Cloud security assessment
Know which risks matter.
A customer asks how secure your platform is. You need evidence, not a checklist.
You leave with
See the scope An evidence-backed risk register, prioritized fixes and a leadership readout.
Cloud & software engineering
Ship with confidence.
Keep control.
Build the next thing. Fix what’s holding you back. Senior engineers, cloud expertise and software that runs on your terms.
Your cloud. Your code. Your team, stronger.
Built for the stack
you already run.
- AWS
- Google Cloud
- Azure
- Kubernetes
- Terraform
Good engineering.
Where you need it.
A critical release. A platform under pressure. A security review on the calendar. Start with the problem; we’ll agree the right way forward.
Work alongside us
More capability.
Same team.
Senior platform, backend and security engineers in your repositories, your planning and your reviews. Accountable to your engineering lead.
Explore embedded engineers Get a clear next step
Clarity before
your next move.
Security and architecture reviews with evidence, priorities and a plan your team can act on.
Explore cloud advisoryBuild on our software
Your infrastructure.
A head start.
Wallets, API controls, video calls and Kubernetes tools. Built by us. Run where you choose.
Meet the productsFind your next step
A clearer view.
A stronger platform.
Defined questions. A fixed scope and fee. Findings your engineers can use.
Read a sample findingCloud architecture review
Make room for growth.
Your platform is growing. Reliability, cost or complexity is getting in the way.
You leave with
See the scope An architecture gap analysis, recovery review and sequenced improvement plan.
Security remediation
Get the findings closed.
You know what needs fixing. Your engineers are already committed to the roadmap.
You leave with
See the scope Reviewed code and configuration changes, validation evidence and a handover.
Looking for something more specific?
A scope and fee before we start.
Fixed-scope reviews · Monthly engineering engagements · Commercial product licences
Our software.
Your environment.
From an auditable wallet ledger to a Kubernetes workbench. Choose a product and explore how it fits your stack.
WalletDWallet infrastructure
Wallet infrastructure for business, on a ledger you can audit.
Explore WalletD
TollgateAPI gateway plugin
API keys, quotas and cluster-wide rate limits for KrakenD Community Edition.
Explore Tollgate
TeleAudio and video calls
Real-time audio and video calls, running where you choose.
Explore Tele
BerthKubernetes dashboard
A self-hosted Kubernetes dashboard with a read-only AI SRE.
Explore Berth
nomusReal-time music filter
Keep the voice, lose the music, on your own device.
Explore nomus
The way we work
Leave with more
than a deliverable.
Work that moves you forward. Knowledge that stays with your team. Ownership that stays with you.
Agree the outcome.
We define the systems, deliverables, fee and timeline before the work starts.
Work in your world.
Your accounts, repositories and change process. Scoped read-only access first; production changes agreed explicitly.
Keep what we build.
Reviewed changes, decisions and runbooks in your repositories. A handover your team can use.
A few things
worth knowing.
Have a different question?
[email protected]
How do embedded engineers work with our team?
We agree the role first: outcomes, systems, access and the hours that overlap with your team. The engineer then works in your repositories, chat and planning under your engineering lead. Progress is reviewed monthly, and the work is documented and handed over when the engagement ends.
Can we run your products on our own infrastructure?
Yes. WalletD, Tollgate, Tele and Berth deploy in your own cloud, cluster or private network, and nomus runs on the user's device. Deployment, integrations and data residency are agreed with you before launch.
What does a cloud security assessment cover?
We agree a scope across identity and access, network exposure, data protection, logging, cloud configuration, and delivery controls. Findings include evidence, impact, remediation guidance, and review limitations.
What access do you need?
We start with documentation and scoped read-only access where practical. Privileged access, production changes, evidence handling, and retention are agreed explicitly before work begins.
Will you help us fix the findings?
Yes. Remediation can be a separate engagement or part of the agreed scope. We work in your accounts and repositories, document changes, and validate the controls after implementation.
Is this a penetration test or compliance certification?
A configuration and architecture assessment does not itself provide a penetration test or certification. Any testing or compliance evidence support is defined separately; formal certification requires the appropriate independent assessor.
Which clouds and organizations do you work with?
We support organizations using AWS, Google Cloud, Azure, Kubernetes, and infrastructure as code. Engagements are shaped around your systems, risk priorities, internal team, and operational constraints.
How are fees and timelines set?
We scope the work before quoting. Account count, workload complexity, access arrangements, and required deliverables determine the fee and timeline. A discovery conversation establishes these details without promising a complete free audit.
Let’s make the next step clear
What’s next
for your platform?
Tell us what you’re building, what’s getting in the way and when it matters. We’ll reply within one business day with a proposed first step.
[email protected]