A method and system for identifying and reducing costs of information technology actions in real time. Initiation of an information technology (IT) action by a user is detected. An actual cost to perform the IT action is determined in real time prior to a completion of the IT action. A target cost (e.g., average cost) to perform the IT action is obtained. The actual cost is determined to be greater than the target cost. Recommended actions for reducing the actual cost are obtained. A notification is presented to the user in real time and prior to the completion of the IT action. The notification includes a description or a link to a description of the recommended actions.