Discovery sprint
- Duration
- 1–2 weeks
- Team
- 2 architects
Fixed scope · request quote
“What do you actually need?”
Outcome: Gap analysis, options compared, roadmap with effort estimates.
Services
Identity & Access Services for the enterprise
Identity Governance & Administration (IGA) as our primary practice, plus Security Audit, DevOps and AI Engineering. Deep engineering practice in four directions, delivered by the same team that runs its own midPoint. We do not pretend to be a universal IT provider.
Talk to an architect Services
Identity governance is our practice
We are not a universal IT provider. Identity work is the spine; security audit, DevOps and AI engineering are practices we use to deliver it.
Adjacent practices
Capabilities we use to deliver identity work — also available as standalone engagements.
Security Audit & Pentest
Pass ISO 27001 / NIS2 / DORA / GDPR with executable evidence, not a slide deck.
ISO 27001 · NIS2 · DORA
Learn more →DevOps Engineering
Run identity workloads on AWS / Azure / GCP with one infrastructure team.
AWS · Azure · GCP
Learn more →AI Engineering
Augment IDM operations with LLM-assisted access reviews and anomaly detection.
Claude · GPT · RAG
Learn more → How we engage
Three shapes of engagement
Most programmes step through these three shapes — fixed-scope discovery first; implementation as a structured programme; long-term run with SLAs. We can join at any stage.
Implementation programme
- Duration
- 2–6 months
- Team
- 4–6 engineers
Fixed-bid or T&M · request quote
“Build the platform.”
Outcome: Working deployment, documentation, knowledge transfer to your team.
Run & advisory
- Duration
- 12+ months
- Team
- 2–3 SMEs
Monthly subscription · SLA-backed
“Keep it running.”
Outcome: SLA-backed support, ongoing evolution, post-incident reviews.
Platforms
Vendor-specific details
Looking for a specific platform?
Platform pages
Fixed-fee starter
IDM Modernization Concept → — 4–6 week discovery package. Architecture, business case, roadmap. Predictable starting point.
Not sure which?
Vendor-neutral platform selection — based on your residency, integration and operational constraints, not a partner programme.
Compare platforms →FAQ
Frequently asked questions
Do you require us to adopt a specific IGA vendor?
No. We are vendor-neutral — we run SailPoint, midPoint and Oracle on equal terms and recommend by fit, not by partnership tier. Several engagements start by making the platform you already own work as designed.
How long does an IGA implementation take?
We start with a fixed-budget IDM Modernization Concept — a 4–6 week technical assessment and roadmap. Implementation length depends on connector count and source-system quality, which we scope from the assessment rather than a sales estimate.
How do you handle non-human identities and AI agents?
As first-class identities. Service accounts, API keys, workload and AI-agent credentials outnumber humans and sit outside the joiner-mover-leaver model — we cover their discovery, ownership and lifecycle inside the governance scope, not as an afterthought.
What is the difference between an assessment and a full implementation?
An assessment maps your identity sources, entitlements and gaps and produces a prioritized roadmap with a fixed budget. Implementation executes it — connectors, role model, certification, automation. The assessment is useful on its own and de-risks the build.
Do you only do identity, or full IT?
Identity is our practice — IGA/IAM, plus Security Audit, DevOps and AI Engineering around it. We do not position as a universal IT provider; depth in identity is the point.