SRE as a service: your platform, managed and secure
Kubernetes, databases and services kept up to date, security patches, vulnerabilities under control, monitoring, tested backups and a report every month. Always in your cloud account or on your servers.
Usual tools
- ClickHouse
- Coolify
- Dokploy
- Elasticsearch
- Graylog
- Kafka
- Kubernetes
- Hetzner
In short
SRE as a service means contracting out the operation and security of your platform for a monthly fee, instead of a permanent hire. We take care of updates to Kubernetes, databases and services, security patches, vulnerabilities, monitoring, backups with a test restore every month, and a monthly report.
- Languages
- Spanish, Catalan or English
- Response
- The next business day, during business hours
- Method
- In your account and your repository, in code and documented
What is included
- Updates to Kubernetes, databases such as PostgreSQL, MySQL, MongoDB or Redis, and services such as Kafka or GitLab, always on supported versions.
- Security patches for the operating system, the cluster nodes and the base images, in an agreed window.
- Vulnerability management: scanning of images, dependencies and systems, prioritised by real risk, with a verified patch.
- Monitoring and alerting: we review the alerts, tune the thresholds and remove the noise.
- Off-server backups and a test restore every month, with the recovery time recorded.
- Review of access (users, SSH keys and permissions) and of versions that are about to stop receiving patches.
- Inventory of servers, services and versions, with the documentation kept up to date in your repository.
- Monthly report: availability, incidents, changes, vulnerabilities and risks.
Who is it for?
For software companies with a platform in production and nobody dedicated to keeping it running. It usually fits these cases:
SaaS startups
With paying customers, where the development team plays sysadmin when it can.
Software agencies
They maintain platforms for several clients, such as WordPress shops or Odoo installations, often with one server per client and no common approach. If you need it, we work as a white-label provider.
Companies with a technical team
They have spent months looking for a DevOps or SRE hire.
Teams that have lost the person who knew
Nobody remembers how everything was set up any more.
How often is each task done?
The work is planned. This is the starting cadence, which we adjust to your platform. More detail in vulnerability management and in the sample monthly report, with made-up data.
| Task | Frequency | What you see |
|---|---|---|
| Updates | Planned, with advance notice and a tested rollback | Changes in merge requests |
| Security patches | Weekly, in an agreed window | That the service comes back healthy after a restart |
| Vulnerabilities | Ongoing | Found, fixed and pending |
| Monitoring and alerting | Ongoing | Grafana dashboard and alerts channel |
| Backups | Daily or according to each dataset | That they complete and where they are stored |
| Test restore | Monthly, a different service each time | Result and recovery time |
| Access and end of support | Quarterly | Open risks in the report |
| Monthly report | First week of the month | One page you can read in five minutes |
How much does it cost?
A single plan, with the same work every month. Indicative prices, excl. VAT.
From €500/month
A small production environment (for example, one Kubernetes cluster or up to 5 servers, with their database). The final price depends on the number of environments, clusters and services; we confirm it after the audit.
Response the next business day
During business hours. Alerts are logged at any time of day.
Need someone inside your team for a project or while you hire? Take a look at SRE by the day: from €450/day.
How do we get started?
Before the monthly fee there is an audit and a tune-up: there is no point maintaining something nobody has reviewed. What the initial review covers is described in the reliability and security audit.
20-minute call
Free and with no commitment: you tell us what you have set up and what worries you, and we tell you whether we are a good fit.
Audit
From €1,500, fixed price, in 1-2 weeks: prioritised risks, an improvement plan and the final monthly fee.
Tune-up
Inventory, monitoring and alerting, overdue patches, backups with a real restore, and documentation in your repository.
Monthly fee
Each month’s planned work, with its report.
What happens when something goes down?
Alerts fire at any time of day. The response is the next business day, during business hours. Every incident that affects the service is followed through to the end, in three steps:
Restore
First, get the service back, even with a temporary fix.
Explain
A blameless post-incident review, with the timeline, the cause and the impact.
Prevent
The actions to stop it happening again are planned and shown in the report.
How do we handle backups?
If a backup has never been restored, you do not know whether it exists. We explain this in the guide to 3-2-1 and immutable backups.
Off the server
At least one immutable or separate copy, so ransomware cannot reach it.
Test restore
One a month, rotating services, and always after a major change.
Recovery time
Written down for each service, so you know how long you would be without it.
In the report
The result of each test and how long it took.
What keeps you free to leave?
We work inside your own setup, and you can end the arrangement with short notice.
Your account
Everything is done in your cloud account or on your servers. The resources, the data and the provider’s invoices are yours.
Your repository
The configuration lives in code, together with the documentation.
Least-privilege access
The admin credentials are yours. We log in with a named user and minimal permissions, which you can revoke whenever you like.
Monthly fee
With a short, agreed notice period, just enough for an orderly handover.
Handover
If we part ways, we hand over the infrastructure as code, the access inventory and a session with whoever takes over.
Personal data
If there is any, we sign a data processing agreement before we start.
What experience is behind it?
The person doing the work has more than ten years with Linux servers, databases and production platforms:
SRE at a food factory
Where downtime means a production line standing still.
DevOps at a B2B SaaS
Automated deployments, multi-cloud environments and disaster recovery.
CTO
Of a platform with 99.9% availability, and today also head of engineering.
What we have learnt: maintenance that works is boring, planned and written down. The full background is on the about us page.
Frequently asked questions
Do we need to run Kubernetes?
No. We manage anything from a handful of Linux servers with Docker to Kubernetes clusters across several providers. What matters is that the platform is in production and that someone has to answer for it.
Do you manage Windows servers?
Our speciality is Linux and containers. If your platform has the odd standalone Windows server, we can look at it; if most of it is Windows, we will tell you there are better-suited profiles.
What about large projects, such as a migration?
Building a new platform or carrying out a migration are separate projects, with their own quote. The monthly fee covers each month's operations.
Tell us about your case
In a free 20-minute call we look at where you are and where to start. No commitment.
Reviewed on