For CTOs, DevOps and platform teams Stop fighting fires. Start building.
Sherpa is an AI platform for AWS. Your engineers see cost, security posture, inventory and performance across every connected account in one place, with a remediation plan and the AWS CLI for each finding.
What's slowing our customers down this week?
checkout-api is the slowest, and failing most.
| Service | p95 | Error rate | Next step |
|---|---|---|---|
| checkout-api | 1.8 s | 4.2% | investigate in Automate |
| search | 940 ms | 0.6% | investigate in Automate |
| orders-worker | 620 ms | 1.1% | investigate in Automate |
What's open to the internet, and what's sitting idle?
3 security groups open to the internet. $1,240 a month idle.
Open to the internet
| Security group rule | Count | Next step |
|---|---|---|
| SSH (port 22) from anywhere | 2 | open the fix in Automate |
| RDP (port 3389) from anywhere | 1 | open the fix in Automate |
Idle
| What | Count | Monthly cost |
|---|---|---|
| Unattached storage volumes | 14 | $736 |
| Idle load balancers | 1 | $412 |
| Idle servers | 1 | $92 |
Which runtimes are out of support?
13 resources on versions past end of support.
| Resource | Version | Count | Next step |
|---|---|---|---|
| Lambda functions | Python 3.8 | 11 | upgrade |
| RDS databases | MySQL 5.7 | 2 | upgrade |
What's running outside CloudFormation?
68 resources.
| Type | Count |
|---|---|
| Servers (EC2) | 41 |
| Lambda functions | 23 |
| RDS databases | 4 |
Why is our team always firefighting on AWS?
-
200+
AWS services, each with its own console, settings and operational overhead.
-
69%
of companies run six or more tools just to watch their systems.
Sources: AWS; Omdia, 2026.
Each monitoring, billing and security tool sees one slice of the environment, so your engineers spend incident time stitching the context together by hand.
What does our team get in one place?
-
Performance
slow and failing services, Lambda errors and page speed, from your CloudWatch and OpenTelemetry data.
-
Security
what's open to the internet, who holds unused admin access, and your CIS and SOC 2 readiness.
-
Inventory
who owns what, what changed since the last scan and which runtimes are out of support.
-
Cost
what's idle, oversized or running on older, more expensive instance types.
Does Sherpa give us the commands?
Each finding comes with a remediation plan: the steps, the AWS CLI commands, and CloudFormation or Terraform when that is how the resource is managed. For slow or failing services, the plan starts with isolating the cause. Sherpa never applies a fix; your team does.
How much work is it to set up?
- 1
Connect once.
Your team deploys one CloudFormation template in the AWS management account, and an in-app guide verifies the connection. Setup takes about ten minutes.
- 2
Bring your telemetry.
Sherpa reads your CloudWatch metrics and logs, and accepts OpenTelemetry data from your own collector or SDK with a Sherpa API key.
- 3
Invite your team.
Admins invite platform, security and finance colleagues by email.
Questions engineering leaders ask us.
Does Sherpa replace CloudWatch or our APM tool?
No. Sherpa reads your CloudWatch and OpenTelemetry data and presents it alongside cost, security posture and inventory, so performance issues arrive with their operational context. Sherpa is an AI platform for AWS that works alongside your existing observability stack.
Does Sherpa send alerts?
Not today. Your team opens Sherpa, or asks the AI agent directly, when a service, a cost trend or a security finding needs attention.
Does Sherpa change anything in our AWS account?
Sherpa never applies a fix. It writes the remediation plan; your engineers review it and apply it on their own schedule.
How do we connect Sherpa?
Your team deploys one CloudFormation template in the AWS management account. It creates one role, which Sherpa uses to set up the data connections it needs.
Can it work with Terraform?
For fix plans, yes. They use Terraform when a resource's tags show it is managed with Terraform, and CloudFormation otherwise, so remediation follows your infrastructure-as-code practice.