Now on iOS — macOS coming soon

AWS operations
from your pocket

Monitor multi-account infrastructure, detect incidents, control costs, and take action — all from your iPhone. SSO authentication, no CLI needed.

Download for iOS See features
ECS Services
12/12
All tasks running
CloudWatch Alarms
2
In ALARM state
Monthly Cost
$4,281
↓ 8% vs forecast
RDS
3
CPU avg 23%
Lambda Errors (24h)
47
payment-processor
ALB Targets
18/18
All healthy
ElastiCache
4/4
Nodes available
SQS DLQ
12
Messages stuck

One toolbox, every Apple device

Native apps built for each platform — not a web wrapper

Available

📱 iOS & iPadOS

Full-featured operations app for iPhone and iPad. Optimized for on-call and incident response on the go.

  • iOS 17+ / iPadOS 17+
  • FaceID & Touch ID biometric lock
  • Lock screen & home screen widgets
  • Push notifications for alarms
  • Siri Shortcuts for actions
  • TestFlight beta — App Store soon
In Development

💻 macOS

Desktop companion for extended monitoring sessions. Menu bar quick-glance and full windowed dashboard.

  • macOS 14+ (Sonoma)
  • Menu bar status indicator
  • Multi-window support
  • Keyboard shortcuts
  • Notification Center integration
  • Shared profiles via iCloud Keychain

Built for AWS operators

Everything you need to monitor, diagnose, and act — without opening a laptop

🔐

SSO Device Code Flow

Connect via IAM Identity Center. No access keys, no CLI, no credentials on device. Approve in your browser, done.

👥

Multi-Account Profiles

Switch between AWS accounts instantly. Per-profile Keychain storage with biometric protection.

📊

Real-Time Dashboards

CloudWatch metrics, service health, and resource counts — auto-refreshing with configurable intervals.

🚨

Incident Detection

Automatic alarm correlation. See which services are degraded and why — without digging through consoles.

💰

Cost Intelligence

Daily, weekly, and monthly cost breakdowns with forecasts. Tap any bar to see service-level spend.

⚡

Write Actions

Force redeploy, scale services, reboot instances, failover databases — all from your phone with audit trail.

🤖

AI Diagnostics

DevOps agent analyzes logs and metrics. FinOps agent finds cost savings. Powered by Amazon Bedrock.

📱

Widgets & Notifications

Glanceable status on your lock screen. Push alerts when alarms fire. Deep link straight to the resource.

🔗

Federated Console Links

One tap opens the AWS Console — pre-authenticated with your current session. No SSO re-login in browser.

22+ AWS services monitored

Direct API calls with SigV4 signing — no third-party proxy, no SDK bloat

ECS EC2 Lambda RDS ALB Auto Scaling CloudWatch Cost Explorer Route 53 SQS SNS EventBridge CodePipeline CodeBuild ElastiCache OpenSearch S3 CloudFormation WAF & Shield ACM EBS Secrets Manager DynamoDB API Gateway EKS CloudFront Step Functions Kinesis Redshift ECR

Security-first architecture

Your credentials never leave your device. We can't see your AWS data — by design.

🔑 No permanent credentials

Only short-lived STS tokens (< 1 hour). Credentials auto-expire and are never stored in plain text.

🏦 Keychain encryption

All tokens encrypted by the iOS Secure Enclave. Protected by your biometric or device passcode.

📡 Direct API calls

All requests go straight from your device to AWS. No proxy server, no middleman, no data collection.

🚫 Zero telemetry

No analytics SDK, no crash reporting service, no third-party code. Your infrastructure data stays yours.

🧬 Biometric lock

Face ID or Touch ID required on every app launch. Optional re-authentication for write actions.

📋 Local audit trail

Every write action logged locally with timestamp. Export as JSON/CSV. 90-day retention, append-only.

🔒 No backend required

The app works entirely client-side. No servers to breach, no databases to leak. Your data never touches our infrastructure.

🛡️ Minimal IAM permissions

Works with read-only IAM policies. Write actions require explicit opt-in per profile. Least-privilege by default.

Simple pricing

Free to monitor. Subscribe to act.

