Assessments

Architecture Assessment

The full evidence-backed AWS Well-Architected Review: all six pillars verified against your actual environment — CloudTrail, Config, and the Cost and Usage Report, not a questionnaire. This is our flagship engagement, listed here under the name assessment buyers search for.

From $8,500 fixed Four weeks Read-only access
Book a Scoping Call ← All Assessments
What we examine

All six pillars, verified — not interviewed

  • Operational Excellence — deployment paths, runbooks, and whether operations survive the person who built them
  • Security — IAM reality from the credential report, network exposure from Config, audit-trail integrity from CloudTrail
  • Reliability — backup and restore evidence, single points of failure, recovery assumptions actually tested
  • Performance Efficiency — right-sizing, saturation, and the hot paths your metrics already know about
  • Cost Optimization — the Cost and Usage Report read line by line, waste identified with dollar figures
  • Sustainability — utilization, region and instance-family efficiency, and the practices AWS scores in the sixth pillar

The mechanics

One 60-minute kickoff, a read-only IAM role you create from our snippet (external ID, expiry date, one-action revocation), one or two architecture interviews, and the findings walkthrough — under four hours of your team’s calendar, total.

From $8,500 fixed — confirmed in the 30-minute scoping call based on account count and workloads in scope. The first three review clients get a founding rate of $6,500 in exchange for a reference call, one publishable metric, and a named quote.

What you walk away with

Deliverables, not impressions

Scored findings register Every finding scored impact × likelihood across all six pillars, with the evidence source named — ships as CSV with resource IDs plus the written report.
Target architectures For each high-risk structural finding: the state to move toward, drawn — not “improve resilience” in prose.
Remediation roadmap Now / Next / Later, sequenced with dependencies stated, effort-rated so remediation ranks by risk closed per engineer-week.
Questionnaire mapping Findings mapped to SOC 2 control areas and the questions enterprise security reviewers actually ask.
Executive summary One page for the budget owner: where risk concentrates, what it costs, what this quarter should close.
90-day recheck A scheduled re-score against the same register: what closed, what moved, what appeared.
How it runs

Four weeks, start to walkthrough

  1. 1
    Week 1 — access and evidence

    Read-only role live, evidence collection starts (CloudTrail, Config, CUR, Trusted Advisor), kickoff interview.

  2. 2
    Weeks 2–3 — verification

    Every pillar worked against the evidence; architecture interviews fill in the why behind what the account shows.

  3. 3
    Week 4 — report and walkthrough

    Scored register, roadmap, and target architectures delivered; 60-minute walkthrough; access revoked.

Fit

Book this one when

  • An enterprise customer or auditor is asking whether your AWS environment is sound — and self-attestation will not satisfy them
  • Diligence is coming and someone will ask “are we OK on AWS” — the answer should not come from the team being evaluated
  • You have run the free AWS Well-Architected Tool and the same high-risk items are still open two quarters later

This is the same engagement as our Well-Architected Review — full scope, pricing, and the complete sample report (PDF) are published there.

FAQ

Frequently asked questions

How is this different from the Well-Architected Review on your homepage?

It is the same engagement. Buyers search for “architecture assessment” and “Well-Architected review” interchangeably, so we list it under both names rather than make you guess. Same scope, same price, same sample report.

How is this different from the Security Posture Review?

Breadth. This assessment verifies all six pillars — operations, security, reliability, performance, cost, and sustainability. The Security Posture Review takes the security pillar alone and goes deeper on it for less money. If a security questionnaire is the trigger and budget is tight, start there; if leadership wants the whole picture, start here.

What access do you need?

Read-only, throughout. You create the IAM role from a snippet we provide, with an external ID and an expiry date. No agents, no write access, revocation is one action on your side.

AWS partners offer free Well-Architected reviews. Why pay?

Take the free one — seriously. AWS funds partner-led reviews (often with remediation credits attached), and they are a guided walk through the free Well-Architected Tool: your team answers the questions, the partner records the answers, and a sales motion follows. What they are not is verification. Nobody pulls your CloudTrail logs, reads your credential report, or checks the Config data. This assessment exists for when the answers have to be true — an auditor, a customer, a diligence process — and we say plainly: we do not offer the AWS credits, because we are not selling the funded version.

What does it cost?

From $8,500, fixed — confirmed in the scoping call based on account count and workloads in scope. The first three review clients get the $6,500 founding rate in exchange for a reference call, one publishable metric, and a named quote.

Four weeks to a verified answer

Thirty minutes to scope it, a written fixed price within 24 hours, and a start date you can plan around.

Book the Scoping Call

Prefer email? Send the details instead →