We build what we recommend.
Seven ways to work with us, from a two-week audit to a platform in production. Advice, engineering and operations from one senior team, so nothing gets lost between the report and the result.
Advice is where we start, not where we stop.
Most consultancies hand over a report. We hand over a running system and a team that can run it. The same people take it from the first audit to production.
A typical consultancy
- Assess
- Recommend
- Build
- Run
- Train
You get a report.
Cendryon
- Assess
- Design
- Build
- Run
- Train
You get a running system, and a team that owns it.
- The people who assess are the people who build.Every engagement is led by our principal. Specialists join from people we have worked with before.
- We build in your repositories and your cloud.Your team sees every change as it happens, from the first commit.
- Built so your team can run it without us.Your engineers build it with us, one wave at a time, and own it when we leave.
Assess
Know where you stand before you spend.
Short, fixed-scope assessments that end in a ranked plan you can act on. Every plan is written so it can be built, by your team or by ours, and the people who wrote it can build it.
For CTOs before a big decision, investors before or after a deal, and teams that sell into regulated markets.
What we build for you
- A ranked plan with a cost and a return on every item
- The first fixes, if you want them, built by the same people who found them
Architecture and workflow audit
We read your code, pipelines, tickets and org chart, and talk to the people who do the work. Then we rank what to fix by what it costs and what it returns. Not a findings deck.
- A ranked map of fixes with the return on each
- Architecture findings with the evidence behind them
- A build plan for the top fixes
Fixed price1 to 3 weeks
Technical due diligence
For private equity and venture capital, buy side or sell side. Architectural rot, vendor lock, key-person risk and hidden operating cost, translated into EBITDA impact. We also check the AI story in the deck against the delivery data.
- Ranked risks with a cost on each
- A summary your investment committee can use
- A 100-day plan for after close
Buy side or sell side
Security and compliance assessment
How you build and ship, checked against our security baseline. We pick only the frameworks your market needs: SOC 2 and ISO 27001, and for European customers NIS2, DORA and the EU AI Act.
- Gaps against the baseline, ranked
- The frameworks your market needs, and why
- A plan to produce the evidence from your pipeline
AI readiness
Whether your codebase, your data boundaries and your team are ready for AI to help, and what to fix first if they are not.
- Readiness per team
- A review of your data boundaries
- A rollout plan
2 weeks
Build
We build it. In your repositories, with your engineers.
This is where most consultancies stop and we keep going. Senior engineers design and build the platform, the pipelines and the software, then hand it to your team running in production.
For Teams that need a platform, a pipeline or a modernization done properly, and want to own it afterwards.
What we build for you
- Pipelines, platforms and services, running in production
- Infrastructure as code, decision records and runbooks
- Engineers of yours who built it with us and can run it
We built a pharma cold-chain monitoring platform as a one-person engineering team, and rebuilt a task mining platform that its buyer’s due diligence singled out.
Platform engineering and DevOps
CI/CD pipelines, release management and infrastructure as code. We start from our own GitHub Actions and Jenkins frameworks, so you do not start from zero. Deploy is not release, so feature flags and progressive delivery come as standard.
- Pipelines as code
- A release process with feature flags
- Infrastructure as code
Cloud on Azure and Kubernetes
Landing zones, golden paths and Kubernetes platforms, Azure first. Designed for your workloads and built so your team can run them without us.
- A landing zone
- Golden paths for your teams
- A Kubernetes platform
Azure first
Architecture and modernization
Event-driven architecture, microservices where they earn their place, and legacy replaced piece by piece instead of in one big bang. Every decision is written down.
- Target architecture and decision records
- Migration in small steps
- New services in production
Secure delivery
Security built into the pipeline: dependency, code, application and infrastructure scanning, with compliance evidence produced by default. Each control blocks what it should and keeps the records an auditor asks for.
- SCA, SAST, DAST and infrastructure scanning
- Evidence produced by the pipeline
Custom development
Product features, integrations and internal tools, built by senior engineers who take responsibility for the result. Not a body shop. AI only where it belongs.
- Working software in your repositories
- Tests and reviews as part of the work
AI
AI in the systems you already run, and a number that says whether it helped.
We design, build and ship AI features, agents and tooling ourselves, then measure whether they helped. Nothing goes to production without a gate and an audit trail.
For Engineering teams that bought AI tools and cannot yet show what they bought, and products that want AI features without the risk.
What we build for you
- Claude Code set up for your stack, with skills, hooks and guardrails
- Agents in your pipeline, each one gated and audited
- MCP servers, plugins and LLM applications in production
AI-assisted engineering
Claude Code rolled out properly, with the skills, hooks and guardrails your stack needs. Then assisted and unassisted work compared on rework, review time, batch size and escaped defects.
- Claude Code configured for your stack
- Skills, hooks and guardrails
- A comparison per team, every quarter
Agentic workflows in the pipeline
First-pass code review, tests from acceptance criteria, incident summaries, release notes, pipelines generated from a description. An agent that cannot be audited does not go to production.
