All products

Azure Landing Zone

A fast, opinionated, accreditation-ready Azure foundation. Hub-spoke topology, policy-as-code baseline, ISM-aligned defaults. Done in weeks, not quarters.


Options

Three fixed-price tiers.

Start with our opinionated core, take the whole accreditation-ready foundation, or scope it to your classification and estate.

Opinionated
Custom
Fixed price
$18,000
GST exclusive

Our opinionated landing zone, deployed. Maximum opinionation: our defaults, in your tenant, fast.

What's included
  • Hub-spoke network topology
  • Policy-as-code baseline
  • ISM-aligned defaults
  • Management groups and identity
  • Handover documentation
Talk to us about Core
Fixed price
$18,000
GST exclusive
Talk to us

Fixed, published price. No T&M.

Fixed price
$32,000
GST exclusive

The whole foundation, built and documented for accreditation. The anchor: everything you need to stand up workloads and pass an audit.

What's included
  • Everything in Core
  • Expanded Azure Policy set
  • Monitoring and logging wired in
  • Workload spokes
  • Accreditation-ready evidence
  • Knowledge transfer
Talk to us about Standard
Fixed price
$32,000
GST exclusive
Talk to us

Fixed, published price.

From
$55,000
GST exclusive

Scoped to your classification, DISP, or estate, with the assurance evidence to match.

What's included
  • Bespoke policy set for your classification
  • PROTECTED-aware topology
  • Assurance evidence pack
  • Integration with existing tenancy
  • Dedicated engineer
Talk to us about Assured
Scoped to your estate

Priced from $55,000 plus a fixed scoping fee. Tell us your target classification and workloads.

Talk to us
The work

What the foundation includes.

An opinionated baseline you can build on, not a blank subscription.

Hub-spoke topology

A hub-spoke network built for multi-workload agencies, with segmentation from day one.

Policy-as-code

Guardrails deployed as code, versioned and reviewable, not clicked in a portal.

ISM-aligned defaults

Defaults chosen against the ISM, so you start compliant instead of remediating later.

Management groups & identity

A management group hierarchy and identity model that scales with you.

Monitoring & logging

Diagnostic settings and log routing wired in from the start.

Accreditation evidence

Documentation and evidence shaped for an accreditation, produced as we build.


Architecture

How we build it

Three deep dives into the real problems behind the landing zone.

Accreditation-ready tenant in two weeks What actually goes into a foundation an assessor will accept, at speed. Hub-spoke topology for a multi-workload agency Segmentation and routing for several workloads sharing one tenancy. 10 specific ISM controls, implemented as Azure Policy Concrete controls, mapped to concrete policy, with the gaps named.

An accreditation-ready foundation in weeks.

Tell us your target classification and workloads and we will confirm a fixed price.