What you get

  • A line-by-line breakdown of where your money goes
  • A savings plan: rightsizing, reserved capacity, storage and egress
  • An AWS + Hetzner hybrid option, costed with current prices
  • A migration plan with effort and risk for each step

What we cover

  • Idle and oversized instances and databases
  • Reserved Instances and Savings Plans coverage
  • Storage tiers, snapshots and old backups
  • Data transfer and egress costs
  • Workloads that are cheaper on Hetzner

Best for

Teams whose AWS bill has grown faster than their revenue.

Founder & Technical Lead

Adnan Zahid

AWS-certified cloud and security engineer with 5+ years running production infrastructure for fintech, SaaS and enterprise platforms.

  • AWS Certified Solutions ArchitectAmazon Web Services
  • AWS Certified SecurityAmazon Web Services
  • Saviynt IGA & PAMSaviynt (training completed)

Questions

What is included in the free engineering assessment?

A discovery call and a high-level review of your infrastructure, security posture and DevOps workflow. You get the main risks we can see, likely cost and reliability issues, and recommended next steps. It is not a penetration test, a full security audit or a compliance certification.

What is the difference between a project and a dedicated engineer?

A project has a defined scope, timeline and quote, and ends with a handover. A dedicated engineer is ongoing monthly capacity: an engineer who works as an extension of your team on whatever your roadmap needs.

How does a monthly engagement work?

We agree the scope, working capacity, communication channels and reporting during onboarding. Work is planned with your team, progress is reported weekly, and everything is documented. Engagement scope and availability are agreed during onboarding.

Who will work on our infrastructure?

CodeVanta matches engineers to your requirements across cloud, DevOps, security and infrastructure. Our technical lead oversees every engagement, and you know who is working on your systems before anything starts.

What access do you need to our cloud accounts?

For assessments, read-only access through an IAM role you create and can delete at any time. We never ask for root credentials. Write access is only used for work you approve.

Will you sign an NDA?

Yes. We are happy to sign your NDA before we look at anything, or we can provide ours.

How do you handle credentials and data?

Access is through short-lived roles, never shared passwords. We do not copy your data off your systems, and access is removed when an engagement ends.

Which time zones do you work with?

CodeVanta is based in Pakistan (UTC+5) and works with teams in the US, UK and Europe, with overlap for calls in your working day.

Other fixed-scope projects

SOC 2 Failing-Controls Fix Sprint

from $2,500 · 2 weeks

Your compliance dashboard is red. We turn it green, so your engineers can keep shipping.

  • Failing AWS and infrastructure tests fixed and re-verified
  • Evidence documented the way auditors expect it
  • Fixes in Terraform, so they stay fixed
  • A short runbook so your team can keep the controls passing

Free, no obligation

Not sure this is the right project?

Start with a free engineering assessment. We'll review your environment and recommend the right next step.