Your cloud. Your keys.
No lock-in.
Microsoft 365 hardening, Azure landing zones, and AI automation for EU operators under DORA and NIS2.
Every deliverable is licensed to you perpetually, and transferable to a successor supplier without asking us. Terms, section 04.
Licensing and tooling we deploy, sourced at wholesale through Pax8
Three lanes, sharp edges.
Each engagement stays in one of three lanes. FinOps is a scoped service, not a fourth lane. When a brief falls outside them, we say so and refer out.
Modern Workspace
Licensed wisely. Hardened tightly. Documented fully.
Microsoft 365, Google Workspace, hardware and migrations, routed through Pax8 marketplace at wholesale. Microsoft 365 is assessed against the ITSailor Microsoft 365 Security Baseline; other platforms use their stated benchmark. Everything is documented so the next person can pick it up without you. Microsoft raised Microsoft 365 Business list prices in July 2026; existing customers keep old pricing until renewal, so a pre-renewal licence audit usually nets flat-to-lower spend.
Security & Infrastructure
Audit-pass posture, not audit-survive posture.
Azure landing zones, threat detection and response (Microsoft Defender, Sentinel), and Backup/DR - built as NIS2-aligned, DORA-ready evidence your auditor can open, deployable as Terraform on day one.
AI & Automation
Automate the tickets your team handles manually.
HOIST handles the repeat IT tickets (password resets, access requests) so your people don't. DECKLOG answers from your own policies, runbooks and tickets instead of the public internet. Custom workflows where they pay for themselves.
FinOps & Cloud Cost
Find what your cloud is charging you for nothing.
License rightsizing, reserved instance analysis, and real-time spend alerts (SEAWALL) - across Azure, AWS, and your SaaS subscriptions.
Three live. Two shipping.
Built in-house from real tenant work. Offboarding Evidence, Tenant Monitor, and SEAWALL take customers today. HOIST and DECKLOG open in Q3 2026.
We make it easy
to fire us.
Every engagement closes with an Exit Kit: a handover pack your next vendor can load in 24 hours. That's the point. You are never locked in, so we stay accountable the whole time.
- Runbooks for every deployed control
- Terraform and automation source, ready to merge
- Credential inventory, owned by your tenant
- Architecture doc with every decision on record
Read-only by default. Delegated OAuth permissions or scoped service principals - tagged, time-boxed, revocable in one click.
All audit data and form submissions stay in EU regions. Sub-processors disclosed. We don't sell, profile, or train on your data.
ITSAILOR / EXIT KIT
Exit Kit: Table of Contents
- Runbooks (incident, access, backup and restore)
- Terraform and automation source
- Credential and licence inventory
- Architecture record and open decisions
Handover complete within 24 hours of close-out.
The handover sequence
- Day 1Credential inventory, tenant-owned.
- BuildTerraform source, ready to merge.
- DocumentRunbooks for every control.
- HandoverArchitecture doc, decisions on record.
The licensing catalogue, priced.
2,300+ software SKUs from 92 vendors, provisioned through Pax8 wholesale and billed by ITSailor in Malta. 1,810 carry a listed price; the other 496 are metered or bespoke, so we quote those. No sales call required for what is already priced.
If the brief fits ITSailor, you get a scoped path.If it does not, you get a direct answer and a useful referral.
Michal Jatczak · Founder
Where clients usually start.
Each playbook is scoped to your stack and delivered in weeks, not quarters.
Rapid AI Prototyping
De-risk your AI investment with 4-week pilot engagements that prove ROI.
Scoped to you
Cloud Infrastructure Modernization
Standardize your Azure and GCP landing zones for scale, security and performance.
Scoped to you
SaaS Licensing Optimization
Eliminate waste and regain control over your M365 and Google Workspace spend.
Scoped to you
What we're learning, in public.
Technical writing across AI, security, and modern workspace. No vendor fluff - every article links to a real tenant decision or a live product.
Shadow AI is a governance-readiness problem, not a deadline
The first artifact three separate AI frameworks all demand is the same: a register of the AI systems in use, their data posture, and an owner. Build that register now for the governance value, and let the shifting AI Act dates be a secondary driver.
The offboarding runbook and the MTTFAR clock
Offboarding is a race against the access a leaver still holds. This is the order of operations I run and the mean-time-to-full-access-revocation targets I hold each departure to, from a standard leaver to a hostile termination.
The offboarding evidence pack, control by control
An auditor does not ask whether an offboarding SOP exists. They ask for the artifact that proves each control ran. Here are the twelve controls I build the evidence pack around and the proof each one needs.
Ready when you are.
Thirty minutes with Michal, directly. No sales team in the way. Bring the problem; leave with the next move.