EgressLock

EgressLock is a web app (with optional CLI) that monitors and controls outbound data transfer from cloud storage in near real time. It connects to AWS S3, Google Cloud Storage, and Azure Blob, then builds a baseline of normal egress patterns by bucket, prefix, account, and workload. When egress spikes, it alerts instantly and can automatically apply guardrails: temporary bucket policy changes, signed-URL throttling, CDN routing suggestions, or blocking known-bad IP ranges. It also estimates end-of-month egress cost, highlights the top “leaky” objects (large, frequently downloaded files), and recommends cheaper delivery paths (CloudFront/Cloud CDN/Azure CDN) or replication strategies. This is not a generic cost dashboard; it’s an operational control plane focused on preventing the single most painful storage surprise: egress blowups caused by misconfigurations, scraping, hotlinking, or runaway jobs.