Platform Infrastructure
Delivery Pipeline Build
A CI/CD pipeline that builds and tests each pull request and turns a production release into one approved step.
₹20,999GST included
Platform Infrastructure
CR-PLT-104
Container Platform Hardening
A hardening engagement that shuts the default gaps in a running container platform: network policy, access control, resource limits, secrets and image provenance.
Timeline15 working days
Deliverables7 itemised
PracticePlatform Infrastructure
Price₹37,999 incl. GST
01
The problem this solves
A cluster that runs is not the same as a cluster that is secure. Out of the box, any workload can reach any other, containers run as root, nothing is bounded by resource limits and secrets sit lightly encoded in the cluster store. We work through your running managed cluster and shut those defaults down without pulling workloads offline. Each adjustment is committed as a manifest, so the hardened state stays reviewable and can be reproduced.
02
What you receive
- Network policies that deny by default, with allow rules stated per namespace
- Access control reviewed so each workload identity holds only what it needs
- Workload security standards applied, covering non-root users and read-only filesystems
- Processor and memory requests and limits derived from observed consumption
- Secrets relocated into a managed store with controlled synchronisation
- Images scanned during the pipeline run, with a written policy covering critical findings
- Report of residual risk, including what we chose to leave untouched
03
What changes afterwards
A compromised container loses the run of the cluster
Greedy workloads stop starving their neighbours of processor and memory
Evidence in writing for the next customer security review
04
Is it the right fit?
Ideal for
- Clusters assembled in haste during a migration and left alone since
- Teams answering a security questionnaire from a large customer
- Platforms where a single compromised workload could reach the database
What we need from you
- Administrator rights on the cluster and a staging cluster close to production
- A named owner per workload, for the traffic questions we will raise
- A change window in which to cut network policy over
05
Before you buy
Yes. It is in Indian rupees with 18% GST included, and it is exactly what you pay at checkout. Nothing is added afterwards for the scope listed on this page.
The working days are counted from the day we hold your payment, the completed brief and everything listed under “What we need from you”. If an input arrives late, the handover date moves by the same number of days.
Ask before you buy. We will confirm in writing whether it sits inside this scope, point you to a better-fitting service, or tell you it needs separate work.
On full payment, the code, configuration, designs and documents produced for this service belong to your organisation, as set out in our Terms.
Each unit repeats the listed scope once. It does not stretch a single unit to cover more.
Often considered alongside
Platform Infrastructure
Cloud Spend Audit
A line-by-line reading of your cloud bill, returned as a ranked savings list that states the effort and the risk behind each item.
₹13,999GST included
Platform Infrastructure
Uninterrupted Release Programme
A move away from single-server releases to blue-green delivery, with health checks and an automatic reversal when a release misbehaves.
₹32,999GST included