Twelve services,
four practice areas
From architecture and migration through to production operations, backed by 17+ years of Oracle and database work.
Database Services
Keeping Oracle and SQL Server estates fast and available, with security that stands up to an audit.
Oracle Database Administration
Production database operations from Oracle 9i through 26ai
Our founder has run production databases at Bruce Power (nuclear, through IBM Canada), FedEx Freight and major universities, and we bring the same DBA practice to every engagement. We cover the whole lifecycle: high availability design, replication, performance tuning, patching and disaster recovery. We also work in packaged application estates such as CMiC and Ellucian Banner, where the database and the application tier have to be tuned together.
What’s Included
- ✓ Database administration across 9i through 26ai
- ✓ RAC & Data Guard high availability design
- ✓ GoldenGate and Data Guard replication
- ✓ Performance tuning with AWR, ASH and SQL profiles
- ✓ Root cause analysis for production incidents
- ✓ Backup, recovery and tested DR (RMAN, Data Pump)
- ✓ CMiC application server and database support
- ✓ Database SSO integration (OAuth2, SAML, Kerberos)
- ✓ Capacity planning and scheduled health checks
SQL Server Performance Tuning
Microsoft data platform tuning, hardening and high availability
Most enterprises do not run one database engine, they run several. We support SQL Server estates with the same rigour we apply to Oracle: measure first, change one thing at a time, prove the improvement. Our SQL Server work has been delivered inside construction and AEC environments, including firms such as Oltmans and Walbec, typically where SQL Server sits alongside an Oracle-backed ERP and both platforms have to perform under the same reporting load.
What’s Included
- ✓ Execution plan and Query Store analysis
- ✓ Wait statistics and bottleneck diagnosis
- ✓ Index strategy and statistics maintenance
- ✓ Always On Availability Groups and failover testing
- ✓ Backup, restore and recovery model strategy
- ✓ Security hardening and permission review
- ✓ Extended Events tracing and baselining
- ✓ Oracle and SQL Server coexistence
Database Security & Compliance
Automated audits, hardening, and a remediation roadmap you can execute
Security findings are only useful if someone can act on them. We run an automated assessment across privileges, encryption, auditing, patching and network exposure, then turn the output into a ranked remediation plan with effort and risk attached to each item, so you know what to fix this week and what can wait a quarter. The same tooling re-runs afterwards to prove the gap closed.
What’s Included
- ✓ 355+ automated Oracle security checks
- ✓ Privilege and role escalation review
- ✓ TDE, Database Vault and VPD implementation
- ✓ Unified auditing configuration and review
- ✓ Listener and network exposure hardening
- ✓ Patch level and CVE gap analysis
- ✓ CIS Benchmark mapping
- ✓ Prioritized remediation roadmap with re-test
Infrastructure & Operations
The layer that has to stay up: cloud, clusters, monitoring and certificates.
Infrastructure Monitoring
Uptime checks, database health and alert routing
Monitoring fails in two directions: too little and you find out from a customer, too much and the alerts get muted. We build monitoring around how your estate actually fails: synthetic uptime checks on the paths users care about, detailed database health telemetry, and escalation policies that reach a person who can act. We run this stack in production for our own platform, so the tooling recommendations come from operating it, not from a vendor datasheet.
What’s Included
- ✓ Uptime Kuma and OneUptime deployment
- ✓ Oracle database health telemetry and exporters
- ✓ Prometheus metrics and Grafana dashboards
- ✓ Agentless database health reporting
- ✓ Alert routing and on-call escalation policies
- ✓ Public and private status pages
- ✓ Log aggregation and retention design
- ✓ Synthetic checks on critical user paths
Certificate & TLS Lifecycle
Certificate inventory, expiry monitoring and automated renewal
Certificate expiry is one of the most predictable outages in enterprise IT, and one of the most common. The renewal step usually works. What is missing is a complete inventory of what exists, where it terminates and who owns it. We build that inventory, monitor it continuously, and automate every step of renewal: issuance, DNS validation, and deployment to the load balancer or ingress that actually serves the traffic.
What’s Included
- ✓ Endpoint discovery and certificate inventory
- ✓ Expiry scanning with ownership tracking
- ✓ Certificate chain and issuer validation
- ✓ Let's Encrypt automation via DNS-01 challenge
- ✓ cert-manager deployment on Kubernetes
- ✓ OCI Load Balancer listener rotation
- ✓ Internal PKI and self-signed certificate audit
- ✓ Zero-downtime rotation runbooks
OCI Architecture & Cloud Review
Design it right, migrate it safely, or tell you what is wrong with it
We plan and run Oracle cloud migrations from the first assessment through production cutover, using Zero Downtime Migration, Data Guard and Autonomous Database so the business keeps running during the move. We also review estates we did not build: a structured assessment of tenancy structure, network segmentation, identity, resilience and cost, delivered as a findings report with prioritized recommendations rather than a sales pitch.
