• Penetration testing is not something we take on, so you will need a dedicated testing firm for that side of an assessment.
  • If the engagement needs us on site every week, we decline it, as the travel turns the job into something other than the technical review you booked.
  • We do not run round-the-clock monitoring or act as your outsourced security team; we hand the findings over and leave the running of them with you.
  • Work that requires us to sign off on infrastructure we had no part in building is refused, because the assurance would be worth very little.

Who we are

A small consultancy for cloud infrastructure security


Wobbletree Technical is a cloud infrastructure security consultancy run by WOBBLETREE LIMITED and based in the UK. We review the accounts, networks and configuration that hold your systems up, and we tell you plainly what is wrong with them. Most of our clients run their own platforms on AWS, Azure or Google Cloud and have reached the point where nobody in the team has time to check the settings properly.

The work is deliberately narrow. We take on reviews, landing zone design, identity and access work, logging and network boundary checks. We do not sell a platform, we do not resell anyone's tooling, and we hold no vendor agreements that would push us towards one answer over another. If a setting is wrong we say so; if it is fine we leave it alone.

You will usually deal with the same one or two people from the first call to the final walkthrough. That keeps the detail intact: the person who reads your Terraform and the person who explains it to your finance director are the same person. It also means we take on a small number of engagements at once, so yours is not sitting in a queue.

Our background is in running these systems rather than auditing them from the outside. Before consulting, we built and operated cloud estates for product teams, which shapes how we write things up. Every finding comes with the exact setting, the likely consequence and a change you can make this week, rather than a page of theory.

We work remotely and travel for the parts of a job that need a room and a whiteboard. If you want to know whether we are the right fit for what you have, the first conversation costs nothing and usually settles it.