- Agents running in your pipeline
- A gate and an audit trail for each one
Custom tools, MCP servers and plugins
Your stack exposed to the model the way it should be, so the model stops guessing how your company builds software. We did it for our own GitHub Actions framework, which is now an MCP server, and for our Jenkins framework.
- MCP servers for your systems
- Claude Code plugins and skills
Agentic process automation
Process first. If a workflow is clear enough to describe on a page, it can go to an agent with the right boundaries. If it is not, the agent only automates the confusion, and we tell you before we build anything.
- The process mapped first
- Agents with clear boundaries
LLM application architecture
Azure OpenAI, Anthropic, or both behind a model gateway. Evals before every release, data boundaries that survive an audit, and a vendor swap without a rewrite.
- A model gateway
- Evals before every release
- Data boundaries that survive an audit
AI governance and the EU AI Act
Risk classification, evaluation and monitoring built into the checkpoints you already run, on the current EU timeline: high-risk obligations from December 2, 2027, and AI in regulated products from August 2, 2028.
- Risk classification
- Evaluation and monitoring in the pipeline
Transform
Change how the whole company delivers software.
PROVEN is our method for delivery transformation. We find where your work waits, build the fixes into your pipeline with your engineers wave by wave, and prove the result in your own numbers.
For Software companies with roughly 50 to 300 engineers whose delivery has stopped keeping up.
What we build for you
- Checkpoints in your pipeline, enforcing from day one
- Verdict, our measurement platform, running in your cloud
- Evidence your pipeline produces as it runs
Delivery transformation
Two weeks to find where your work waits and what it costs. Then a signed roadmap with a ninety-day plan and a twelve-month target, and the work itself, one team and one wave at a time.
- A delivery assessment and a signed roadmap
- Checkpoints built into your pipeline
- The before and after, every quarter
Starts with 2 weeksPROVEN
Security baseline
The same security engineering baseline for every customer in every market, enforced in the pipeline instead of written in a policy. Enforced in the first 60 days, provable by day 180, durable by day 365.
- Controls at the same checkpoints
- Records kept by default
PROVEN Secure
Compliance overlays
SOC 2, ISO 27001, NIS2, EU DORA, the EU AI Act, PCI DSS, HIPAA and GDPR, mapped to the evidence your pipeline already produces. We pick only the ones your market needs.
- One pipeline, evidence for several frameworks
PROVEN Comply
Organization design
For companies whose bottleneck is the structure, not the code. We compare how the organization behaves with how it is drawn, and change it one measured decision at a time.
- A written decision record for every structural change
PROVEN Organise
Annual check-up
One week a year at a fixed price for existing customers. We read a year of delivery data, flag what is drifting and hand you a refreshed roadmap.
- A refreshed roadmap
Fixed pricePROVEN Check-up
Run
Your Azure platform, kept in shape.
We run what we build. A managed Azure platform with a clear scope and clear hours, and no surprises about either.
For Software companies on Azure that want their platform secure, compliant and inside budget without a platform team of their own.
What we build for you
- The landing zone and its policies, as code
- Cost, security and backup routines that run on schedule
Managed Azure platform
Landing zone, identity and privileged access, Azure Policy, Defender and Sentinel, networking, infrastructure standards, cost governance, backup and disaster recovery, mapped to ISO 27001, NIS2 and DORA.
Priced per subscription
Support you can plan around
Business hours, Central European Time, with response times set by severity. We do not offer 24/7, for anything. Workload operations stay with your team, and we say so before you sign.
Business hours CET
Marketplace publisher support
Help for software vendors who sell through the Azure Marketplace.
Add-on
Steer
A CTO when you need one, for as long as you need one.
Fractional technical leadership from someone who also builds. The person who makes the decision can get it built, with the same team.
For Founder-led companies before growth or exit, and companies that need senior technical judgment without a full-time hire.
What we build for you
- Decisions in writing that outlast the retainer
- The architecture and the delivery process behind them
As fractional CTO at a task mining startup, we rebuilt the platform and moved releases from yearly to monthly. The company was acquired by ServiceNow.
Fractional CTO
Technical leadership on a retainer, a fixed number of days a month. Strategy, architecture, delivery and the team, with every decision made in writing.
Fixed days a month
Fractional enterprise architect
Architecture decisions, standards and reviews for companies that need an architect, but not a full-time one.
Retainer
Train
So your team can do it without us.
Courses taught by people who build the systems they teach, on-site or remote.
For Engineering teams adopting Claude Code, leaders who need to read delivery numbers, and teams that own security in the pipeline.
What we build for you
- Courses built around your stack, when you need them
Claude Code
Three one-day parts: Foundations, Advanced workflows, and Enterprise SDLC with governance.
3 daysOn-site or remote
Delivery metrics for leaders
What to measure in software delivery, what to leave alone, and how to read the numbers without gaming them.
Half day
Secure delivery
Security built into how software gets made, from the first commit to production.
1 day
Custom courses
Built around your stack and your team.
On request
Not promised. Proven.
Book 30 minutes. By the end of the call you will know whether we are the right fit, and if we are not, we will say so.
Ask about any service above and it goes with your booking, so you do not have to explain it twice.