollback on every item
  • Realized savings measured after each change
✦

Recommendations

October 2026
Savings, code total$10.5K to $13.9Kper month, overlaps counted once
Checks to do first2$12.4K per month at stake
Compute savings plan across vmss-ingest-prod and aks-care-prodData PlatformCareCommitmentCritic: needs evidenceMedium riskMedium confidence
$11.7K/mo at stakeCheck first
Reserve 1-year capacity for sql-claims-prod and sql-providers-prodClaimsCareCommitmentCritic: passedLow riskHigh confidence
$2.5K to $3.2K/moAwaiting your approval
Stop aks-care-staging node pools nights and weekendsCareScheduleCritic: passedLow riskHigh confidence
$1.7K to $2.1K/moAwaiting your approval
Move container stdout logs to the Basic logs planSharedLogsCritic: passedLow riskHigh confidence
$0.9K to $1.1K/moAwaiting your approval
Apply Azure Hybrid Benefit to the warehouse SQL licenceData PlatformLicensingCritic: passed with a prerequisiteLow riskMedium confidence
$2.0K to $3.3K/moNeeds your information
Downsize asp-claims-prod from P2v3 to P1v3ClaimsRightsizingCritic: rejectedHigh riskHigh confidenceAverage CPU is low, but peak working set is 11.4 GiB, above the 8 GiB of P1v3
No savingRejected by critic
03

THE MONTHLY REPORT

One Excel workbook.
Every number traceable.

Each month you receive a workbook and a walkthrough with your engineer. Cost by product and service, the trend, every recommendation with its status, the mapping and the evidence gaps that still need your team.

  • Summary
  • Recommendations
  • Cost by project
  • Cost by service
  • Monthly
  • Resources
  • Project mapping
  • Evidence gaps
XLSXdynamonet-sample-report.xlsx23 KB
IDRecommendationSaving / monthStatus
R-01Reserve 1-year capacity for sql-claims-prod and sql-providers-prod$2.5K to $3.2KAwaiting your approval
R-02Delete three unattached managed disks$0.3K to $0.4KApproved
R-03Stop aks-care-staging node pools nights and weekends$1.7K to $2.1KAwaiting your approval
R-04Move container stdout logs to the Basic logs plan$0.9K to $1.1KAwaiting your approval
R-05Apply Azure Hybrid Benefit to the warehouse SQL licence$2.0K to $3.3KNeeds your information
Code total, all savings$10.5K to $13.9K
ClaimsCareMemberData PlatformSharedUnassigned

HOW IT WORKS

Four steps.
You approve every change.

Your Azure scope
Read-only reader
01

Connect

Grant read-only access to the subscriptions in scope. Your administrator controls it and can revoke it at any time.

costinventorymetricstelemetry
02

Map

The mapping agent proposes a product, component and environment for each resource, with confidence and evidence. Unsupported mappings stay unassigned.

IN Investigator→CR Critic
03

Investigate

One agent finds savings, an independent critic challenges them, and code checks every range against recorded cost.

✓ Signed off by your engineer.
Approved by you.
04

Approve and report

A named engineer signs off. You approve the changes you want. The Excel report arrives every month.

COVERAGE

App Service + FunctionsContainer Apps + AKSVirtual Machines + Scale SetsAzure SQL + SQL on VMsAzure Cache for RedisStorageFront Door + Application GatewayApp Insights + Log AnalyticsAll subscription cost
Service familyComputeData and AIStorageNetworkMonitoringAll cost

AZURE TOOLS VS DYNAMO

Keep Advisor and Cost Management.
Add the part nobody owns.

Azure built-in tools compared with Dynamo
The questionAzure built-in toolsAdvisor · Cost Management · Monitor✦ DynamoManaged FinOps by DynamoNet
Both do
Cost by subscription, resource group and tagYesCost ManagementYesSame billing data, amortized
Resource recommendationsYesAdvisor, per resource typeYesChecked against peaks, not averages
Budgets and anomaly alertsYesCost alertsPartlyCost changes explained monthly; keep Azure cost alerts
Only Dynamo
Cost by product, component and environmentPartlyOnly as good as your tagsYesAI mapping with confidence and evidence
Shared costs split by real usagePartlyManual allocation rulesYesSplit by requests or ingested GB
Every finding challenged before you see itNoYour team evaluatesYesIndependent AI critic, engineer sign-off
Savings ordered by risk, with evidencePartlyFlat listYesRisk, confidence, rollback, evidence
Someone owns the optimisationNoSelf-serviceYesManaged service, you keep approval
Monthly report your CFO can openPartlyExports and dashboardsYesExcel workbook, every month

INSIDE THE ANALYSIS

Patterns, not averages.
Context, not guesses.

