MSPs and consultancies
Every client review is assembled by hand, and the Well-Architected Framework Review you sell takes a week to produce.
Tenant-isolated reporting across every client you run, with a scorecard that maps onto the WAFR you already sell as an engagement.
Scoring against the published Well-Architected pillars is a deliberate credibility borrow. Every AWS buyer knows them, and the scorecard maps onto the Well-Architected Framework Review an MSP runs as a paid engagement — so the output is something a client already understands how to read.
Row-level security on every tenant-scoped table is the boundary, bound per transaction. Application-level filters are ergonomics, never the guarantee. Cross-tenant reads are asserted impossible by tests that run against real Postgres, which for a system holding many clients’ security posture is not optional.
A WAFR delivered once a quarter is a snapshot of a moving system. The same data, collected continuously, turns the engagement into something you can renew rather than repeat.