Government
Large systems,
run on small budgets
Opty is a small business of senior SREs. We have run cloud estates of 1,000+ services, put companies through SOC 2 and HIPAA, and cut the bill along the way. 100% US-owned and based in Santa Clara County, working with California agencies directly and with primes as a subcontractor.
in a single estate
and on-call
response time
Who we are
What we know, we learned in production
Most of what we know, we learned from systems that were already live, with real users and a real bill: online marketplaces, payment products, energy data and blockchain networks. We have operated more than 1,000 Cloud Run and Cloud Functions services in one estate, built the VPN for a 100-person company on WireGuard, and done the engineering work behind SOC 2 and HIPAA.
The habit we bring to public work is getting a lot out of a small budget. A NAT gateway that bills for every gigabyte, a BigQuery dataset on the wrong storage model, an EDR contract sized for a much larger organization: this is where money leaks, and we know where to look.
We are a small business, 100% US-owned and based in Santa Clara County, starting close to home in California and the Bay Area. We are new to government contracting and we say so plainly. We are not new to the work.
Capabilities
What we do, specifically
The short version. Codes, company data and past performance are in our capability statement.
AWS and GCP at scale
We have operated an estate of more than 1,000 Cloud Run and Cloud Functions services. On GCP we set up shared VPC and automate IAM. On AWS we know the networking and storage details that decide what a design costs to run. We also build the plain things agencies still need, such as SFTP servers, and we work on Azure, bare metal (OVH, Hetzner) and PaaS when they fit better.
Cost optimization
Cloud bills leak in known places. NAT gateways charge for every gigabyte, so we move that traffic to VPC endpoints. IO-heavy jobs run on servers with local NVMe and redundancy. BigQuery goes on physical storage billing, with long-term copies dumped to Cloud Storage.
Terraform with change control
Everything is in Terraform. Where the official providers fall short we write our own, or wrap the gap with local-exec scripts. Every change runs through CI/CD and waits for approval before it is applied. Servers are configured with pyinfra.
Detection without the EDR bill
Commercial EDR and XDR can cost more than the systems they protect. We build the detection ourselves: alerts on SSH access, bandwidth, failed checks in logs and syscall activity, tuned so that the alerts get read.
Access, secrets and VPN
Single sign-on in front of internal services. One secrets system that covers CI/CD, production deploys and engineers' laptops. For a company of about 100 people we built the VPN on WireGuard, along with the system that provisions it.
HIPAA, SOC 2 and NIST 800
We have done the engineering side of HIPAA and SOC 2 programs and worked with the auditors through them. We write automated checks against the NIST 800 framework, and we train teams in the security practices the controls ask for.
PostgreSQL at scale
Years of tuning petabyte-scale PostgreSQL on bare metal: query performance, replication, backup and recovery.
Observability
Metrics, logs and alerting on VictoriaMetrics, which costs far less to run than the usual ELK or EFK set-up.
Data and AI
Pipelines that index energy and blockchain data. Inference engines and local LLMs that run on hardware you control, so sensitive data stays in your environment.
Blockchain operations and audits
We operate validators for several networks, including Canton, with monitoring, upgrades and 24x7 on-call. We also audit smart contracts and publish the findings with severity and remediation. See our audit reports.
Why a small business
You talk to the engineers
who do the work
Senior people, no layers
The engineer who scopes your project is the one who builds and operates it. There is no account team in between and no junior bench.
Quick to start
Low overhead means we can scope a task, agree a price and begin in days. Our rates are published.
Careful with public money
Cost is an engineering goal for us. We would sooner build detection from logs and syscalls than sign a per-seat EDR contract, and we check what a design costs to run before we build it.
Working with us
Three ways to engage
Buy from us directly
For smaller requirements, agencies can come to us directly through micro-purchases, simplified acquisitions and small business set-asides.
Team with us as a prime
Prime contractors bring us in as a small business subcontractor for cloud, Terraform, security monitoring, compliance and database work.
Start with an assessment
A fixed-scope review of your cloud bill, your Terraform or your security monitoring. You get written findings you can act on with or without us.
Capability statement
Everything a contracting officer needs, on one page
Read it online or print it as a one-page PDF.
Opty, LLC 1 page
Capability statement
- Core competencies
- Differentiators
- Past performance
- NAICS and PSC codes
- Company data and contact