Orphan Cleanup — Stop Paying for Unused Azure Resources

WHAT IT DOES

Orphan Cleanup deploys into your own Azure subscription as a managed application. Every day it inventories unattached disks, orphaned NICs, unassociated public IPs, and empty App Service plans, reports each with an estimated monthly cost and a running total to Microsoft Teams, and — only if you explicitly enable it — deletes them.

WHY IT IS SAFE

It ships report-only and dry-run by default. Deletion requires both enabling it and granting the Contributor role. Any resource tagged orphan-cleanup-exempt=true is never touched, and in-use or transient resources are excluded from the orphan set. Savings figures are clearly labelled estimates.

WHO IT IS FOR

FinOps, platform, and IT teams who want visible, recurring proof of wasted spend — and a safe way to reclaim it.

SETUP

Deploy from the marketplace, paste a Teams webhook URL, and run one script to grant read-only Reader. Add Contributor and flip the flags only when you have reviewed the report. It typically pays for itself in a single cleanup.