Microsoft 365, Azure, AWS and other clouds
Day-to-day support and reviews of health, access, configuration and cost. Other clouds by discussion.
- Microsoft 365 & Exchange
- Identity & access
- Azure
- AWS
- Cost reviews
CLOUD · ON-PREMISES · HYBRID · AI
Cloud and datacentre IT,
with AI doing the checking.
One accountable team for Microsoft 365, Azure, AWS and your on-premises servers and networks. Experienced engineers own the outcome. AI explains what it finds, shows its evidence, and a person approves every change.
✓ Human-led support. Agreed scope. AI with oversight.
Ask your estateWhich admin accounts have no MFA, and which servers are behind on patches?
Sample answer: 2 admin accounts and 3 servers. Evidence read: Entra ID sign-in methods and server patch status. Not checked: AWS (no access granted).
CloudekMANAGED CLOUD, DATACENTRE & IT SERVICES
01 / WHAT WE DO
Your whole estate,
one accountable team.
From Microsoft 365 and Azure to AWS and the servers in your own datacentre. Each service area lists the focused reviews you can start with. Scope, fee and timing are agreed in writing before any work starts.
Servers, directories and networks
Support for the infrastructure you run yourself, including the hybrid links back to your cloud.
- Windows Server
- Active Directory
- Hyper-V & virtualisation
- Networks
- Backup & recovery
- Endpoints
Security, automation and AI
Security checks, PowerShell automation and AI-assisted reporting across the whole estate, with a person approving every change.
- Security & resilience
- Migrations
- PowerShell automation
- Cloudek AI
Microsoft 365 & identity
Exchange and Microsoft 365 health, mail flow, access and licence clean-up, with sign-in and identity questions answered in plain English.
See the review scope ↗Check your Microsoft 365 setup against questions you choose
A short written review of the security and service settings you ask about, based on evidence you choose to share.
- You pick the questions and the evidence
- Findings say what was and was not checked
- No changes without separate approval
Find the gaps in your Conditional Access and admin sign-in protection
A written review of your Entra ID sign-in controls, based on exports you choose to share.
- Policy coverage, admin roles, app consent and MFA methods
- Report-only policies and break-glass accounts checked
- Read-only: no policy changes
Find out if email authentication is why your mail lands in spam
We check your domain’s SPF, DKIM and DMARC and one test message, then explain what to fix.
- One domain and up to three senders you name
- One test message from one sender, if you agree
- A written report; DNS changes need separate approval
Show 5 more packages in this area
Get your email DNS records read and explained
A review of the public MX, SPF and DMARC records for one domain, written up with the limits of what DNS can show.
- MX, SPF and DMARC for one named domain
- DKIM only for selectors you name
- No mailbox access and no DNS changes
Check your Exchange Online and hybrid mail flow, and plan your Exchange 2016 or 2019 exit
A written review of connectors, mail flow rules, shared mailboxes and mailbox migration readiness.
- Exit options for Exchange Server 2016 and 2019
- Connectors, rules and shared mailboxes reviewed
- No mailbox access and no configuration changes
Check what your Microsoft Defender set-up and Secure Score really cover
A written review of email protection, endpoint onboarding, attack surface reduction and incident handling.
- Secure Score actions and accepted risks
- Alerts and incidents: who owns them
- Read-only: no settings changed
Find where SharePoint, Teams and OneDrive are shared too widely
A written review of sharing, guests, ownership, labels and oversharing risk before Copilot.
- Sharing settings, guests and site owners
- Labels, DLP and retention basics
- Reports, not document content
Check which Microsoft 365 licences you use and which you only pay for
A written review of assigned versus used licences, plan fit, add-ons, Copilot and renewals.
- Costs shown with their date; no promised savings
- Shared mailboxes, Copilot and renewals
- No licence changes made
Azure, AWS & other clouds
Day-to-day support for cloud environments: health, access, configuration and cost reviews, across providers.
Explore support topics ↗Get a second opinion on your Azure or hybrid setup
A written assessment of the Azure or hybrid topics you choose, based on evidence you supply.
- You choose the systems and the questions
- We review exports and documents you provide
- No changes, deployments or live testing without separate authorisation
Review your Azure landing zone, guardrails and cost
A written review of how your subscriptions are organised, governed, connected and billed.
- Management groups, policy, RBAC and networking
- Idle resources and cost visibility
- Based on exports you provide; no changes
Review your AWS account security and spend
A written review of root user, IAM and MFA, logging, network exposure and idle resources.
