Essential
Continuous security scanning for a single cloud account
$490/mo
1 cloud account · Up to 3 pipelines
Plan details →Serving startups and mid-size companies
Systems that have to last.
Security built into your pipelines, infrastructure as code you can trust, and cloud platforms designed to be operated — priced by the accounts and pipelines you actually run.
Continuous security from $490/mo · Full DevSecOps across your pipelines from $1,450/mo · Fixed term, no automatic renewal
What we do
Four services, each with its own page, deliverables, and engagement model.
Cloud architecture & assessment
Independent review of cloud estates, landing zones, cost posture, and reliability risks, with actionable roadmaps — so you know exactly what to fix, in what order, and what it will cost.
Learn more →Software development
Design and build of web applications, APIs, and integrations using secure software development practices — shipped with the tests, CI/CD, and documentation your next hire will thank you for.
Learn more →Security & privacy engineering
Practical hardening, privacy-by-design reviews, and evidence preparation for procurement and due diligence — so security questionnaires stop being a fire drill.
Learn more →Managed delivery engagements
Operating support for systems we design or deliver, with scope and response targets in writing — so the system we built keeps running the way it was designed to.
Learn more →Farqad Cloud at a glance
- Incident response
- 24/7
- Priority-one, on Platform; other tiers where agreed
- Availability target
- 99.8%
- For systems we operate. A target, not a warranty
- Engineering experience
- 2 decades
- Behind the founding team, before the company existed
- Reply to every enquiry
- 1 day
- One business day. A founder reads every message
Why teams work with us
No badges we haven't earned, no claims we can't back — just the terms we actually work under.
Scope and term, in writing
Every engagement runs against a written agreement with acceptance criteria and a fixed term. Nothing starts until you approve the scope, and nothing renews without your written agreement — we keep no card on file.
See plans & pricing →Security you can inspect
Our security overview, subprocessor list, and responsible-disclosure policy are published in the Trust Center — no NDA required to read them.
Visit the Trust Center →A founder reads every message
No ticket queues for sales questions. Email us directly and we reply within one business day.
Contact us →Deliverables you keep
Upon full payment you receive a licence to use the deliverables for your business, or an ownership transfer when the SOW says so. Your pre-existing materials stay yours.
Read the terms →Plans
Sized by cloud accounts and CI/CD pipelines, with add-on modules for IaC, migration and re-architecture.
Secure Delivery
DevSecOps across your pipelines, with the build gated on findings
$1,450/mo
1 cloud account · Up to 5 pipelines
Plan details →Platform
Multi-account platform security with annual penetration testing
from $2,900/mo
2 cloud accounts · Up to 10 pipelines
Plan details →Custom & RFP
Sized to a formal requirement, a regulated estate, or a tender
Custom quotation
Quotation
Plan details →Latest insights
Practical guides on cloud architecture, security due diligence, and scoping consulting work.
How to Prepare for a Cloud Security Questionnaire
A practical guide to answering vendor security questionnaires without a last-minute scramble — what to have ready, and how to answer honestly.
5 min read
Fixed-Price vs. Time-and-Materials Consulting: How to Choose
How fixed-price and time-and-materials consulting engagements actually differ in practice, and which one fits your project.
5 min read
What a Cloud Architecture Assessment Should Include
A practical checklist for what a cloud architecture assessment should cover, so you can tell a thorough review from a rubber stamp.
6 min read
Who you work with
The engineers behind Farqad Cloud
Farqad Cloud was founded by a small group of engineers who spent the better part of two decades building, securing, and reviewing systems for other organizations before starting their own.
We started Farqad Cloud because we kept seeing the same pattern: engagements that ran open-ended, deliverables nobody could inspect, and security bolted on at the end. We work the way we always wished vendors had worked with us — fixed scope in writing, documented deliverables you own, and a founder who reads every message.
The company is new. The experience behind it is not.
Meet the engineers →Practitioner credentials
- Cloud architecture and operationsAWS · Google Cloud
- Defensive securitySANS / GIAC
- Offensive testingOffensive Security
Two decades of combined practice, credentialed across all three disciplines. The certificates are held by the individual engineers who do the work: Farqad Cloud claims no certifications of its own and no vendor partnerships.
Delivered against
- GDPR
- HIPAA
- ISO 27001 requirements
- Local frameworks in Egypt, the Gulf, Europe, and the United States
Where we have worked
- Fintech and payment platforms
- Cloud migrations and greenfield builds
- Regulated environments
Tell us what you're building
Email us the plan or engagement you have in mind — a founder reads every message, and we reply within one business day.