cloud / ai / web / certification readiness

Secure the cloud.Govern the AI.Pass the scrutiny.

Secure cloud, AI and web engineering from a practitioner who has done it at bank scale. TrusTrak helps organisations move to the cloud securely, adopt agentic AI properly and run web platforms that stand up to the people who audit them.

Book a free readiness call→See the four service lines
30 minutes / no deck / a working engineer on the call / we tell you if you need us yet /
Landing zoneaws / 3 accounts
live
  • MFA enforced on every accountpass
  • CloudTrail and Config on, logs immutablepass
  • Encryption at rest and in transitpass
  • Backups verified, rollback rehearsedpass
  • Public bucket found in legacy accountfixing
monthly spend after right-sizing
well-architected baselineiso 27001 / soc 2 / ce ready
cloud architecture and migrationbuilt compliance ready
why now

Four pressures. One deadline.

They are landing on organisations at the same time, and most teams are trying to handle them with the same people who keep the lights on. TrusTrak sits where the four overlap.

01 / a hard deadline

Server 2016 is going end of life

SQL Server 2016 has already left extended support, and Windows Server 2016 follows on 12 January 2027. Because SQL 2016 will not run on Server 2022 or 2025, the database and the operating system have to move together.

windows server 2016unsupported soon
02 / compliance

Compliance is pulling cloud into scope

ISO 27001 and SOC 2 are now the price of enterprise and US contracts. DORA reaches ICT suppliers to EU-regulated firms. In the UK, Cyber Essentials mandates MFA on cloud services and gates NHS and government work.

iso 27001soc 2dorace+
03 / ai

AI adoption is outrunning skills

More than half of UK firms now use AI in some form. The thing holding them back is not the technology. It is knowing how to roll it out without handing an agent the keys to production.

04 / web

The web market has split in two

AI builders have made brochure sites nearly free. Engineering-led web work, with performance, security, integrations and someone accountable for hosting, has held its value. We only do the second kind.

brochure site / anyoneplatform / us
live countdown

Windows Server 2016 leaves extended support in

After that there are no security patches unless you pay for Extended Security Updates. If any part of your estate still runs on Server 2016 or SQL Server 2016, a scoped assessment now is cheaper than an emergency later.

66days
00hours
00minutes
00seconds

market figures from the uk cyber security breaches survey, ons and beaming / used as context, not as audited data

what we do

Four service lines. One accountable engineer.

We build the software and we do the hands-on work, so the advice is practical, current and grounded in real systems. Every engagement is scoped on a call before we put a number on it.

Not sure which one you need? Ask us→
01 / cloud architecture and migrationaws first / azure where you are microsoft-led

Move to the cloud without moving the risk with it.

From a first readiness assessment to a landing zone your auditors will like, to the migration itself and the retainer that keeps costs and posture in check afterwards.

  • Cloud readiness and migration assessmentfixed scope / credited against a migration
  • Landing zone and Well-Architected baselinebuilt iso 27001, soc 2 and ce ready
  • Migration of 5 to 30 workloadslarger estates scoped per engagement
  • Managed cloud and FinOps retainermonthly cost and security posture review
  • Senior architect daysfor the decisions you cannot get wrong
before 12 january 2027

Still running Windows Server 2016 or SQL Server 2016? This is the line to start with. Assessment first, landing zone second, workloads third, with the rollback gate in front of every move.

Start with an assessment→
02 / ai adoption, governance and agentic codingthree tiers

Agentic AI, with the guardrails already on.

Built on the founder's open-source Divinity-Agent Security framework, so your agents ship code without ever touching what they should not.

  • Agentic Readiness Auditwhere you stand, what to fix first
  • Agentic Coding Sprinta focused two-week engagement
  • Embedded Rollouta 90-day programme inside your team
Book the audit→
03 / web platform engineering

Platforms, not brochure sites.

Next.js and headless CMS builds on AWS or Vercel with security headers, CI/CD, infrastructure as code, compliance-ready hosting and an SLA.

  • Web platform build
  • Performance and security audit
  • Hosting, security and care retainer
Audit my platform→
04 / security certification readiness

Ready for the audit, hands on.

Practitioner-led readiness. We prepare you, close the gaps and build the evidence. The certificate is always issued by an accredited independent body.

  • Cyber Essentials Plus readinessuk
  • ISO 27001 and SOC 2 readiness
  • vCISO retainer
Check my readiness→
bundle / secure foundations

Cloud readiness, landing zone and certification readiness as one programme.

