Keep control of AWS without carrying the operational load

We handle incident response, release support, infrastructure change and compliance evidence in your AWS accounts while your engineers keep approval control

AWS DevOps Competency

Proof, not promises

From real AWS environments we manage.

  • 18+ years on AWS
  • 1000+ AWS migrations
  • 200+ active customers
  • ISO 27001 certified
  • 2028 operational events handled
  • 1 min 57 secs avg response, 15-min Sev 1 SLA
  • 4,864 automated deployments

Operations numbers are from August 2026, captured across every customer environment we manage.

Security and compliance built into the service Audited, certified, evidence ready

Certified & Aligned

CPS 234 and 230 APRA aligned

AWS Validated & Audited

See your AWS security posture and score on Secure Compass

Our self-serve SaaS, built by base2 and used on every customer environment. Score against 228 AWS Well-Architected Security Pillar controls, see public exposure across 22 resource types and get trend lines you can take to the board.

Get your free 15-minute snapshot

Infrastructure Lens

Answers, alerts, reports and fixes, in the tools your team already uses

Infrastructure Lens is the engine our engineers and customers use to understand AWS environments and make decisions. It runs read-only in your AWS accounts alongside Datadog, New Relic or AWS-native monitoring, and connects each incident to the changes, dependencies and architecture decisions behind it.

Your team can ask it questions directly too. The Infrastructure Lens MCP answers questions about incidents, cost, compliance and recovery from Cursor or Claude Desktop, read-only.

# platform-opsSlack
CTO 9:14 AM

@Infrastructure Lens show me the current split of our AWS costs and suggest any savings you can see from our usage patterns

Infrastructure Lens APP 9:14 AM

Monthly AWS spend for the last six months, by service. Spend is up 21%, mostly EC2 in production.

40k 20k 0 May Jul Sep Oct
EC2 RDS Other
RecommendationEst. saving / month
Rightsize 14 over-provisioned EC2 instances in production$3,200
Reserve the steady-state RDS instances$2,100
Turn dev and staging off overnight and at weekendsConfigure Start/Stop$1,050
Delete 2.1 TB of unattached EBS snapshots$410
Total$6,760
Open pull requestsShow workings
Infrastructure Lens APP 9:42 AM

ECS service checkout-api is down in production

0 of 3 tasks running since 9:38 AM. Tasks are exiting with code 137 (out of memory).

This started 4 minutes after release #482, which added image resizing to checkout. Task memory is 512 MB. The last healthy task definition is revision 56.

Recommended first steps

  1. Roll back checkout-api to task definition revision 56 to restore service.
  2. Raise task memory from 512 MB to 1 GB before redeploying release #482.
  3. Check the image resizing change in release #482 for unbounded memory use.
Approve rollbackOpen runbookEscalate to base2
Platform engineer 9:44 AM

Approved. Rolling back now.

Infrastructure Lens APP 9:47 AM

Rollback sent through your deployment pipeline. ✓ checkout-api is healthy on revision 56, with 3 of 3 tasks running.

Platform engineer 10:05 AM

@Infrastructure Lens how do we stop this happening again?

Infrastructure Lens APP 10:06 AM

I reviewed 90 days of releases, metrics and the checkout-api architecture. This is the third out-of-memory failure since July, and each one followed a release that raised memory use.

checkout-api peak memory, last 90 days

Task memory limit 100% 50% Jul Aug Oct

Recommendations

  1. Add a pre-release check that blocks releases using more than 80% of task memory in staging.
  2. Turn on the ECS deployment circuit breaker so failed releases roll back automatically.
  3. Scale checkout-api on memory as well as CPU.

I have opened pull request #491 with these changes for your review.

Take AI to production on AWS

We provide the secure baseline and operations model that runs AI on AWS, and build production features when you need them, with guardrails and controls in place.

Clear enough for leaders, practical enough for engineers

For your leaders

Visibility without the noise

  • Environment health tracked
  • Audit-ready evidence
  • Clear visibility into AWS spend
  • Predictable monthly fee, aligned to the scope you choose
  • Every change gated through your approval workflow, with ISO 27001, CPS 234 and CPS 230 change control respected
  • Progress you can show the board

For your engineers

Fixes in your workflow

  • Pull requests ready for your team to review
  • Slack or Teams discussions before change is applied
  • Checks before release
  • A named delivery manager and technical lead, with the same people in the work each week
  • Governance handled for you, not left to your team

Ready to talk?

No pitch deck, just a conversation about your AWS environment.

Common questions from engineering-led teams

What is your incident response time?

Severity 1 incidents get a 15-minute response, 24/7, from a follow-the-sun team across Australia, Europe and the US. In August 2026 our average response time across customer environments was 1 min 57 secs. Response times are contractual, not aspirational.

Do you replace Datadog, New Relic or our existing monitoring?

No. Infrastructure Lens runs read-only in your AWS accounts and integrates with the tools you already use, including Datadog, New Relic and AWS-native monitoring. You keep your observability stack; we add the always-on analysis and the team that acts on what it finds.

Which compliance frameworks are you certified with?

base2Services is ISO 27001 certified. We provide continuous posture monitoring, fixed-price gap analysis with a remediation plan, audit-ready evidence packs and an analyst who joins your auditor calls.

What access do you need to our AWS account?

Read and write. Our engineers operate your environments under a managed service, responding to incidents and applying fixes rather than sending advice. Infrastructure Lens itself runs read-only. Every change follows your approval workflow, with ISO 27001, CPS 234 and CPS 230 change control respected. No silent changes.

How does pricing work?

A fixed monthly fee scoped to your environment, so there are no surprise invoices when things go wrong. Many teams start with a fixed-scope review or gap analysis, then move into managed coverage.