Demand by hour, cost by component, and the dependencies between them. This is what the agents look at before a recommendation reaches you.

▥

Demand profile

Claims Portal · requests by weekday and hour, UTC

Who sends requestsProbes and bots separated
Other traffic 89%Probes 6%Bots 5%
▤

Cost per component

Top components · October 2026 · direct plus allocated shared

Claims APIClaims
$15.9K
SchedulerCare
$14.0K
IngestionData Platform
$13.8K
WarehouseData Platform
$8.6K
Claims PortalClaims
$7.8K
Member PortalMember
$7.8K
Shared cost

Front Door · $3,120
Split by request share. Logs split by ingested GB.

Claims 46%Member 38%Care 16%
See the allocation rules →
⌘

Project map with provenance

Clustered by project

Every resource, grouped by the project it serves and sized by cost. Observed traffic and configured links are different kinds of evidence. Choose a group to highlight it.

$92,910 in October 2026. Projects 85.2% · Shared 13.5% · Unassigned 1.3%

Project map: resources clustered by projectClaims: 8 resources, $26,590. Member: 4 resources, $8,450. Shared infrastructure: 5 resources, $12,580. Care: 5 resources, $20,610. Data Platform: 5 resources, $23,510. Unassigned: 3 resources, $1,170. Shared infrastructure connects to every project. One observed call links Claims to Member. Dashed lines are configured links with no observed traffic.sql-claims-prod · Azure SQL · $7,450 in October 2026asp-claims-prod · App Service · $6,840 in October 2026ca-claims-api-prod · Container Apps · $3,920 in October 2026st-claims-docs · Storage · $2,860 in October 2026func-census-worker · Functions · $2,140 in October 2026asp-claims-staging · App Service · $1,260 in October 2026redis-claims-prod · Redis · $1,180 in October 2026appi-claims-prod · Application Insights · $940 in October 2026asp-member-prod · App Service · $3,980 in October 2026ca-identity-prod · Container Apps · $2,310 in October 2026redis-member-prod · Redis · $1,240 in October 2026asp-member-dev · App Service · $920 in October 2026log-platform-prod · Log Analytics · $5,260 in October 2026afd-public · Front Door · $3,120 in October 2026agw-internal-prod · Application Gateway · $1,840 in October 2026vnet-hub-weu · Networking · $1,380 in October 2026agw-nonprod · Application Gateway · $980 in October 2026aks-care-prod · AKS · $9,780 in October 2026sql-providers-prod · Azure SQL · $4,610 in October 2026aks-care-staging · AKS · $4,120 in October 2026redis-care-staging · Redis · $1,460 in October 2026func-notify-prod · Functions · $640 in October 2026vm-sqldw-prod-01 · SQL on VMs · $8,640 in October 2026vmss-ingest-prod · VM Scale Sets · $6,980 in October 2026st-datalake-prod · Storage · $4,350 in October 2026vm-reporting-01 · Virtual Machines · $2,410 in October 2026vm-ingest-dev-01 · Virtual Machines · $1,130 in October 2026st-legacy-exports · Storage · $690 in October 2026disk-unattached (3) · Virtual Machines · $410 in October 2026pip-unused (2) · Networking · $70 in October 2026Claims8 resources · $26.6KMember4 resources · $8.4KShared infrastructure5 resources · $12.6KCare5 resources · $20.6KData Platform5 resources · $23.5KUnassigned3 resources · $1.2K

A configured permission is not proof of traffic, and traffic is not proof of ownership. Both stay visible in the mapping evidence.

TRUST AND SECURITY

Read-only.
And specific about it.

Access, data coverage and uncertainty are part of the report, not small print.

Discuss your security requirements →

ACCESS

You control the scope

Read-only roles on the subscriptions you choose. The reader has no permission to change infrastructure.

AI

Bounded, checked, accountable

Agents work on a bounded evidence packet. An independent critic reviews every finding. Code computes costs and checks every saving.