- Based on exports you provide; no AWS access
- Organizations, CloudTrail, GuardDuty
- No changes made
Datacentre & on-premises
Windows Server, Active Directory, Hyper-V and virtualisation, networks and backup, supported as one environment with your cloud.
Explore the support guide ↗Get an Active Directory health and security review
A written review of replication, DNS, Group Policy, privileged groups and recovery readiness for your domain.
- Replication, FSMO roles and DNS checked
- Privileged groups, krbtgt age and LDAP signing
- Read-only command output you run; no changes
Get a roles-first plan for Windows Server 2016 end of support
A written plan from your server inventory: what to move first, how, and what depends on what.
- Extended security updates versus migrating: the inputs
- Domain controllers, file, print, apps and databases
- We change no servers
Check the health of your Hyper-V or VMware hosts
A written review of patching, clusters, storage, snapshots, capacity, backup and recovery.
- Options for Azure or Azure Local
- Host and cluster health table
- Read-only: we touch no hosts
Hybrid, migration & projects
Connecting on-premises and cloud, and moving between them, with scope, dependencies, change approval and acceptance agreed before work starts.
Explore the project guide ↗Check how your on-premises and Entra ID identities stay in sync
A written review of your directory sync, sign-in method and single sign-on set-up.
- Sync health, sign-in method and Seamless SSO
- UPN suffixes, writeback and sync scope
- No sync or identity changes
Plan your Microsoft 365 or Google Workspace move before you start
A readiness and cutover plan for one source, one destination and the workloads you name.
- Dependencies, pilot checks and rollback questions mapped
- Planning only: we do not carry out the migration
- No tenant connection, data copy or configuration changes
Get help with ongoing infrastructure support or a one-off project
Support and project work are scoped separately, with systems, owners and exclusions written down first.
- Recurring support kept separate from project work
- Systems, owners and exclusions defined up front
- Changes need specific approval, rollback and checks
Security, resilience & endpoints
Security checks, backup readiness, recovery planning, access clean-up and endpoint management, with clear ownership and escalation for everyday incidents.
Explore the support guide ↗Review your Intune and endpoint management set-up
A written review of how devices are enrolled, protected, updated and tied to sign-in rules.
- Enrolment, Autopilot, compliance and update rings
- App deployment and Conditional Access links
- No policy or device changes
Find out whether you could recover from a failure or ransomware
A written review of what is backed up, how it is protected and what restore evidence exists.
- Microsoft 365, Azure and on-premises coverage
- Restore-test evidence and ransomware recovery path
- We run no restores and change nothing
Review your firewall rules, VPN and network segmentation
A written review of segmentation, exposed services, remote access, Wi-Fi, logging and firmware.
- Rule hygiene and exposed services
- VPN and MFA, DNS and DHCP, Wi-Fi
- No scans and no logins
Show 1 more package in this area
See which cyber insurance controls you can support with evidence
A written control-by-control review of what insurers commonly ask about. It does not arrange cover or promise any outcome.
- MFA, backups, endpoint, patching and incident plan
- You complete your own application
- No cover or premium promised
AI-assisted operations
PowerShell automation and AI that organises evidence and explains options across the estate. A person reviews every recommendation before action.
See where Cloudek AI is heading ↗Get ready for Copilot and AI agents with a permissions and governance review
A written review of oversharing, labels, agent ownership and audit trails before wider AI use.
- Oversharing, sensitivity labels and agent permissions
- Audit and approval checks
- No settings changed
Services, platforms, response targets and responsibilities are confirmed during discovery and written into the service agreement. Whether a specific platform, such as another cloud or an older system, is in scope is confirmed in that conversation.
A SIMPLE FIRST STEP
Prepare a service enquiry
Choose a service and describe the outcome you want. We send your enquiry to Cloudek by email and reply to the address you give. There is no account, payment or booking, and this website does not store the enquiry.
Keep it high level. Don’t include passwords, access tokens, customer records, sensitive logs or other confidential data.
Scope, fee and timing are confirmed in writing before work starts. Want to see what a report looks like? Read a fictional sample report; it uses no customer data.
02 / A CLEAR OPERATING MODEL
Good service starts
with good understanding.
We begin with your current environment and business needs, then agree what support looks like before work begins.
Talk through your requirements ↗Discover
Understand your systems, risks, users and priorities.
Agree
Define the service boundaries, responsibilities and response targets.
Operate
Work through visible processes, records and escalation paths.
Improve
Review outcomes and identify useful next steps together.
