:: 01 · ARCHITECTURE & ASSESSMENT
Read the environment before the investment decision.
We assess infrastructure and design architecture for teams deciding on migration, renewal, DR or consolidation. The output is a document the board uses to decide.
WHEN WE’RE CALLED
- Hardware or licence renewal
- Merger with two estates to integrate
- An incident that exposed a single point of failure
- An audit asking for documented architecture
YOU RECEIVE
- Current-state diagnosis
- Target architecture
- Recommendations ranked by risk and cost
- Execution roadmap
DOMAINS
All, according to scope
HOW WE DELIVER
Vehicle-independent. The recommendation comes from the architect, not the vendor.
:: 02 · MIGRATION & MODERNISATION
Change the foundation without stopping what runs on it.
We move critical workloads between data centres, clouds and virtualisation platforms, including Red Hat OpenShift Virtualization Engine (OVE). The technology changes from project to project; the migration method stays the same.
WHEN WE’RE CALLED
- VMware renewal under new licensing
- Data centre or colocation contract ending
- Virtualisation near its limit
- A decision to change cloud
YOU RECEIVE
- Inventory and dependency map
- Wave plan with go/no-go and rollback criteria
- Execution in short validated cycles
- Observability in the target from day one
ENGINEERING DECISION
Brazilian govtech, Hyper-V to Red Hat OVE. Rather than add resources to an environment at its limit, we replaced the virtualisation layer and designed observability in. Database volumes from 6 to 9 Gb/s on non-sequential writes. Read the case →
DOMAINS
Virtualisation | Platform | Public cloud | Storage | Databases | Network and data centre | IBM Power
HOW WE DELIVER
Red Hat subscriptions, IBM contracts and cloud credits where the design calls for them, heimr guard as the sovereign target.
:: 03 · RESILIENCE
Recovery you tested before you needed it.
We design and run DR, high availability, backup and cyber resilience for regulated environments. Every design ends in an executed test and recorded evidence.
WHEN WE’RE CALLED
- Continuity plan never tested end to end
- Supervisor asking for evidence
- Ransomware on the board agenda
- Estate concentrated in one data centre
YOU RECEIVE
- DR and HA design
- Executed recovery test
- Evidence report
- Versioned runbooks
ENGINEERING DECISION
Payments fintech headquartered in London. We built recovery in Frankfurt before moving production. In three phases between February 2024 and May 2025, the estate moved from a single data centre in Iceland to three regions running at once. Read the case →
DOMAINS
Storage | Network and data centre | Virtualisation | IBM Power | Databases | Public cloud
HOW WE DELIVER
heimr guard (air-gapped tape in Brazil), IBM contracts, cloud credits.
:: 04 · SUPPORT, OPERATIONS & SRE
Run the environment with the engineers who know it.
We take on 24/7 NOC, observability, AIOps, FinOps, SRE and change management for critical environments. The team that designed and migrated stays on.
WHEN WE’RE CALLED
- Recurring incidents with no clear cause
- Monitoring contract ending
- Multicloud with no single view
YOU RECEIVE
- Coverage map with prioritised gaps
- Operational dashboards in production
- Change management routine
- Monthly availability and cost report
ENGINEERING DECISION
Brazilian govtech. Observability was designed into the new environment, not added after the migration. Published result: faster troubleshooting and less time exposed to risk. Read the case →
DOMAINS
Observability and AIOps | Every domain we operate
HOW WE DELIVER
The client’s observability tooling or heimr‘s.
:: 05 · ENVIRONMENT SECURITY
Protect the infrastructure where it runs.
Environment-focused penetration testing, managed SOC and hardening. Security here starts at the network, storage, identity and hypervisor.
WHEN WE’RE CALLED
- Audit asking for a pentest
- New environment after a migration
- Untriaged alerts
- Client or regulator requirement
YOU RECEIVE
- Pentest report with prioritised fixes
- 24/7 SOC with playbooks
- Documented hardening
DOMAINS
Network and data centre | Microsoft identity and environment | Virtualisation | Storage | Cryptography
HOW WE DELIVER
SOC platform built on Google SecOps.
:: 06 · QUANTUM
Infrastructure cryptography, ready for the post-quantum timeline.
We start with a cryptographic inventory: where cryptography is used, which algorithm, what data it protects and for how long. Then we design and carry out the move to post-quantum algorithms without stopping operations.
NIST published the first post-quantum standards in 2024: ML-KEM (FIPS 203) for key exchange and ML-DSA (FIPS 204) for signatures.
WHEN WE’RE CALLED
- NCSC timeline on the risk register
- Data that must stay confidential for years
- Client or auditor asking for a migration plan
YOU RECEIVE
- Cryptographic inventory
- Priorities by exposure and data lifetime
- Phased migration roadmap
- Execution by the same team