The Software Stack Audit Checklist: Finding the Spend Nobody's Watching

Software spend doesn't disappear all at once — it leaks quietly through unused seats, forgotten trials, and tools nobody remembers approving. Here's how to find it in an afternoon.

By The StackMatch Research Team

An unoptimized $6K-10K/mo stack for a 15-25 person business often has $1K-3K/mo doing nothing

$1K-3KTypical monthly waste in an unaudited stack

4Categories of waste to check

Half a dayRealistic time for a first full audit

Illustrative range for a 15-25 person business running an unoptimized $6K-10K/mo software stack — actual waste varies by how long the stack has gone unaudited.

Waste hides in categories, not in any one bad decision

Nobody sets out to waste $1,000 a month on software. It accumulates through four specific, boring patterns — a seat nobody deprovisioned when someone left, two tools quietly doing the same job because a migration never finished, a trial that auto-converted to paid, or a plan tier bought for features that turned out to be overkill. None of these show up on a single invoice as 'waste.' They only show up when you build the full list and look at it in one place.

Waste hides across four categories: unused, duplicate, zombie, and over-provisioned.

Step 1: gather the data

Pull these four sources before you start

Credit card and bank statements for the last 12 months
Expense reports, searched for 'software,' 'subscription,' and 'SaaS'
Any existing procurement or IT tool list, even an informal one
A quick list from each department head of what they personally use

data sources needed for a complete picture

Step 2: build one master list

Put every tool into a single spreadsheet: name, monthly and annual cost, seat count, cost per seat, owning department, renewal date, and an owner. Consolidate duplicates you find along the way — the same tool often shows up on more than one card because two departments each set it up independently. A 15-25 person business typically surfaces somewhere between 20 and 50 distinct tools once everything is consolidated into one list.

A SaaS-management tool can automate discovery for larger stacks, but for a business under roughly 50 employees, doing this manually once is usually fast enough to be worth just doing.

Step 3: find the waste

Check for these four patterns specifically

Unused seats — licenses paid for but not logged into in the last 60 days
Duplicate tools — two or more products doing the same job for different teams
Zombie subscriptions — nothing logged in for 60+ days, often left over from a former employee or a shelved project
Over-provisioned tiers — paying for an Enterprise or Pro plan while only using Free-tier features

Illustrative share of waste by category

Step 4: act on what you find

Execute these, in this order

Cancel zombie subscriptions immediately — there's no reason to wait on these
Right-size seat counts to actual usage, not the headcount from a year ago
Pick one winner per duplicate category and give the team 30 days to migrate off the other
Downgrade over-provisioned plans to the tier that matches actual feature usage

Give teams 30 days before cancelling a tool that looks unused but might have a quiet, legitimate reason to exist — the goal is finding real waste, not creating a fire drill.

Step 5: make sure it doesn't creep back

Put a light governance process in place

Put a recurring quarterly audit on the calendar now, not as a someday task
Require sign-off for any new tool over a set monthly threshold (e.g. $50/month)
Route new tool requests through one person, even informally
Add tool access revocation to your offboarding checklist so seats don't outlive employees

The bottom line

A half-day audit, run against a stack that's never had one, routinely turns up real monthly savings without cutting a single capability the business actually uses. The waste isn't a sign of a bad stack — it's just what happens to any list of subscriptions that's never been looked at all at once.

Run the free StackMatch audit to see your stack through this same lens automatically — duplicate tools and over-provisioned plans flagged without the spreadsheet.

Run your own audit