Monitor
Free
Forever — no credit card
  • Choose any 5 AWS services
  • Full dashboards & metrics
  • Push notifications & widgets
  • Up to 2 AWS profiles
  • SSO + biometric lock
  • Read-only monitoring
Pro
$4.99/mo
or $39.99/year — save 33%
  • All 22+ services — no limit
  • Write actions (redeploy, scale, restart)
  • AI diagnostics (DevOps + FinOps agents)
  • Unlimited AWS profiles
  • 1-minute auto-refresh
  • Full audit trail + export
  • 1-day free trial
Team
Custom
For teams managing shared AWS accounts
  • Everything in Pro
  • Shared profiles across team members
  • Centralized audit trail
  • Role-based access control
  • Shared alert subscriptions
  • Team notifications (Slack, PagerDuty)
  • Custom dashboard widgets
  • Shared incident timelines
  • SSO/SAML integration
  • Priority support & onboarding
  • Custom integrations & API access
  • Volume licensing
Contact Sales

Ready to try?

Join the TestFlight beta. App Store launch coming soon.

Join TestFlight Beta Sales Support

Join the team

We're hiring in Warsaw. Remote-friendly across EU timezones.

Early-stage product — your code ships to users weekly
Remote-first — work from anywhere in the EU
Small team — direct impact, no layers of management
Competitive salary + equity options
B2B or UoP (umowa o pracę) — your choice
Our process: Intro call → Technical task → Final interview → Offer (within 2 weeks)
iOS Developer
€5,000 – €8,000/mo
Responsibilities
  • Design, build, and maintain a native iOS app for AWS infrastructure monitoring and operations using SwiftUI
  • Implement all AWS API integrations as direct HTTPS requests with SigV4 signing via CommonCrypto — no SDKs
  • Build complex UI: real-time dashboards, metric charts with sparklines, interactive incident timelines, and multi-account profile management
  • Parse both XML (AWS Query Protocol) and JSON responses, handling dual-format services where AWS is migrating between protocols
  • Implement secure credential storage using Keychain Services and biometric authentication (Face ID / Touch ID)
  • Develop lock screen and home screen widgets (WidgetKit), push notifications, and Siri Shortcuts
  • Manage subscription lifecycle with StoreKit 2 (monthly/annual plans, free trials, entitlement gating)
  • Write tests first — the codebase follows strict TDD (red-green-refactor) with Swift Testing framework
  • Own the full release lifecycle: provisioning, signing, TestFlight, and App Store submissions
Requirements
  • 3+ years of professional iOS development, at least 1 year with SwiftUI in production
  • Swift 6 strict concurrency: Sendable, actors, @MainActor, structured concurrency
  • Deep experience with URLSession, retry logic, concurrent request management, and offline caching
  • Solid understanding of iOS Security framework, Keychain Services, and LocalAuthentication
  • Experience with WidgetKit, StoreKit 2, and APNs
  • Comfortable with XML and JSON parsing without third-party libraries
  • Performance-minded: optimizing for 22+ services across multiple regions on older devices
  • Fluent English, written and spoken
Swift 6SwiftUISigV4 / CommonCryptoKeychainWidgetKitStoreKit 2TDDWarsaw / Remote
Android Developer
€5,000 – €8,000/mo
Responsibilities
  • Build a native Android app for AWS infrastructure monitoring, incident detection, and operational actions using Jetpack Compose
  • Implement AWS API calls directly with SigV4 request signing — no AWS SDK, no third-party networking libraries, no backend proxy
  • Develop the full UI in Jetpack Compose with Material 3: real-time dashboards, metric sparklines, cost charts, and multi-account switching
  • Parse both XML and JSON responses from AWS services with robust error handling and retry logic
  • Implement secure credential storage with Android Keystore, EncryptedSharedPreferences, and BiometricPrompt
  • Build Android Widgets (Glance API), background refresh (WorkManager), and push notifications (FCM)
  • Integrate Play Billing for subscription management with free trials and entitlement verification
  • Implement offline caching, deep linking from notifications, and App Actions / Google Assistant shortcuts
  • Write comprehensive unit and integration tests with JUnit 5, Turbine, and Compose UI testing
Requirements
  • 5+ years of professional Android development, at least 2 years with Jetpack Compose in production
