Question 1

How much does this actually cost?

Accepted Answer

Two parts to it. The initial build is scoped after the assessment, the architecture, automation, documentation, and handover work, priced fixed-fee or through one of our [INIT retainers](/collaboration) (1, 2, 3, or 5).

The ongoing piece is [safeZONE](/safezone), our managed AWS foundation: multi-account governance, security baseline, monitoring, and cost dashboards, delivered as a productized service at 1.5% of your monthly AWS usage. We tell you the number before we send the proposal, not after.

Question 2

We already have an AWS account. Do you replace what we built, or work with it?

Accepted Answer

We adopt what you have. We wrap your existing accounts in AWS Organizations, bring them up to baseline through OpenTofu (Terraform), and leave your application code alone. You keep your access. We don't change anything in production without your sign-off.

If you want the foundation kept current after the build, we run it for you under [safeZONE](/safezone). The build itself works the same either way.

Question 3

How fast does this start delivering?

Accepted Answer

The foundation lands in weeks, not months. Account structure, security baseline, and cost monitoring are live in the first sprint. The build that follows depends on your scope, the assessment turns that into a dated plan.

Question 4

Our team is small. Do you take over our AWS, or work alongside us?

Accepted Answer

Alongside. Your DevOps lead keeps their access and their seat at the table. We handle the deep AWS work (the parts that need someone who has done this 60 times), and your team owns the day-to-day. The handover at the end of the build is the explicit goal, not a footnote.

Question 5

What does the ongoing managed service actually cover day-to-day?

Accepted Answer

[safeZONE](/safezone) handles the AWS layer: account governance, security findings (GuardDuty, Security Hub), cost anomaly alerts, drift detection, and the OpenTofu foundation. We see AWS-side issues before you do, and we work them.

What's not covered: your application code, your databases, your product team's incidents. Those live in a separate engagement, a fixed-fee project or one of our [INIT retainers](/collaboration). If you want one team handling both layers, we can scope that. If you want us strictly on the AWS layer while your team owns the app, that works too.

Question 6

What happens after I take the assessment?

Accepted Answer

You get a written technical recommendation, scoped to where your AWS account is now and what you're trying to do. No pitch deck, no 60-minute discovery call as a prerequisite.

If the recommendation makes sense, we walk you through it on a short call and propose specific next steps. If it doesn't, the report is yours to keep, no hard sell. The assessment is short on purpose.

Scale on AWS without runaway costs or infrastructure risk

Your app is growing and your infrastructure needs to keep up

Your AWS Partner for fast, predictable growth

What we build

What you get access to

The managed AWS foundation we run for growing teams on AWS.

In the words of the people we work with

Frequently asked questions

Want to see if we'd be the right team for what you're building?