Refactor Cloud Assurance by Refactor Red

Refactor Cloud Assurance audits your AWS account and hands you an honest, independent assessment, not a Well-Architected box-ticking exercise. If the right answer for your organisation is a different cloud, a rewrite, or a rearchitecture to strip out tech debt and cost, we'll say so.

We've been doing cloud audits for more than 15 years, and we've been on AWS since the early days, when all there was was S3 and a command line. We ran the AWS Activate program for the Gold Coast Innovation Hub (GCHub) for years, so we know credits inside out, including how hard the end of the program hits if you're not ready for the bill.

Security blind spots

Most organisations have no clear picture of what's exposed in their AWS account until something goes wrong

Wasted spend

Most AWS bills carry 20 to 40 per cent in forgotten or idle resources

Audits that take weeks

By the time a traditional audit is delivered, the account has already moved on

Inventory Report

What exactly is running in your AWS account, and why?

• Everything in your AWS account, compute, storage, databases and more
• Clear ownership and purpose for every resource
• The foundation every other finding is built on

Security Review

Where are you exposed, and how bad is it?

• Every exposed resource ranked by real-world risk
• Plain-language explanations, not technical scoring
• A prioritised list of what to fix first, and why

Cost Optimisation

Where is your AWS budget actually going?

• A full breakdown of spend by service or project
• Idle and forgotten resources quietly costing you money
• Realistic savings estimates, not vague percentages

DIY is a first-class option

The audit reports give you everything you need to remediate the findings yourself. One customer, who isn't especially technical, has worked through about 90 per cent of the action points on his own, using the reports alone, and only comes back to us for the hard bits at the end.

Or let us help, Refactor Remediate

Fixing what an audit finds is laborious, and the hardest part is usually tracking down who actually owns the redundant or badly optimised parts of your AWS estate. Refactor Remediate is a separate, optional engagement where your team works with us to find owners, pull together scattered knowledge, and get the fixes done. Priced on enquiry, its own scope and its own permissions, agreed with you in advance.

Enterprises with cloud sprawl

Big bills, sprawling accounts, or just a nagging feeling that nobody has the full picture anymore

Due diligence

Useful on either side of the table, buyer or seller. Three clear reports that drop straight into your data room

Coming off cloud credits

Living on AWS Activate credits? We ran that program for years, so we know exactly how hard the bill hits once the credits run out, and how to get ahead of it

Azure and GCP support may follow, depending on interest.

Is it safe to give you access?

Yes. Access is strictly read only, no admin rights, using an exact, agreed set of permissions. It can be revoked at any time, and revoking it takes effect immediately.

We already have someone who looks after our AWS account.

Good. This audit complements them. An independent second opinion is valuable even, especially, when you already trust your current provider or team.

We're not big enough to be a target.

Small accounts are targets too. Attackers don't check company size before looking for an open door.

How accurate is this really?

Every finding comes directly from your AWS account's real configuration. Nothing is estimated or invented.

How is this different from a Well-Architected Review?

A Well-Architected Review is written and delivered from inside AWS's own framework, so it will generally land on optimising within AWS. We're independent of any provider, so if the honest answer is a different cloud, a rewrite, or a rearchitecture, we'll tell you that instead.

We run AWS Organizations with SSO across multiple accounts.

Good practice. Get in touch and we'll work out a price for auditing your whole organisation.

What about Azure or GCP?

AWS only for now. Azure and GCP may follow depending on interest, let us know if you'd like to be first in line.