MINIMIZATION

No secrets or payloads

No Key Vault secret values, connection strings, database contents, storage contents or request bodies.

APPROVAL

You approve every change

We prepare each change with its evidence and rollback. Nothing is applied without your team's approval.

PROCESSING

Terms before connection

Model provider, processing route, storage and retention are agreed in writing before any access.

EVIDENCE

Missing data stays missing

Gaps are listed in the report with what they block and how to close them. Nothing is guessed.

PLANS

Start with a free scan.
Hand us the optimisation.

Managed FinOps

Monthly

We own cost optimisation and reporting.

Continuous mapping, investigation and reporting. We prepare every change with its evidence and rollback; you approve it.

  • Monthly Excel report and walkthrough
  • New savings investigated every month
  • Mapping kept current as the estate changes
  • Realized savings measured after each change
Talk about managed FinOps

Deep dive

Fixed scope

One application or one cost question.

A focused investigation of demand, capacity, shared costs and commitments for a single workload or decision.

  • Scope agreed upfront
  • Workload and dependency analysis
  • Recommendations ordered by risk
Discuss a deep dive
How we work

We own cost optimisation and reporting. Your team keeps approval rights over every change.

A NAMED ENGINEER, NOT A BLACK BOX

Djordje Petrovic

Founder · DevOps and Site Reliability Engineer

DynamoNet is an independent Azure FinOps company in Belgrade, Serbia, working with teams across the EU and US. Every report is signed off by a named engineer.

Meet DynamoNet ↗

FAQ

Good questions.
Clear answers.

Something specific to your estate?

Ask Djordje →
What exactly does DynamoNet do?

We run FinOps for your Azure estate as a managed service. Dynamo, our product, proposes a product, component and environment for each resource, keeps unassigned cost visible, investigates savings and keeps the evidence. We own the optimisation work and the monthly reporting. Your team keeps approval rights over every change.

What does the AI actually do, and what does it not do?

One AI agent proposes mappings and investigates savings from a bounded evidence packet. A second, independent AI critic challenges each finding and rejects what the evidence does not support. Deterministic code computes costs and allocations from your billing data. The AI proposes each saving range with its arithmetic, and code checks it against the recorded cost of the cited resources and flags any range above it. A named engineer approves the report.

How does AI project mapping work?

The mapping agent reads names, tags, resource groups, deployment pipelines, Application Insights dependencies, managed identities and observed traffic. It proposes a product, component and environment for each resource, with a confidence level (high, medium or low) and the evidence behind it. An independent review checks each boundary; what it cannot support stays unassigned and visible. Owners confirm or correct proposals in the walkthrough.

Which Azure services do you cover?

App Service and Functions, Container Apps and AKS, Virtual Machines and Scale Sets, Azure SQL and SQL Server on VMs, Azure Cache for Redis, Storage, Front Door and Application Gateway, Application Insights and Log Analytics, plus all cost in your subscriptions, so nothing on the bill is left out of the report.

What access do you need? Do you change anything?

Read-only access, scoped with your Azure administrator and revocable at any time. Typical sources are Cost Management, Resource Graph, Azure Monitor and Application Insights. Nothing changes in your estate without your approval: we prepare each change with its evidence and rollback, and your team approves it.

What does the monthly report look like?

An Excel workbook (a project there is one of your products or applications): Summary, Recommendations, Cost by project, Cost by service, Monthly trend, Resources, Project mapping and Evidence gaps. Every number traces back to its source and allocation rule. You can download an example from this site.

How are savings calculated?

The AI proposes each estimated saving from your billing and usage data and shows its arithmetic. Code checks every range against the recorded cost of the cited resources before an engineer signs it off. After a change, realized savings are measured against the same usage priced at the old configuration over a full billing period, so changes in demand or prices do not distort the figure.

Where does our data go?

Before connecting, we agree the data scope, storage, retention, model provider and processing route in writing. Evidence is minimized before AI analysis. We never need database contents, storage contents, request bodies, Key Vault secrets or application-setting values.

Can you work with our MSP or CSP?

Yes. The report and recommendations can be shared with your engineering team, MSP or CSP, and we agree who approves and who implements each change.

Free Read-only scan of your Azure estate

See your Azure bill by product.
And what to cut first.

A free read-only scan for estates spending 20k or more a month: your estate mapped, the first savings found,
and the workbook walked through with an engineer.