Cloud security first, on zero-trust principles, then the other Well-Architected workstreams. Three depths, and we can carry out the remediation plan with you.
Best when You want a baseline, or a second opinion before a launch.
Free
on every AWS account we bill, twice a year
$1,000 on any other AWS workload
Two sessions of two hours
A routine check-up for one application, walked through with our architect.
One workload, with the people who run it
Seen inNorwegian bus operator: all six pillars (opens in a new tab)
Best when A customer, an investor or a launch asks for evidence.
Includes the Check-up
$3,000+
priced by workloads, agreed in writing first. Free twice a year with Managed Services Professional.
Three weeks
We read how your account is really set up, and give you a remediation plan with an owner for each step.
One to three workloads, and their accounts
Seen inSheba.xyz: a cost review, then remediation (opens in a new tab)
Best when You are preparing for a certification, or have inherited an estate.
Includes the Health Review
$6,500+
priced by accounts, agreed in writing first. Free twice a year with Managed Services Enterprise.
Six weeks
Every account and layer examined, the critical parts tested, a roadmap to follow.
Every account and environment, and a gap view against one standard
Seen inGovernment file system: 30 working days (opens in a new tab)
Zero trust for your cloud: verify every identity, limit every path, protect every piece of data.
What neglect costs A security event costs more than preventing it: lost data, downtime and regulatory exposure.
How the risk splits.
The first step is at the top.
Each with an owner.
In three steps.
PCI DSS, ISO/IEC 27001, SOC 2, GDPR, HIPAA and the IT guidelines of sector regulators. The certificate comes from an accredited body, never from us.
With Cloud 23
We prepare you. An accredited body certifies.
With an accredited body
Yes, twice a year on every AWS account we bill. Otherwise it is $1,000.
No. You create a read-only role you can revoke at any time, and every action is logged in your account. Remediation is a separate change, with time-boxed access you approve.
No. We review configuration, architecture and process, and test recovery in an agreed window. A penetration test is a separate engagement.
Yes. On AWS, Azure and Google Cloud the Health Review and the Deep Dive run against that cloud’s own Well-Architected framework, scoped case by case. The Check-up is AWS’s own review, so it covers AWS workloads.