Independent security and Well-Architected reviews, done by hand by one certified architect. Read-only access, a fixed price agreed upfront, and a prioritised list of what to fix first.
Daniel Stoor, AWS Certified Solutions Architect – Professional
Read-only IAM access · Fixed price, no hourly billing · Quote within 48 hours
Security · IAM
Cross-account role trusts an entire external AWS account
From a quick check of one account to a full Well-Architected review. Not sure which fits? Ask. I'll tell you honestly.
From €790
Within 5 working days · Access: Read-only
For smaller teams that want a fast, affordable answer to one question: are the basics locked down?
Recommended
From €2,500
Usually 2–4 weeks · Access: Read-only
For teams heading into an audit, a funding round, or who just want to know the doors are locked.
From €4,500
Usually 2–4 weeks · Access: Read-only
For teams that want a full health check of security, reliability, cost and operations in one go.
Guide prices excl. VAT for a typical-size environment. Your fixed price depends on the number of accounts and workloads, and is agreed before I start.
Anonymised results from real reviews. Every environment had gaps the team didn't know about, and a clear list of what to fix first.
Ready for your own review?
Every environment has gaps. Let me find yours before someone else does.
From first message to final workshop, with no surprises along the way.
You tell me what you run and what worries you. I send a fixed price quote within 48 hours.
I go through your environment with the AWS CLI and the console, verifying every finding by hand.
You get every finding documented, plus the prioritised list of what to fix first.
I present to your team and stakeholders, on-site or online, so everyone agrees on next steps.
I stay available for questions while your team works through the fixes.
I never need write access. You get a scoped IAM policy covering exactly what I need to see, not a blanket ReadOnlyAccess role. You stay in control the whole time.
A fixed price covers all four. Everything is yours to keep, and I delete my copies when we're done.
I only look at configuration and metadata, never your data, and I never deploy changes. That keeps the review independent and makes it much easier to get approved by security and compliance.
I can point you to the right people, or we can talk about a separate engagement.
Ask me about itEvery finding documented: what I saw, why it matters, and how to fix it. Including what you're already doing well.
Not a 100-page dump. A short, ranked list of what actually matters, written so your team can start on it the next day.
A clean summary for leadership, so you don't have to translate findings into business risk yourself.
Online or on-site. We go through the findings together and your team gets to ask all the questions.
I'm an independent AWS architect. No agency, no account managers, no juniors learning on your budget. When you hire me, I'm the one who does the review.
I've secured AWS environments across many industries. I use the Well-Architected Framework as a guide, not a template, and focus on what actually makes sense for your setup.
I started this because I kept seeing expensive audit reports gather dust because nobody knew how to act on them. Mine are written to be used.
A human does the thinking
I use CLI commands to gather data, but every finding is verified and written by me. No AI-generated reports.
Your data stays yours
When the job is done I delete everything. No copies, no mailing list, no sales calls six months later.
No padding
I don't inflate finding counts to look busy. You get an honest picture of what needs fixing.
A few common questions about how this works.
Tell me a little about your AWS setup. I'll reply within 48 hours with a fixed price and a suggested scope. No obligation.
Current offer: the next three Security Review or WAFR customers get two YubiKeys for their AWS root and admin accounts, included in the delivery.
If we don't end up working together, I delete your request. You won't hear from me again unless you write.