Your AWS account, watched by someone who's actually looking.
A fixed monthly retainer: real senior oversight of your AWS account — no account managers, no support tickets that go nowhere, no service you've outgrown before you've paid for it.
You don't need Prisma. You need someone reading what AWS already tells you.
AWS already surfaces most of what an enterprise CSPM would catch at this scale — Trusted Advisor, GuardDuty, Cost Anomaly Detection, Budgets, Security Hub. What's missing isn't tooling. It's a human who actually reads it and tells you what to do.
Oversight, not overhead
- Monthly billing & cost review — catch runaway spend before the invoice does
- Security posture check — GuardDuty, Security Hub, IAM hygiene
- Relevant AWS release digest (Watch+ tier) — the two or three announcements a year that actually affect your stack
- Architecture advice on request — a second opinion before an expensive decision, not after
Three steps, no onboarding project
Read-only access
Cost Explorer, Security Hub, GuardDuty, IAM — never root, never write access.
Monthly review
Written up in plain language: what changed, what needs attention, what can wait.
Direct line to David
For anything urgent — no ticket queue, no tier-1 support script.
Two tiers. Month-to-month.
- Monthly billing & cost review
- Monthly security posture check
- Quarterly architecture check-in call
- Email support, 2 business days
- Everything in Watch
- Monthly relevant-AWS-release digest
- Up to 2 hrs/month architecture advice on request
- Email support, 1 business day
No lock-in, no minimum term. You keep your own AWS account and root access — no custody transfer, ever.
Agency Rebuilt
The name reads three ways, in order of how obvious they are. An agency, rebuilt without the account-manager layer between you and the person doing the work. Your agency — you keep your own AWS account, your own root, your own control; this is oversight, not custody. And underneath both: the same person who looks after Porsche's AWS account, structured to work this way for anyone who needs it.
25+ years of AWS depth. Currently the senior engineer trusted with Porsche's cloud account. Same person, same standard — monthly retainer instead of enterprise contract.
Common questions
Do you need my AWS root credentials?
No. Read-only IAM role, scoped to Cost Explorer, Security Hub, GuardDuty, and billing. You can revoke it any time.
What if something breaks between reviews?
Email goes straight to David, not a ticket queue. Response times are 1-2 business days depending on tier; genuinely urgent things get looked at same-day on a best-effort basis — this isn't a 24/7 incident SLA (see Fracsen for that).
Why not just hire an agency?
Most agencies at this price point route you through an account manager who relays to whoever's actually doing the work. This strips that layer out — you deal directly with the person with 25 years of AWS experience.
What if I outgrow this?
Fracsen (fracsen.com) handles the heavier end — technical rescue, fractional CTO, infra-as-code delivery. This stays a lightweight watch-and-advise retainer by design.
Fifteen minutes to see if this is a fit.
No pitch deck, no sales call — just a conversation about your AWS account.
Book a call →