Contact us

Turnkey infrastructure

Designed, deployed, hardened, and operated by the same team.

We cover the full cycle: scoping, architecture, automated deployment, hardening against the reference framework you choose, then operations. You leave with the architecture file, the operational documentation, and the technical configuration record used for accreditation.

Estimate my infrastructure See the ecosystem

What breaks when you improvise.

Infrastructure built in a hurry gets paid for later: undocumented configurations, security drift, dependency on whoever built it. The day they leave, no one knows why a machine is configured the way it is. Taking it back over then costs more than building it did.

Infrastructure topologyIsometric diagram. The controller operated by PAGMA connects to each of the infrastructure's three layers: hardware and network, orchestration, services. It provides continuous monitoring, controlled updates, and an up-to-date inventory.ServicesBusiness applications and dataOrchestrationProvisioning, configuration,updatesControlleroperated by PAGMAcontinuous monitoring,controlled updates,up-to-date inventoryHardware and networkServers, storage, segmentation

What the service covers

6 capacités

  1. A controller inside your network

    The controller is a virtual machine, isolated on your own network, with negligible resource needs. It creates and removes machines on your hypervisors, updates your systems and containers, and communicates with an agent we develop. It holds administrative rights, which is why it's isolated, and why it can run fully cut off from the internet.

  2. Hardened against a reference framework, not an idea

    ANSSI BP-028, CIS Benchmarks, or DISA STIG: you choose the reference that applies to your context. Hardening is verified at installation, then checked regularly by the agent. It's a measure that repeats, not a box checked on deployment day.

  3. Cloud, on-premises, or hybrid

    Proxmox, VMware vCenter, Xen Orchestra, AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, Alibaba Cloud, or your own servers. Your hosting model stays your decision, including where your data lives.

  4. Monitored, with updates under control

    The controller tracks your infrastructure's health and applies updates, including security ones, without repeated manual intervention. You know what's working and what needs a decision from you.

  5. Reversible by design

    If the contract ends, there's nothing to recover: you already administer your infrastructure, the documentation was handed over at delivery, and full access is already yours. An exit handover is available; it isn't required.

  6. A guided migration, not a leap

    We migrate your Windows servers to Linux on request, including hardened distributions such as Securix (NixOS, recommended by ANSSI). Your data follows the same principle: staged migration, a planned cutover window, and a rollback plan.

What managed operations covers, and what it doesn't

Outages, recovery, updates, security patches: operational and security maintenance is covered under the MCO/MCS contract, with requests counted in points per ticket. End-user support is not part of it. We support migrating from one solution to another, not the day-to-day use of applications by your users.

With ALGIZ and RUNES

The controller exposes to ALGIZ the inventory it collects from the agents, and receives from RUNES the deployment triggers coming from your pipelines. Both products are still in development; the infrastructure service, on the other hand, is available today.

Let's talk about your infrastructure.

Above 1000, enter the exact number in the field.

Hosting
Plan
Contract length
Module packs
Customize

Can't find a module?

Indicative estimate, excl. VAT, no contractual commitment. It covers hardware and our Install/MCO/MCS work only, not software licenses. The final quote is built with our team.

Installation (flat fee)
€1,332 excl. VAT
MCO/MCS operations
€553 excl. VAT / month
Request an infrastructure review

A failed audit, an incident, someone leaving the team, end of support, a compliance deadline: describe the situation. We respond with a technical analysis, not a sales pitch.

Technical detail

Controller
Virtual machine isolated on your network, negligible resource use, can run fully offline.
Hardening
ANSSI BP-028, CIS Benchmarks, DISA STIG. Choose your reference framework, verified at installation and then checked continuously by our agent.
Automation
Stability and idempotence.
Operating systems
Debian, Fedora, NixOS, and recent versions of Windows Server.
Migration
Optional service: Windows Server to Linux (Debian, Fedora, NixOS, including hardened distributions such as Securix). Staged cutover with a planned window and a rollback plan.
Hypervisors
Proxmox, VMware vCenter, Xen Orchestra.
Cloud
AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, Alibaba Cloud.
Deliverables
Architecture file, user documentation, operational documentation, technical configuration record for accreditation.
Data
Location of your choice (on-premises, GDPR-compliant cloud, or outside the European Union). Backup policy defined together with you.

Pricing terms

Installation and migration
Flat fee.
MCO/MCS/MRO operations
Monthly subscription, requests counted in points per ticket.
Controller
Annual license.