AWS Partner Network

Know where your cloud environment stands. Then fix it.

LanSurfers runs fixed-price assessments on AWS, Azure, and Google Cloud (Well-Architected, cost, security, migration readiness, modernization, NIST 800-171) and does the engineering that follows, from a single migration to AI applications to ongoing cloud work. A senior architect on every project, and documentation your team can actually run.

10+
Years in Cloud
USGS · NASA · NGA
Federal Background
Fixed
Price Engagements
Senior
Architect, Every Project
Where We Work
★Amazon Web Services
🔒NIST 800-171 / CMMC
■Microsoft Azure
◆Google Cloud
⚙Terraform / OpenTofu
⎈Kubernetes
Platforms we work with
★
Amazon Web Services
■
Microsoft Azure
◆
Google Cloud
TF
Terraform / OpenTofu
K8s
Kubernetes
AI
Amazon Bedrock

Fixed-price assessments. Specific findings, not a slide deck.

Every assessment is scoped, priced after a 30-minute call, and delivered on a set timeline with a written report and a readout. Each one ends with a prioritized plan you can execute yourself or hand to us.

Architecture
Well-Architected Review

A review of one or more workloads against all six pillars of the AWS Well-Architected Framework, run the way AWS runs them.

  • Pillar-by-pillar findings with high-risk issues called out
  • Prioritized remediation plan with effort estimates
  • Eligible for AWS credits through the Well-Architected Partner Program
Fixed price, quoted after a 30-minute call.
Cost
Cost Optimization Review

A review of your AWS spend with the savings you can take this month and the structural changes that keep the bill down.

  • Account-by-account breakdown with the top drivers named
  • Right-sizing backed by utilization data, not guesses
  • Reserved instance and savings plan strategy with projected savings
Fixed price, quoted after a 30-minute call. Most clients recover the fee in the first month.
Security
Security Assessment

A review of your AWS security posture: identity, network boundaries, logging, encryption, and detection, benchmarked against CIS and AWS best practice.

  • IAM and access review, including cross-account and federation
  • Security Hub, GuardDuty, and CloudTrail coverage gaps
  • Ranked findings by exploitability and blast radius
Fixed price, quoted after a 30-minute call.
Migration
Migration Readiness Assessment

For workloads on VMware, Nutanix, or bare metal: what moves, what it costs, and what has to change first.

  • Workload inventory and dependency mapping
  • Right-sized target architecture with a pre-migration cost model
  • Wave plan and cutover approach
Fixed price, quoted after a 30-minute call.
Modernization
Modernization Assessment

For applications already in the cloud that still run like they are on a server. Where containers, managed services, or serverless pay off, and where they don't.

  • Application portfolio review with a modernization path per app
  • Kubernetes, ECS, and managed-service fit analysis
  • Roadmap sequenced by payoff and risk
Fixed price, quoted after a 30-minute call.
Compliance
NIST 800-171 Gap Assessment

Your AWS environment against all 110 controls of NIST SP 800-171, mapped to CMMC Level 2. For defense suppliers who need a credible answer before their prime asks.

  • Control-by-control findings with evidence notes
  • Remediation plan prioritized by SPRS point value and effort
  • Draft SSP outline and POA&M template
Fixed price, quoted after a 30-minute call.
Learn more →

Any task in the cloud, scoped and delivered

Assessments find the work. We also do it. Whether it's a full migration, a landing zone, a one-off fix, or ongoing architecture support, every engagement is scoped, documented, and handed off so your team can maintain it. The list below is where most of the work lands, not the limit of it.