03 / WHO WE SUPPORT
For the people
keeping IT moving.
Whether you own the business or own the systems, start with your needs. We agree responsibilities, access, service hours and priorities before work begins.
A dependable IT partner
Get one accountable team for your cloud and on-premises IT, with a clear picture of what is included and what decisions remain with you.
More hands when needed
Add agreed operational capacity while keeping your existing processes, change controls and team in the loop.
Cloud and hybrid operations
Discuss access, configuration, service health and cost visibility across Microsoft 365, Azure, AWS and the servers you still run.
Clear ownership and escalation
Set out who handles what, how issues are raised and which response targets apply in the service agreement.
✳
04 / RESPONSIBLE AI ASSISTANCE
More context for people.
People accountable for outcomes.
AI can help summarise diagnostic evidence, organise information and draft possible next steps. It can be wrong, incomplete or out of date. A qualified operator reviews recommendations and approves any work. OpsPilot does not silently run AI-generated commands.
✓ Human review before action✓ No autonomous changes✓ Customer data handled only within the agreed service and authorisation
Read the trust centre ↗ See where Cloudek AI is heading ↗COMPANY SERVICE AREAS
Coverage across cloud,
datacentre and AI operations.
Microsoft 365 & ExchangeAzure & AWSWindows Server & Active DirectoryHyper-V & virtualisationNetworks & backupEndpoint managementMigrationsPowerShell automationAI-assisted operations
05 / ABOUT CLOUDEK
Infrastructure expertise
with clear accountability.
Cloudek provides managed IT, infrastructure and cloud services. We work across the cloud and the datacentre, and use AI to check what people would otherwise check by hand. Our technical coverage reflects practical work across Microsoft 365 and Exchange, Windows Server and Active Directory, Azure and AWS, virtualisation, endpoint management, migrations and automation.
Each engagement is scoped and delivered through Cloudek. We agree access, responsibilities, service hours and escalation with you before work begins, and delivery follows the written service scope.
Discuss a service requirement06 / COMMON QUESTIONS
Good questions.
Clear answers.
Every environment is different. These answers show how we start a service conversation.
What does managed IT service include?+
It depends on the agreement. A service can cover defined cloud, on-premises infrastructure, end-user or security operations. We document the included systems, hours, response targets, exclusions and your responsibilities before service starts.
What happens in an initial conversation?+
We start with the business need, the systems involved and the outcome you want. Together we list the questions, dependencies and a possible scope. Nothing is committed until responsibilities, access, fees and any response targets are agreed in writing.
What should I include in my first email?+
Tell us your role, your type of environment, the challenge and a good time to reply. Do not email passwords, API keys, sensitive customer data or unreviewed diagnostic exports.
Can Cloudek work with our existing IT team?+
Yes. We can work around your internal team, including responsibilities, escalation paths and communication. The arrangement is agreed for each engagement.
Does AI make changes to our systems?+
No. AI can help with analysis and recommendations, and a person reviews the output. OpsPilot does not silently run AI-generated commands. Any change follows the agreed approval and change process.
Is Cloudek AI available today?+
In part. The Explain with AI buttons on selected free tools are live, OpsPilot is live for Cloudek’s own read-only reports, and a Microsoft 365 mailbox health check is available by request. Asking questions across a whole estate is in development, and other ideas are planned or concepts. The Cloudek AI page labels each one.
Are response times or service levels guaranteed?+
Response targets and service levels apply only when a signed service agreement includes them. This website is general information, not an SLA.
FREE · PRACTICAL · TRANSPARENT
Useful IT checks,
ready when you need them.
Format JSON and Base64 text, convert timestamps, check SSH key fingerprints and IPv4 or IPv6 subnets, review email authentication and website security headers, check certificate dates and look up public email DNS records. Mail DNS lookups are opt-in and go to a public resolver. Browse the tools by job in Resources, or see what’s new.
07 / LET’S TALK
Tell us what your
IT team needs next.
Share your platforms, in the cloud and on-premises, your support challenges and your priorities. We can discuss a service model that fits your environment.
Contact Cloudek
For service discussions and general enquiries, email our team.
info@cloudekhosting.com ↗support@cloudekhosting.com ↗IMPORTANT INFORMATION
Read our AI approach ↑Website content is general information and does not create a service commitment. Availability, scope, pricing, response times, security responsibilities and outcomes are governed by the signed agreement for each service. AI-generated content may be inaccurate and is not a substitute for qualified technical or security review.