Azure security & compliance
Azure security and compliance remediation for London-market insurers.
Audit findings fixed in code, with evidence - Entra ID, PIM, Conditional Access, Key Vault, Defender for Cloud, and Terraform. For Lloyd’s market insurers and regulated financial services firms. CAF and Well-Architected aligned throughout.
Built with
How we engage
Greenfield, brownfield, or migration - we’ve done all three.
Starting fresh
Greenfield builds
Building something new? We start with the right foundations - CAF-aligned landing zone, identity, networking, and security baseline - before the first workload lands. No technical debt inherited, no retrofitting later.
Existing platforms
Brownfield modernisation
Platform grown organically and showing its age? We assess what you have, identify the security and architectural debt, and deliver a pragmatic remediation roadmap that improves things without breaking production.
On-premises or cross-cloud
Cloud migrations
Moving from on-premises or another cloud? The CAF Migration Factory gives you a structured, repeatable approach - assess, replicate, migrate, optimise - with documented decisions at every stage.
What we do
Security and compliance first.
HarvTech is led by Alex Harvey and delivers through a small network of vetted senior Azure and identity specialists. Security Hardening is the lead service; the broader platform capability behind it covers builds, migrations, networking, and cost.
Security & compliance
Security Hardening
Audit-driven Azure security and compliance remediation for regulated environments. The usual trigger is a failed or upcoming audit: we turn the findings into a risk-scored plan, fix them in Terraform and pipelines with a full evidence trail, and keep you compliant between audits.
Platform engineering
Greenfield Platform Build
Build your Azure platform right from day one - CAF-aligned landing zone designed for your workloads and regulatory environment, engineered in Terraform with automated delivery workflows baked in from the start.
Cloud adoption
Migrations
Structured migrations from data centres, on-premises infrastructure, or sprawling unmanaged environments, using the CAF Migration Factory approach so every workload lands governed, secured, and documented.
Network architecture
Networking
Design and build Azure network topologies that are secure by default, auditable in code, and documented so your team understands every traffic flow and every rule.
Cost management
FinOps
Get Azure costs under control - identify what's wasting money, right-size over-provisioned workloads, optimise licensing, and put the structures in place so spend stays visible and owned.
Why HarvTech
Senior expertise, without the consultancy overhead.
HarvTech is led by Alex Harvey, 25 years in IT, the last seven focused on Microsoft Azure at Lloyd’s of London market insurers Tokio Marine Kiln and Brit Insurance. The work included enterprise landing zones, Entra ID hardening, Conditional Access, Defender for Cloud, and Terraform-first delivery across regulated environments.
You get senior hands-on delivery, not a project manager fronting a junior team. Everything we build is documented, in code, and handed over with the reasoning intact.
Standards we work to
- Microsoft Cloud Adoption Framework (CAF)
- Azure Well-Architected Framework (WAF)
- CIS Azure Foundations Benchmark
- Microsoft Zero Trust security model
- DORA, SOX ITGC, FCA, ISO 27001, PCI DSS
- Infrastructure as Code - Terraform, azurerm 4.x
- GitOps with OIDC-federated CI/CD pipelines
Get started
Let’s talk about your platform.
Whether it’s a failed audit that needs remediating, an upcoming one you need to be ready for, or a platform to build or migrate - get in touch and we’ll scope it together. UK-based, hybrid or fully remote.