Abuse and cost

Set billing alerts on every paid service

Turn on budget alerts and spend caps on every paid service so a spike reaches you before the invoice does.

Why it matters

Usage-based pricing means a bug or an attack shows up as money. An alert at half your budget is much cheaper than a surprise invoice.

How to fix it

1. List every service with usage pricing: hosting, database, email, AI, storage.
2. Vercel: set Spend Management limits and notifications on paid plans.
3. Supabase: keep the spend cap on unless you need it off.
4. AWS: create a budget in AWS Budgets. GCP: create a budget alert in Billing.
5. AI providers: set usage alerts in each console.

How to verify

• Every paid service on your list has an alert or cap configured, with your email.

Related checks

• Cap your AI spend
• Rate limit expensive and auth endpoints
• Log errors without logging secrets

Tick it off in the full checklist