Service
DevOps Consulting & Audits
An external eye on your infrastructure — before something forces it.
Sometimes you don't need someone to build something. You need someone to look at what you have and tell you honestly: what's working, what's a risk you haven't thought about, and what should you fix first. I do infrastructure audits, architecture reviews, and DevOps assessments for engineering teams that want a second opinion — before a security audit, before a scale event, after an incident, or just because the tech lead left and nobody is sure what they inherited. The output is a written report with findings ranked by risk and an actionable remediation roadmap.
Who this is for
- CTOs or VPs of Engineering who want an independent assessment of their infrastructure health
- Engineering teams after a production incident who need root-cause analysis and hardening recommendations
- Startups preparing for SOC 2 or ISO 27001 certification who want to know what's missing
- Companies that acquired a codebase or infrastructure and need to understand what they own
- Teams scaling rapidly and unsure if their infrastructure will hold
What you get
Written audit report
A structured report covering findings across security, reliability, scalability, cost, and operational maturity — each with a severity rating and remediation recommendation.
Risk matrix
Findings plotted by severity and effort-to-fix, so you can prioritise remediation work by impact.
Remediation roadmap
A phased plan for addressing findings: quick wins (this week), medium-term improvements (this quarter), and strategic changes (this year).
Architecture review session
A working session with your team to walk through findings, answer questions, and align on the remediation plan.
Optional: hands-on remediation
After the audit, I can implement the highest-priority fixes directly — switching from consulting mode to engineering mode.
How it works
Scoping call
1 hourWe agree what the audit covers: cloud infrastructure, CI/CD, Kubernetes, security posture, or all of the above. I define what access I need.
Access and documentation review
1–2 daysI review your Terraform/IaC code, CI/CD configuration, Kubernetes manifests, AWS IAM policies, and any existing architecture documentation.
Live environment assessment
1–2 daysWith read-only access, I review the live environment: running workloads, network configuration, security group rules, IAM policies, monitoring coverage.
Report writing
2–3 daysFindings documented with evidence, severity ratings, and specific remediation steps. Not a generic checklist — specific to what I found in your environment.
Report delivery and review session
1 dayI deliver the written report and hold a working session with your team to walk through findings, answer questions, and agree next steps.
Pricing
Standard infrastructure audits are fixed-price: £1,800–£4,500 depending on the scope and complexity of the estate. Incident post-mortems are typically 1–2 days of work. Architecture review sessions (without a full audit) can be booked as half-day or full-day engagements.