Atlas Blueprint
Network & Security Architecture + Hardware Leasing
A documented network architecture you own outright — every VLAN, IP range, and firewall zone version-controlled in Git, on hardware you lease instead of sinking into CapEx.
Why this exists
Without Atlas Blueprint
The network was never designed — it grew organically. Nobody knows the full IP range in use. The asset register is a stale spreadsheet. Hardware is purchased ad-hoc from whichever supplier has stock, resulting in 6 different switch models from 4 vendors. When an auditor asks for the architecture document, someone creates one from memory in 2 days.
With Atlas Blueprint
A professional network architecture produced before anything is deployed. Every VLAN, IP range, and firewall zone is documented and version-controlled in Git. Hardware is standardised — one switch model, one AP model, one firewall appliance. Leasing eliminates the CapEx spike: hardware arrives configured, is refreshed on schedule, and replaced without a procurement cycle.
Architecture
Regulatory compliance
| Regulation / Control | Requirement | Audit evidence |
|---|---|---|
| NIS2 Art. 21(2)(a) | Documented network architecture is the prerequisite for all other risk controls | Architecture design document · zone model · Git version history |
| BSI NET.1.1 | Network must be architecturally designed before deployment, not evolved ad hoc | Architecture document · VLAN register · IP address plan |
| DORA Art. 9(2) | Architecture document + hardware inventory provides complete ICT asset register | Hardware BOM · NetBox inventory · leasing register |
| BSI OPS.1.2.1 | Architecture document is the change baseline — all changes tracked against it | Git history · change log · approval trail |
| NIS2 Art. 21(2)(g) | Hardware from validated vendors, leasing contracts with security requirements | Vendor vetting record · leasing contract · hardware spec |
| ISO 27001 A.8.9 | Standardised hardware configurations reduce attack surface | Configuration baseline · deviation log · review schedule |
Standalone installation
Each component can be deployed independently. Download the Customer Request Form, describe your environment, and we quote within 2 business days.
Network architecture design
LAN/WAN topology document. VLAN register (name, ID, subnet, purpose, ACL summary). IP address plan. Zone model diagram generated from NetBox with netbox-topology-views (draw.io / PNG export), kept in sync with the CMDB rather than hand-drawn. Firewall placement. Redundancy strategy. Document only — no implementation.
€ 780
Net, excl. VAT · travel within 100km Hamburg · hardware not included
Download CRF & request quoteHardware leasing setup
Source and configure leasing for 1 rack unit (switch, firewall, or server). Partners: Grenke, DLL Group, Deutsche Leasing. 24/36/60-month terms. Hardware arrives configured to baseline. Delivery + cabling included.
€ 450
Net, excl. VAT · travel within 100km Hamburg · hardware not included
Download CRF & request quoteReady-made boxes
Three boxes, three fixed prices. Each one ships pre-configured and pre-hardened: you power it up, work through a short quick-start guide, and it runs. No audit, no project phase, no consulting engagement required. Need it fitted into an existing environment instead? See the consulting packages below.
5–50 users · 1 site · single server
€ 1,450
Net, excl. VAT · one-off fixed price · hardware not included
50–500 users · 1–5 sites · HA-ready
€ 1,940
Net, excl. VAT · one-off fixed price · hardware not included
500+ users · multi-site · cluster-ready
€ 2,540
Net, excl. VAT · one-off fixed price · hardware not included
Consulting services
The boxes are built to run on their own. When you want one fitted into what you already have, add a fixed-price package — no open-ended day rates.
Installation & handover
We install the box in your environment, connect it to your network and DNS, and hand it over configured and documented. Remote, or on-site within 100 km of Hamburg.
€ 890
Net, excl. VAT · fixed price
Request this packageIntegration into your environment
Connecting the box to what you already run — Active Directory, an existing DNS or firewall, your monitoring or SIEM — including migration of existing data.
€ 1,890
Net, excl. VAT · fixed price
Request this packageCompliance mapping & audit support
We map the delivered configuration to NIS2, BSI IT-Grundschutz or DORA controls and hand over the evidence package your auditor will ask for.
€ 1,490
Net, excl. VAT · fixed price
Request this packageCopyright © XpertOne Security Consulting GmbH. All Rights Reserved. | Impressum | Datenschutz