For organisations that need to be in the cloud and able to prove it is secure, in the same quarter. Cyber Essentials Plus in the UK, an ISO 27001 gap assessment elsewhere.

product / riskguard
RG

RiskGuard

Affordable first-time certification for Cyber Essentials, CE Plus, ISO 27001 and SOC 2. Early stage, with founding customers who get founder-led onboarding.

riskguardhq.com↗

no public rate card yet / every engagement is scoped first, then quoted in gbp, usd, eur or your local currency

how an engagement runs
  1. 01

    Tell you plainly.

    A free 30-minute readiness call. We tell you what you need, roughly what it costs, and whether you need us yet. Sometimes the answer is not yet.

  2. 02

    Assess before we build.

    A fixed-scope assessment or architecture review. Low risk, quick to buy, and credited against the programme if you go ahead.

  3. 03

    Build to pass scrutiny.

    Landing zones and platforms built against the standards you sell on, with backups verified and rollback rehearsed before anything moves.

  4. 04

    Run it and keep it tight.

    A monthly cost and posture review, so what we built stays secure, affordable and ready for the next audit.

an illustration of a typical migration / every engagement is scoped to your estate

the pressure, in numbers

Most estates are not ready.

43%of uk businesses reported a breach or attack last year
41%of firms with 50 to 249 staff still run mainly on-premise
54%of uk firms now use ai, with skills the top barrier
5%of businesses adhere to cyber essentials

cyber security breaches survey 2025/26 / beaming / ons / uk figures, used as market context

who we serve

Any size. Same standard.

Organisations in the UK and internationally that need to move to the cloud, adopt AI properly or run a secure web platform. Every engagement is sold direct and led by the founder, delivered remotely by default and on site where the work needs it.

smes / charities / startups

Fixed fees, no surprises.

You get a senior architect without a senior architect's payroll, and a number you can take to the board.

entry point
Free 30-minute readiness call, then a fixed-fee assessment
model
Fixed-fee packages and monthly retainers
right now
Windows Server 2016 and SQL Server 2016 moves before January 2027
SMEsScale-upsCharitiesNot-for-profitsChurches
mid-market / enterprise

A low-risk first purchase.

Procurement does not need a leap of faith. Start with a scoped architecture review and decide on the programme from the evidence.

entry point
Scoped assessment or architecture review, then a programme
model
Day rate or fixed-price phases
experience
Cloud migration inside a regulated bank, across UK and West African financial services
BanksInsurersFintech and SaaSHousing associationsUniversities
how we work

Honest by design.

We prepare. We never certify.

Readiness is done by a practitioner. The certificate is always issued by an accredited independent body, so the result stands up.

Scoped before quoted.

No number until we have seen the estate. Every engagement is scoped on a call first, then priced in GBP, USD, EUR or your currency.

Rollback before cutover.

Client-verified backups and a rehearsed rollback are a gate before any migration. Data loss is the risk we design against first.

Founder-led, every time.

The person on the readiness call is the person doing the work. Remote by default, on site where it matters, UK and international.

tt / marktrustrak solutions ltd
BSc in Information Technology
Senior AWS Solutions Architect, First Atlantic Bank
MBA, Management Information Systems
Postgraduate Cybersecurity, University of London
Cloud Solutions Architect, Mas Africa UK, and IT Products and Applications Manager, The Methodist Church
TrusTrak Solutions, taking new clients
the founder

Done at bank scale, delivered to you.

Over seven years across cloud architecture, cybersecurity, enterprise application development and governance, risk and compliance. The deepest of it is cloud migration inside a regulated bank.

That work spanned UK and West African financial services, so delivering across borders, regulators and time zones is familiar ground. Alongside it, running IT products and applications for a national church taught me what secure, affordable technology looks like when the budget is a charity's.

TrusTrak exists because most organisations do not need a big consultancy. They need one accountable engineer who has done the hard version of the job, tells them the truth about what they need, and then does the work.

AWS CertifiedCompTIA Security+ISC2 CCPG Cybersecurity, UoLMBA, MISBSc IT
Lee Westfounder, TrusTrak Solutions Limited
book a call

Thirty minutes. Plain answers.

A free readiness call with the engineer who would do the work. No deck, no pitch. We tell you what you need, roughly what it costs, and whether you need us yet.

  • A straight view of where your estate stands
  • The order to do things in, and what can wait
  • What a fixed-scope first step would look like
  • If we are not the right fit, we will say so and point you somewhere
“The deadline is real, the fix is not complicated. It just needs doing properly.”on Windows Server 2016 and SQL Server 2016 moves
what is on your mind? pick any
free / 30 minutes / no obligation

we use your details only to arrange the call. nothing is shared and there is no mailing list.