☁️
Cloud Migration & Architecture
Full-lifecycle migrations to AWS, with as-is assessments, cost modeling, architecture design, and cutover planning. Azure and Google Cloud when the workload calls for it.
AWSAzureGCPFixed-Scope Delivery
🏗️
Landing Zones & Account Governance
Multi-account foundations with AWS Organizations and Control Tower. Guardrails, centralized logging, and identity wired in before the first workload lands.
Control TowerMulti-AccountGuardrails
🔒
Security & Compliance
NIST 800-171, CIS hardening, IAM reviews, Security Hub and GuardDuty, policy-as-code. Compliance you can prove, not just talk about.
NIST 800-171IAMSecurity Hub
⚙️
Infrastructure as Code
Terraform, OpenTofu, CDK, and CloudFormation built to your standards, tested before deployment, and handed off with docs your team owns.
Repeatable DeploymentsVersion ControlledTeam Handoff Included
🌐
Networking & Hybrid Connectivity
Site-to-site VPN, Client VPN, Direct Connect scoping, and hybrid architecture, with every decision documented.
Secure Hybrid ConnectivityZero Trust ReadyFully Documented
🤖
AI & LLM Applications
Chatbots, assistants, and document Q&A built on Amazon Bedrock, Azure OpenAI, or Vertex AI. Model selection, retrieval over your own data, fine-tuning and training where it pays off, and the guardrails, access controls, and logging that keep your data inside your account.
Amazon BedrockRAG & Fine-TuningSecure by Default
🧰
Ongoing Architecture Support
A senior architect on retainer for the questions that come up every week: a design review, a cost spike, an incident, a new workload. Block of hours or monthly, your call.
RetainerDesign ReviewsOn-Call Expertise
🔧
Modernization & Containers
Moving applications to ECS, EKS, or serverless, replacing self-managed databases with managed ones, and building the CI/CD that keeps them deployable.
KubernetesServerlessCI/CD
🛠️
Anything Else in the Cloud
Backup and DR, monitoring, identity federation, account cleanup, a stuck deployment, a vendor's design you want a second opinion on. If it runs on AWS, Azure, or GCP, ask.
Backup & DRMonitoringSecond Opinions

Credentials that back the work

Every certification here represents hands-on experience, not just a passed exam.

★
AWS Solutions Architect
Amazon Web Services
✓ Active
★
AWS SysOps Administrator
Amazon Web Services
✓ Active
TF
Terraform Associate
HashiCorp
✓ Active
⎈
Certified Kubernetes Administrator
Cloud Native Computing Foundation
✓ Active
◆
Professional Cloud Architect
Google Cloud
✓ Active
🔒
CompTIA Security+
CompTIA
✓ Active

Built by a practitioner, not a salesperson.

LanSurfers was founded after a decade building and securing cloud infrastructure for federal agencies, including USGS, NASA, and NGA. That work taught us that compliance is an architecture problem, not a paperwork problem, and that a migration is only finished when the client's own team can run it.

LanSurfers is a deliberately small shop. You work with a senior architect directly on every engagement, from the first call to the handoff.

Jonathan BowleyFounder and Principal Architect
01
Fixed-scope engagements
Every project starts with a Statement of Work. You know the deliverables, timeline, and all-in cost before any work begins.
02
Documentation that actually helps
Runbooks, architecture diagrams, and knowledge transfer, so your team can own and operate everything after we're gone.
03
Federal-grade experience
Background at USGS, NASA, and NGA gives us a foundation in compliance, security, and large-scale cloud infrastructure that most boutique shops can't offer.
04
AWS first, no vendor bias
We recommend what's right for your workload: AWS, Azure, GCP, or hybrid. No partner quotas, no kickbacks, no lock-in.
What to expect working with us
PricingFixed-scope, no hourly surprises
ContractsSOW before any work begins
Who you work withSenior architect, every engagement
DeliverablesDocs & runbooks included, always
Vendor stanceIndependent, no partner quotas
Clients servedSmall business to federal government
IndustriesDefense, healthcare, education, enterprise
AvailabilityRemote-first, nationwide

How a project works

Simple, predictable, and transparent from the first call to the final handoff.

1
Discovery Call
Free 30-minute call to understand your environment and goals. No obligation.
2
Assessment
We audit your infrastructure, spend, or security posture with specific findings.
3
Proposal & SOW
Fixed-scope deliverables, timeline, and all-in pricing. Every SOW is specific enough that another vendor could execute it. That is on purpose.
4
Execution
We build and deploy with regular check-ins and full visibility at every stage.
5
Handoff
Runbooks, diagrams, and a knowledge transfer session. Your team owns it.

Let's talk about your cloud environment.

Whether you're scoping a migration, staring at a bill that doubled, or getting ready for a compliance assessment, reach out and we'll figure out the next step together.

✉️
⏱️
Response Time
Within 1 business day

Message received! We'll be in touch within one business day.

Something went wrong. Please email us directly at [email protected]