What’s Included
- ✓ OCI tenancy, compartment and VCN design
- ✓ Independent architecture review and gap assessment
- ✓ Database migration across 9i through 26ai
- ✓ Zero Downtime Migration execution
- ✓ Autonomous Database provisioning
- ✓ Terraform infrastructure-as-code
- ✓ Security list, NSG and identity review
- ✓ Resilience and disaster recovery design
- ✓ Post-migration optimization and monitoring
Kubernetes & DevOps
Container orchestration and GitOps delivery pipelines
We operate production Kubernetes clusters hosting Oracle databases, APEX applications, and automation platforms. Our DevOps work runs on GitOps: declarative manifests in version control, reconciled continuously by ArgoCD, so the cluster state and the repository never drift apart. That includes Helm chart management, infrastructure-as-code with Terraform, ingress and certificate automation, and persistent storage design.
What’s Included
- ✓ OKE and on-premises cluster provisioning
- ✓ GitOps delivery with ArgoCD
- ✓ Helm chart development and deployment
- ✓ nginx ingress and cert-manager TLS
- ✓ Persistent storage and CSI configuration
- ✓ Container image optimization and multi-arch builds
- ✓ Monitoring, alerting and log aggregation
Oracle APEX Platform
Building applications on APEX, and running the platform underneath them.
Oracle APEX Development
Web applications built on Oracle APEX
We build web applications on Oracle APEX 24.2+ that look and behave like custom SaaS products. Custom template components and responsive dark themes carry the interface, PL/SQL carries the logic, and development cycles stay short. Because the data logic lives in the database rather than a separate application tier, the application is far cheaper to run over its lifetime.
What’s Included
- ✓ Custom APEX application development
- ✓ Template component libraries
- ✓ Interactive dashboards and reporting
- ✓ REST API integration via ORDS
- ✓ Theme customization and branding
- ✓ Performance tuning and security hardening
APEX & ORDS Administration
Multi-environment APEX platforms that stay up
Building an APEX application and running an APEX platform are different disciplines. The second one is where projects quietly stall: the upgrade nobody wants to attempt, the promotion path that depends on one person's memory, the SSO integration that half works, the reverse proxy that breaks TLS in ways nobody can reproduce. We run this tier as infrastructure across development, test and production, with scripted, versioned changes and written procedures.
What’s Included
- ✓ APEX upgrades and patching
- ✓ ORDS deployment: standalone, Tomcat and Kubernetes
- ✓ Multi-environment promotion (dev to test to prod)
- ✓ Workspace, schema and role security model
- ✓ SSO integration (OAuth2, SAML, Google Workspace)
- ✓ Reverse proxy, SNI and TLS troubleshooting
- ✓ APEX and ORDS performance tuning
- ✓ Upgrade dry-runs and rollback planning
Integration & Solution Architecture
Deciding how systems fit together, then building the connections.
Integration & Solution Architecture
Design authority across multi-system environments
Most integration problems come from decisions nobody owned: which system is the source of truth, what happens when a message arrives twice, whether this should be a nightly file or an event, who is accountable when the reconciliation does not balance. We take that ownership. Engagements run in two modes: as Integration Architect, defining how many systems talk to each other; as Solution Architect, designing one system across data, application, infrastructure and security. We stay vendor-neutral on middleware. The right answer is sometimes Oracle Integration Cloud, sometimes Boomi, and sometimes a scheduled job that costs nothing.
What’s Included
- ✓ Current-state estate discovery and system mapping
- ✓ Target-state integration architecture and roadmap
- ✓ Pattern selection: API-led, event-driven, file, CDC
- ✓ Canonical data model and master data alignment
- ✓ API strategy and governance (OAuth2, JWT, versioning)
- ✓ Failure semantics: idempotency, replay, reconciliation
- ✓ Environment topology, promotion and cutover planning
- ✓ Vendor-neutral middleware and build-vs-buy analysis
- ✓ Architecture decision records and design documentation
Data Integration & Automation
Building the pipelines the architecture calls for
Once the architecture is settled, someone has to build it. From n8n workflow automation to custom PL/SQL ETL frameworks, we build data pipelines that connect business systems and hold up in production. Each pipeline is staged (ingestion, transformation, output) with full audit trails, retry logic and error handling at every stage, so when something fails you can see which record, which stage, and why.
What’s Included
- ✓ n8n workflow design and deployment
- ✓ REST API and OAuth2 integrations
- ✓ PL/SQL ETL pipeline frameworks
- ✓ SFTP and file-based transfer automation
- ✓ Concur, UKG, Zoho, Plaid and DocuSeal connectors
- ✓ Webhook-triggered automation
- ✓ Data validation, deduplication and reconciliation
FinOps & Cost Optimization
Visibility and control over your Oracle Cloud spend
Our OCI FinOps dashboards pull real-time usage data from the OCI APIs and show cost by tenancy, trends over time, and specific savings recommendations. They are built on APEX and give your finance and engineering teams the same numbers, which is usually what cloud cost conversations are missing.
What’s Included
- ✓ OCI Usage API integration
- ✓ Multi-tenancy cost allocation
- ✓ Custom APEX reporting dashboards
- ✓ Monthly billing reconciliation
- ✓ Resource right-sizing recommendations
- ✓ Budget alerts and forecasting
Start With a Free 30-Minute Call
We look at what you run and work out the right approach with you.