We build cloud and AI that survives your security review and stays in production.
Your account. You own everything. Start with a free review.
Most enterprise cloud and AI work fails on controls, cost and ownership — not on the technology. We engineer it, attack it ourselves, secure it, and hand it over running in your account.
Building software products since 2015.
Software companies run their marketplace revenue on software we built.
Transacted through Automatum, the platform we built and still operate.
Most AI projects die in pilot. Ours ship, because we build them, break them, secure them, and then run them.
Your pilot worked. It's been six months.
The demo impressed everyone. Then came the security review, the cost projection nobody believed, and the question of who owns it. So it sits there — not cancelled, not shipped.
This is the normal outcome. Most agents that do reach production run without full security approval, without monitoring, and without a named person accountable for what they do.
What we do differently
One process, scoped narrow, in production. Not a prototype.
We attack the agent before anyone else does. You watch.
Its own identity, least-privilege scope, guardrails, audit trail, monitoring.
You built nothing you now have to staff. We operate it.
Clients
Teams that trusted us with their AWS accounts
We didn't read about this. We shipped it.
tMinus1 built Automatum — multi-tenant SaaS, metered billing, marketplace integrations across AWS, Azure and GCP. 80+ software companies run their marketplace revenue through it. We still operate it.
Client outcomes
Real work. Measured results.
ISVs on the platform
transacted to date
built and operated by tMinus1
AWS Marketplace platform
Cloud infrastructure & operations
reduction in monthly AWS spend
reserved instance coverage
engagement to first saving
Social media SaaS
AWS cost optimisation
findings across 6 WAR pillars
critical IAM gaps closed before Series B
review to ranked fix list
Health & fitness tech
Well-Architected Review
to first production AI agent
lower inference cost vs initial architecture
critical findings in post-launch pen test
AI startup
Gen AI consulting
Assura Software
critical findings in SOC 2 Type II audit
IAM policies replaced with least-privilege
RTO after architecture remediation
Enterprise software
Cloud security engineering
environments migrated to zero-trust model
reduction in IAM over-permissioning
to SOC 2 Type II certification
Cybersecurity platform
AWS cloud security
reduction in monthly AWS spend
uptime maintained through migration
WAR findings resolved in 8 weeks
Construction SaaS
Well-Architected Review & cost optimisation
regions secured under unified IAM policy
public S3 buckets after remediation
to full encryption-at-rest coverage
Blockchain infrastructure
AWS cloud security
traffic spike handled without incident
annual infrastructure cost reduction
APAC deployment across 3 AWS regions
AI mapping platform
Cloud architecture & cost optimisation
reduction in HPC job queue wait time
annual compute cost recovered
compliant research workload migration
National science agency
Research compute & AWS Well-Architected
production incidents during migration
full cloud migration delivered on time
faster model simulation runs post-migration
Energy simulation software
AWS cloud migration & optimisation
uptime across peak marketplace load
annual cloud spend recovered
built to handle 20× load spike events
Online services marketplace
AWS cost optimisation & reliability
Induction Healthcare
aligned cloud security posture in 8 weeks
PHI data flows encrypted end-to-end
readiness evidence package delivered
Digital health platform
AWS cloud security & compliance
SettleMint
blockchain node infrastructure deployed
transaction latency across all zones
critical findings in security assessment
Blockchain infrastructure platform
AWS multi-region & cloud security
Evidently AI
from prototype to production ML pipeline
model inference throughput improvement
annual GPU compute savings via Spot
AI observability platform
Gen AI consulting & MLOps on AWS
Services
Five services, one question each. Start with whichever one is yours.
Well-Architected Review — free
One AWS workload, reviewed against the six pillars, with a fix list ranked by consequence. We pay for it. You keep the findings either way.
See the free review
AWS Cloud & Cloud Security
Identity, segmentation, encryption, logging and alerting — engineered as code in your repositories, then attacked by us before anyone else tries.
See cloud & security
Gen AI Consulting
One process, built, broken, secured and handed over running in production — with the evidence pack your security team needs.
See Gen AI consulting
AI Training
Hands-on workshops in your own codebase. Your engineers build an agent, attack it, harden it, and keep everything they wrote.
See AI training
AWS Cost Review — free
9 in 10 accounts we review identify 30% or more in recoverable spend. Read-only access. No engineering work required. We do the analysis, you make the call.
Get the free cost reviewWorking cloud infrastructure and AI systems in production. We build, harden and operate — documents come with the code as the evidence your security team needs, never instead of it. The one exception is the free review, which is a document by design.
That is the goal of every engagement. We engineer the security posture, test it adversarially with your team watching, and the handover includes an evidence pack — test results, IAM policies, audit logging, monitoring — built for your approval process.
It may. As an AWS Advanced Tier Partner we can apply for proof-of-concept funding on qualifying projects. We tell you in the first call whether your project is likely to qualify. Funding is at AWS's discretion and is never guaranteed.
You do. Everything we build runs in your AWS account and lands in your repositories. If you stop working with us, you keep the system, the runbook, and the evidence pack.
No. We do cloud security engineering, application security, adversarial testing and governance. Where you need formal certification or accredited assessment, we work alongside your assessor.
Book a technical call. Thirty minutes with an engineer — we pick the process, tell you what we'd build first, what it costs, and whether AWS funding may apply.
The plan
Three moves. You make the first one.
Book a technical call
Thirty minutes with an engineer. We clarify the work and its cost drivers. A written quote follows once the scope is clear; AWS funding may apply to qualifying projects.
An agreed scope and timeline
We agree the deliverables and schedule for your service. For production builds, we build, test and secure it with your team.
It runs. You own it.
You keep the findings, code or training materials. Production builds include monitoring, a runbook and a named owner. We operate them if you want us to.
Ready when your security team is.
Thirty minutes with an engineer, not a salesperson. We'll tell you what we'd build first and what it costs.