  • Expert-level Kotlin: coroutines, Flow, structured concurrency, lifecycle-aware data streams
  • Strong knowledge of MVVM/MVI architecture patterns and dependency injection (Hilt)
  • Experience with Android Keystore, biometric authentication, and secure storage
  • Comfortable with XML and JSON parsing, HTTP client implementation without Retrofit
  • Experience with Glance API for widgets, WorkManager, and Firebase Cloud Messaging
  • Play Billing integration experience (subscriptions, trials, entitlements)
  • Fluent English, written and spoken
KotlinJetpack ComposeCoroutines / FlowAWS SigV4Android KeystoreGlance WidgetsPlay BillingWarsaw / Remote
AWS DevOps Engineer
€6,000 – €9,000/mo
Responsibilities
  • Design and operate the serverless backend: Lambda (Swift/Python), DynamoDB, EventBridge, SNS for APNs/FCM delivery
  • Implement cross-account role delegation using AWS Organizations, STS AssumeRole chains, and CloudFormation StackSets
  • Define all infrastructure as code using Terraform — modules, state management, PR-driven workflows, environment parity
  • Build CI/CD pipelines for backend services and mobile apps (Xcode Cloud, GitHub Actions, Fastlane)
  • Enforce least-privilege IAM policies, tenant isolation, and short-lived credential management
  • Set up observability: CloudWatch metrics, alarms, dashboards, and structured logging
  • Handle AWS API rate limiting and throttling at scale — queuing strategies for thousands of resources across dozens of accounts
  • Manage APNs/FCM certificate rotation and notification delivery reliability
  • Participate in on-call rotation and maintain incident response runbooks
Requirements
  • 5+ years in DevOps/infrastructure engineering with deep AWS expertise
  • Strong Terraform: writing modules, managing state, reviewing others' code, PR-driven IaC workflows
  • Solid experience with Lambda, DynamoDB, EventBridge, SQS/DLQ, API Gateway, and Step Functions
  • Deep understanding of IAM, STS, Organizations, and cross-account delegation patterns
  • CI/CD pipeline design and maintenance (GitHub Actions, CodePipeline, or equivalent)
  • Scripting proficiency: Python and/or Bash for automation
  • Experience with CloudWatch observability, alerting, and structured logging
  • Fluent English, written and spoken
AWSTerraformLambdaEventBridgeDynamoDBIAM / STS / OrganizationsCI/CDCloudWatchWarsaw / Remote
Support Engineer
€3,000 – €5,000/mo
Responsibilities
  • Provide technical support to customers configuring AWS SSO, IAM roles, and multi-account monitoring setups
  • Troubleshoot connectivity issues between the app and AWS APIs, including STS token expiry, permission errors, and region-specific failures
  • Reproduce and document bugs reported by users, creating clear steps for the engineering team
  • Write and maintain help documentation, FAQs, and onboarding guides for customers
  • Monitor support channels and respond within SLA — prioritize based on severity and customer tier
  • Collaborate with engineering to identify recurring issues and advocate for fixes or UX improvements
  • Assist customers with IAM policy configuration, ensuring minimal permissions for monitoring
  • Test new releases on TestFlight before distribution, flagging regressions and UX issues
  • Manage App Store review responses and user feedback
Requirements
  • 2+ years in technical support or customer engineering, ideally for developer tools or cloud platforms
  • Working knowledge of AWS: IAM, STS, Organizations, CloudWatch, and at least 3-4 compute/database services
  • Ability to read and understand IAM policies, trust relationships, and permission boundaries
  • Comfortable with iOS: TestFlight, crash logs, and basic debugging of mobile app issues
  • Excellent written communication — clear, concise, and empathetic
  • Experience with support tooling (Intercom, Zendesk, or similar)
  • Problem-solving mindset: ability to diagnose issues from incomplete information
  • Fluent English, written and spoken
AWS IAMTechnical SupportiOS / TestFlightDocumentationCustomer-facingWarsaw / Remote

Interested? Send your CV to [email protected]

Get in touch

Questions about the product, pricing, or partnership? Drop us a message.

Kairo Apps Support

We typically reply within a few hours

Kairo Apps
Hi! 👋 Have questions about OpsToolbox for AWS? Ask us anything — pricing, features, setup, or enterprise inquiries.