Azure consulting & tooling
We fix Azure estates, and sell the tools we built doing it.
ACloud.Solutions works with businesses on cloud migration, automation and IT consulting. The AzClean tools came out of that work, so the numbers are defensible enough to put in front of a finance team.
Consulting and support · read-only Azure tooling · info@acloud.solutions
__ _ ______ ___| | ___ __ _ _ __ / _` |_ / __/ __| |/ _ \/ _` | '_ \ | (_| |/ / (__\__ \ | __/ (_| | | | | \__,_/___\___|___/_|\___|\__,_|_| |_| AzClean v1.0.0 // Orphaned Resource Finder by ACloud.Solutions ------------------------------------ [*] Scope: all enabled subscriptions - 2 subscription(s) [!] Found 8 orphaned resource(s) - est. 137.26 USD/month wasted Priced using: Azure Retail Prices API (USD) ResourceType Name Est USD/mo ---------------------------------- ------------------- ---------- Managed Disk (unattached) disk-sqlbackup-temp 88.59 Load Balancer (empty backend pool) lb-staging-old 18.25 Managed Disk (unattached) disk-web01-old 23.85 Public IP (unassociated) pip-old-appgw 3.65 Load Balancer (empty backend pool) lb-dev-legacy 0.00 Basic SKU is free
Three ways to work with us
Hire the help, buy the tooling, or read the book. Plenty of people do more than one.
Consulting
Bring us in
Hands-on work on your Azure and Microsoft 365 estate, from a migration plan to the tickets nobody has got to.
- Cloud migration, planned before anything moves
- PowerShell and Graph automation
- Security, access reviews and audit evidence
- Ongoing IT consulting and support
Tooling
Buy the tools
Read-only PowerShell tools for Azure cost and security. One download each, licence included, lifetime updates.
- Cost and security findings, priced properly
- Sentinel detections that prove themselves
- Intune config as code, with drift reports
- Client-ready reporting you can white-label
Book
Read the field guide
ISO 27001 for the One-Person Team: getting an SME certified on your own, written from doing exactly that.
- Scoping without certifying everything
- A risk assessment auditors accept
- What Stage 1 and Stage 2 really test
- The year two surveillance audit
Consulting
Work on the estate you actually have. Every engagement starts by finding out what is really there, because the answer is usually not what the documentation says.
Cloud migration
Moving workloads to Azure with identity, networking and cost worked out before anything moves.
- Landing zone and subscription design
- Identity and Conditional Access
- Cost modelling before commitment
- Cutover planning and rollback
Automation
PowerShell and Microsoft Graph automation for the work that should not need a person.
- Joiner, mover and leaver processes
- Reporting and evidence collection
- Scheduled runbooks with real exit codes
- Handover you can maintain yourself
Security & compliance
Hardening Azure and Microsoft 365, and getting evidence into a state an auditor accepts.
- Access reviews and privilege cleanup
- Conditional Access and device compliance
- Sentinel detections and alert tuning
- Audit evidence and remediation tracking
IT consulting & support
Practical help across the estate, whether that is a decision to make or a backlog to clear.
- Device management and Intune
- Microsoft 365 administration
- Technical decisions and second opinions
- Backlog and escalation support
How an engagement runs
No surprises, and nothing changes in production without a decision behind it.
Find out what is there
A read-only assessment of the estate. Often the same tooling we sell, pointed at your subscriptions.
Agree what matters
Findings ranked by cost and risk, with the ones worth acting on separated from the noise.
Do the work
Changes made with a rollback, and automation handed over in a state you can maintain.
Leave it measurable
Reporting you can re-run yourself, so the improvement is visible after we have gone.
The AzClean family
Every tool shares one rule: they read, they never write. Each is a single download with the full licence terms inside, and updates for the lifetime of the tool.
Cost & security
AzClean Toolkit
Ten scripts: orphaned resources, idle VMs, stale snapshots, NSG rules, public storage, stale RBAC, expiring credentials, tag compliance and spend by tag.
View on Gumroad →Microsoft Sentinel
AzClean Detections
Twelve validated Sentinel rules for configuration drift and privilege escalation, with a validator that proves every query in your own workspace before you deploy it.
View on Gumroad →Microsoft Intune
AzClean Baselines
Intune configuration as code. Export policy to JSON, commit it, and get told exactly which property drifted, however deeply nested.
View on Gumroad →Deliverables
AzClean Reporting
Turn toolkit CSV exports into a client-ready HTML report, a Markdown summary for tickets, and a Teams or Slack digest. White-label it as your own.
View on Gumroad →Start here
Orphaned Resource Finder Free
One script, free for internal use. Finds the disks, NICs, public IPs and load balancers nobody remembered to delete, priced by provisioned tier.
Download free →
Paperback & Kindle
Somebody decided the company needs ISO 27001. That somebody was not you.
A field guide written by one person who took a 40-person SaaS company through ISO 27001:2022 certification alone, and kept notes on everything that went wrong. Scoping, a risk assessment an auditor will accept, what Stage 1 and Stage 2 really test, and the year two surveillance audit nobody warns you about.
130 pages · ISO/IEC 27001:2022 · on Amazon.co.uk and other marketplaces
Notes
Working notes
Azure cost and security, Microsoft 365, automation and ISO 27001, written from running all of it for one small company.
AI tools for security teams of one: what to hand over and what to keep
Where LLM tools genuinely help, where they produce confident nonsense about your own estate, and rules for what goes into a chat window.
ISO 27001 evidence automation: exported in February, asked for in March
Turning recurring evidence into scheduled exports with timestamps, and being honest about how much of an evidence pack a script can produce.
Azure Advisor recommendations need triage rather than obedience
What Advisor is genuinely good at, where its cost advice misleads on a small estate, and how to triage the list instead of obeying or ignoring it.
Why the numbers are different
Most cleanup scripts multiply disk size by a flat per-GB rate. Azure does not bill that way. Managed disks bill by provisioned tier, so a 128 GB Premium SSD is one P10 whatever it contains, and a 100 GB disk costs exactly the same as that 128 GB one.
Prices come from the public Azure Retail Prices API, per resource region, in your billing currency. Figures are for prioritising work, not billing: they ignore reservations, savings plans, Hybrid Benefit and negotiated discounts.
The longer version of this, with the tier ladder and the PowerShell
About
ACloud.Solutions builds Azure tooling and provides IT consulting. The AzClean tools came out of real estate cleanup work: the numbers had to be defensible enough to put in front of a finance team, and the security checks had to fail loudly rather than quietly report all clear.
That is why every tool in the family is read-only by default, exits non-zero when it cannot reach Azure, and ships its licence terms in the download.
Get in touch
Questions about a tool, a licence tier, or a piece of work.