How to use cloud and SaaS free tiers safely: what 'free' really includes, billing alerts and spending caps, surprise costs like data egress and leaked keys, expiring credits, changing terms, and planning for when you outgrow the free plan.
Free tiers from cloud providers, databases, hosting platforms and APIs let you build and launch projects without upfront cost. But stories of surprise bills are common. A few precautions keep "free" genuinely free.
Know the type of free
- Always-free allowances: a set amount of usage each month that doesn't expire, such as a number of requests or GB of storage.
- Trial credits: a sum to spend within a set period, after which services may stop or start charging.
- Free plans: a limited product tier, such as one project or a capped number of users.
Many accounts mix all three. Read which applies to each service you use.
Set billing alerts on day one
Most major cloud providers let you create budgets and alerts by email or app when spending reaches a threshold, for example £1, £10 and £50. Do this before deploying anything. Remember:
- alerts usually tell you after costs have been incurred; they don't always stop spending;
- billing data can be delayed by hours;
- some platforms offer hard spending caps or a "stop at free limit" option. Use it where available.
Common sources of surprise costs
- Data egress: transferring data out of a cloud provider to the internet is often charged, and can grow fast with popular downloads or media.
- Always-on resources: virtual machines, databases and load balancers charge by the hour even when idle.
- Forgotten resources: test servers, snapshots, unattached disks and static IP addresses keep costing after a project ends.
- Logging and monitoring: verbose logs can exceed free ingestion limits.
- Autoscaling: a traffic spike, or a bot, can scale services and costs up quickly. Set maximum limits.
- Paid API calls: AI and mapping APIs often charge per request or token beyond a small free allowance.
Protect your keys
Leaked API keys and cloud credentials are a major cause of unexpected bills, as attackers use them for crypto mining or spam. To reduce the risk:
- never commit keys to Git, even in private repositories;
- use environment variables or a secrets manager;
- restrict keys by domain, IP address or permission where possible;
- turn on secret scanning in your Git host;
- enable two-factor authentication on cloud accounts;
- rotate any key that may have been exposed immediately.
Expect terms to change
Free tiers are marketing decisions and can be reduced or withdrawn. Heroku, for example, ended its free dynos in November 2022, forcing many hobby projects to move. Keep your project portable:
- use standard technologies and avoid unnecessary lock-in;
- keep infrastructure configuration in code;
- back up databases regularly to somewhere you control;
- read service emails about plan changes.
Sleep, cold starts and limits
Free services may pause after inactivity, causing slow first requests, or impose limits on requests, build minutes or bandwidth. That's fine for hobby projects, but test what happens when you hit a limit: does the service stop, slow down or start charging?
Commercial use and terms
Some free plans restrict commercial use, or require attribution. If your project earns money, check the terms, and budget for a paid plan.
Plan your exit from free
Estimate costs at 10 times your current usage with the provider's pricing calculator. Knowing the next price step helps you choose a provider you can afford to grow with.
Monthly check
- Review the billing dashboard.
- Delete unused resources.
- Check alerts still go to a monitored inbox.
- Review usage against free limits.
Frequently asked questions
Will a cloud provider waive an accidental bill?
Some have done so, especially for first-time mistakes, but it isn't guaranteed. Contact support quickly.
Do I need a card to use free tiers?
Often yes, for identity checks, which is why alerts and caps matter.
Sources and further reading
- AWS: Creating a billing alarm
- Google Cloud: Create, edit or delete budgets and budget alerts
- GitHub Docs: About secret scanning
- Heroku blog: Heroku's next chapter (end of free plans)
Facts checked on 20 October 2026. Spotted an error? Tell us and we will correct it.