Infrastructure takeover · Audit · Stabilization

Inherited infrastructure nobody fully understands? We take it over.

When your ops person leaves, your provider changes, or you acquire a company, we map what's really running, prove what works, fix what doesn't, and leave you with documentation that stays true.

takeover readiness · week 268%
  • Access & credentialsVERIFIED
  • Backups & restoreVERIFIED
  • Network & firewallOBSERVED
  • Monitoring & alertingCLAIMED
  • Legacy VM ownershipUNKNOWN

Illustrative view from our InfraOps platform.

When companies call us

A takeover usually starts with one of these

Your ops person left

The knowledge left with them, and the next incident is a matter of time.

You're changing providers

The old one isn't keen to help, and you need a clean handover anyway.

You acquired a company

Its infrastructure is now your risk. You need to know what you bought.

An audit is coming

Security review, ISO 27001 or NIS2, and your documentation won't survive it.

Process

How a takeover works, week by week

We change nothing in your environment until we understand it. Every phase ends with something you can keep, even if you stop working with us.

  1. DAY 0

    NDA and read-only access

    You create the accounts and can revoke them at any time.

    You keep: an access list of who can reach what
  2. WEEK 1–2

    Discovery

    Servers, clusters, DNS, certificates, pipelines, backups, costs. Every finding gets an evidence status.

    You keep: a full inventory and architecture diagram
  3. END OF WEEK 2

    Report and fixed proposal

    Risks ranked by impact, a 30/60/90-day plan, and a fixed price for the next phase.

    You keep: the report, whatever you decide next
  4. WEEK 3–6

    Stabilization

    Credentials rotated, backups restore-tested, monitoring that reaches a human, runbooks for every recurring task.

    You keep: runbooks and a platform that survives a reboot
  5. ONGOING

    We run it, or we hand it over

    Monthly platform operations, or a clean handover to your own team or new provider.

    You keep: documentation that stays up to date
Evidence

Every fact in our report says how we know it

Most audits mix what the auditor tested with what someone told them. Ours don't. We built our own platform, InfraOps, to track this for every finding, and its AI assistant always tells you how it knows what it's telling you.

VERIFIED
We proved it ourselves

A restore test, an API call, a signed collector. You can rely on it.

OBSERVED
We saw it, but didn't test it

Backup files exist. Whether they restore is another question.

CLAIMED
Someone told us

The old wiki, the previous provider, a colleague. Unverified until proven.

UNKNOWN
Nobody knows yet

Listed openly, with an owner and a decision date. Never hidden.

VERverifiedOBSobservedCLMclaimedUNKunknown Illustrative hybrid platform with an AI layer, 84 technologies. Incidents follow ITIL: incident, problem, change. example data

What people worry about before a takeover

Will you break anything?

Not during discovery: it's read-only. After that, every change is planned, reviewed and reversible, and nothing happens in production without your go-ahead.

What if the previous provider won't cooperate?

It happens more often than you'd think. We document what is running on the servers ourselves, so their help is useful but not required.

How long does a takeover take?

Two weeks to understand it, three to six more to stabilize it. Larger estates take longer, and you'll know the timeline after the audit.

Do we have to give you root access?

Not for the audit. Later, only the access each task needs, through individual accounts you control and can revoke.

Can this help with ISO 27001 or NIS2?

The inventory, access records, tested backups and runbooks are exactly the evidence those audits ask for. We don't certify anyone ourselves, but your auditor will find most of what they need already in place.

What happens to the knowledge if we stop working together?

It stays with you. Documentation, diagrams and runbooks live in your repos and your accounts from day one.

Tell us what you inherited.

20 minutes, no slides, no obligation. You'll leave the call knowing your top three risks.

We reply within one business day. Your details are used only to reply to you. See our privacy policy.