Skip to main content

Azure Architecture Review

Your Azure estate, scored against the Well-Architected Framework in two weeks.

A fixed-fee assessment of your landing zone, security, cost, and reliability. You get a scored current-state report and a prioritised remediation backlog your team can act on.

Fixed fee
€7,500
Duration
2 weeks
Format
Remote-first

At a glance

Fixed fee
€7,500
Duration
2 weeks
Format
Remote-first
Fee credit
Creditable in full within 8 weeks
Markets served
DACH and Benelux

Who it's for

  • You run production workloads on Azure and you are not sure where the architectural risk sits.
  • An audit, a migration, or a cost spike is forcing the question, and you need an independent read.
  • You have a landing zone that was set up once and has drifted since.
  • Your board or your auditors are asking pointed questions about cloud risk and cost, and the answer currently lives in one person’s head, not in a document.
  • You have worked with a large systems integrator before and got a slide deck and a junior team on-site. You want senior architects and a document your own team can act on.

Scope and format

Two weeks, remote-first, with one optional on-site working session. We assess against the five pillars of the Microsoft Well-Architected Framework: reliability, security, cost optimisation, operational excellence, and performance efficiency. Senior architects do the work. You give us read-only access to the subscriptions in scope and one technical point of contact. The assessment draws on Azure Resource Graph and Azure Advisor for the technical inventory and Microsoft Defender for Cloud’s secure score as one input, each finding then checked by hand against the framework. No finding ships from a scanner report alone.

What you get

Scored current-state assessment

Your estate rated against the five Well-Architected pillars, with a CIS benchmark score across subscriptions.

Prioritised remediation backlog

Every finding ranked by risk and effort, written so your team can pick it up without us.

Target architecture

A reference landing-zone and network design for where the estate should go. We design it hub-spoke with infrastructure as code from the start, the same pattern that has taken landing zones elsewhere in our practice to 85% Terraform coverage and a 94% CIS score.

Cost-optimisation estimate

The rightsizing, reserved-capacity, and licensing moves available, with the euro figure attached.

Compliance cross-reference

Each finding mapped to the control it answers: a CIS benchmark ID, a GDPR Article 44 transfer requirement, or a NIS2 obligation. The backlog doubles as evidence for your next audit.

Identity blast-radius note

A short assessment of what a single compromised credential or device can reach in the current network and identity design. This is the finding that most often reorders the remediation priority list.

Readout session

A working session with your architects and stakeholders to walk the findings and agree next steps.

Pricing

A fixed fee of €7,500. No day-rate surprises: the scope above is the scope.

The full fee is creditable against a follow-on engagement booked within eight weeks of the readout.

Where your data sits

We work in your tenant with read-only access scoped to the review and revoked on completion. No data leaves your environment. Where data residency matters, the review covers your landing zone configuration in the Germany West Central Azure region, and we sign your data processing agreement before we start.

Governance & compliance

  • Read-only access, scoped to the review and revoked on completion.
  • GDPR Article 44 data-transfer restrictions assessed as part of the security pillar.
  • A signed data processing agreement before kickoff.
  • Findings documented to the standard your auditor cites.
Read our governance approach

Common questions

How long does it take?

Two weeks, from access granted to the readout session.

Do you need production access?

Read-only access to the subscriptions in scope. We never need write access for the review.

What if we want you to do the remediation?

The fee is creditable in full against the follow-on engagement if you book within eight weeks. You are not obliged to.

Remote or on-site?

Remote-first. One on-site working session is included for DACH and Benelux clients if you want it.

Who runs the review?

Igor Pavicevic leads it, backed by AZ-305 and AZ-500 certification and Microsoft Global Strategic Accounts standing.

What if we book the follow-on after eight weeks?

The scored assessment and backlog stay valid indefinitely. The fee credit itself only applies inside the eight-week window from the readout session.

What happens if the review turns up something outside the two-week scope?

We flag it as a separate line in the backlog, scoped and priced on its own. The fixed fee for the review itself does not move.

What tools do you use during the review?

Azure Resource Graph and Azure Advisor for the inventory, Microsoft Defender for Cloud’s secure score as one input. A senior architect checks every finding against the Well-Architected Framework by hand, not from a scanner report.

Does the review cover AI workloads running on Azure?

If Azure AI Foundry or Azure OpenAI resources sit inside the subscriptions you put in scope, we assess them against the same five pillars. A full EU AI Act risk classification is a separate engagement (see the EU AI Act Readiness assessment).

What is out of scope for the two weeks?

Anything outside the subscriptions you nominate, and any recommendation that would need write access to verify. Both get flagged as follow-on work rather than squeezed into the fixed fee.

What do you find most often?

Drift between the landing zone as designed and the landing zone as it now runs: policy assignments relaxed for a one-off deployment and never restored, and subscriptions provisioned outside the original governance boundary.

Can the review cover more than one business unit?

Yes, if the total estate still fits the two-week window. Beyond a handful of subscriptions we run a short scoping call first, so the fixed fee still holds.

Request the review