Services

What we do, specifically

Four areas we help with, and the concrete steps we take in each. Every service has its own page with more detail.

  • Infrastructure modernisation and cloud

    Cloud, your own servers, or both? We design what pays off for you.

    • Inventory. We list your servers, applications and how they depend on each other, who has access to what, and what running it all costs per month. Often it is the first time it is all in one place.
    • Comparing options. Cloud, your own servers, or both. We weigh each on cost, risk, operational effort and how easy it is to leave later. You get a recommendation with the reasons.
    • Target design. We design the network, identity and access, backups and monitoring to fit your applications, team and budget.
    • Step-by-step move. We split the migration into smaller steps. Each has a test and a way back and is scheduled outside your peak hours, so nothing hinges on one big switch-over.
    • Code and documentation. The result is described as code (IaC – Terraform, Ansible) and documented. The environment can be rebuilt at any time and stays yours, even if you stop working with us.

    For example: An application moves off an ageing server to the new environment piece by piece, without one big switch-over.

  • DevOps and automation

    New versions in production without manual steps, and a clear view of what runs where.

    • Deployment review. We follow a change from commit to production: what is done by hand, where the pipeline waits and what costs the most time and money. That tells us what to fix first.
    • Faster, cheaper CI/CD. The pipeline builds and tests the application and prepares it for deployment. We shorten it with caching, parallel jobs and smaller images, and set up runners so you pay for work, not for waiting.
    • Containers. Applications are packaged into containers (Docker) with small, regularly updated images. We bring in orchestration (Kubernetes) where it makes operations or scaling simpler. Where it doesn’t, we keep a simpler setup.
    • GitOps and app overview. The desired state of your applications lives in Git, and a tool such as Argo CD keeps production in line with it. One place shows which version runs in which environment, and any drift from Git is visible straight away.
    • Controlled rollouts. A new version goes to test first, then to a small share of traffic (canary), and further only if the metrics look good. If something goes wrong, the previous version is restored automatically.

    For example: A developer approves a change in the repository, the new version passes the tests, rolls out to a small share of traffic first, and the overview shows what runs where.

  • Security and technical assessments

    Know what to fix now and what can wait.

    • Technical review. We review your infrastructure and development processes: access and permissions, network, updates, logging, backups and how deployments work. We look at how the systems really are, not only at the documentation. The output is a plain-language report of the findings.
    • Priorities. Findings are ranked by risk and effort: what to fix now, what later and what to leave. You get a short plan instead of a long list.
    • Remediation. Following the priorities, we put the controls in place in your infrastructure and development processes: patches, removing stale accounts and former suppliers’ access, encryption and secure system configuration. Each control is verified, for example with a test restore or an access review. We design them so they don’t get in the way of everyday work.
    • Verification. We test-restore backups, review access and check that alerts actually arrive. A control nobody has tested is only an assumption.
    • Evidence for audits and NIS2. We prepare the technical evidence that the controls work: what is in place, how it is proven and who is responsible. It serves an audit, ISO 27001 and the obligations under NIS2. We can then keep watching the state so the evidence doesn’t go out of date.

    For example: We remove former suppliers’ access, apply missing patches and check that backups actually restore.

  • Ongoing operations

    Monitoring, updates and backups you don’t have to think about.

    • A foundation in code. Before taking over operations we bring the environment into IaC and run changes through GitOps. Management becomes repeatable and no longer depends on one person’s memory.
    • Monitoring. We watch availability, performance, disk space and certificate expiry. Alerts come to us and we respond within the agreed response times.
    • Updates. Systems and their dependencies are patched on a schedule, in agreed windows. Security patches are not put off.
    • Backups. We back up and regularly test restores, so you know the backups work and how long a restore takes.
    • Incidents and reporting. Incidents are fixed, traced to their cause and followed up so they don’t repeat. You get a regular, plain-language status and cost report.

    For example: A full disk or an expiring certificate is handled when the alert comes, not after an outage.

← We start where you are.

Contact

Maybe you don’t need us.

If you have a team that handles operations, security and cover, keep it that way. If not, a few sentences are enough and we can get started quickly.

This opens your email app with the message ready to send.