01 / CLOUD
Azure environment review
A focused review of identity, network exposure, logging, backup and cost hygiene for a small Azure environment.
- Prioritized findings
- Practical remediation notes
- Read-only access by default
Cloud infrastructure · Website security
Build with
confidence.
Secure what
matters.
I help small teams build and review cloud environments, improve their security basics, and understand website risk through clearly scoped, authorized assessments.
REFERENCE LAB / ILLUSTRATION SCOPE FIRST
SECURE CLOUD FOUNDATION 01—03
IdentityLeast privilege
Azure networkPrivate by design
WorkloadLogged & reviewed
DOCUMENTED CONTROLSDESIGN PREVIEW · NOT A CLIENT DEPLOYMENT
01 ACCESS
02 NETWORK
03 EVIDENCE
Azure administrationNetworkingWindows ServerWeb securityAWS fundamentals
Written scope before workClear deliverables and handoverOnly authorized environmentsQuote agreed before kickoff
How I can help
Focused services.
Useful outcomes.
Each engagement starts with a clear scope, agreed access and practical next steps.
02 / INFRASTRUCTURE
Cloud lab or setup
A documented, non-production proof of concept with an architecture diagram, configuration notes and cleanup steps.
- Azure or AWS, agreed in advance
- Networking and access decisions
- Validation and handover notes
03 / WEB SECURITY
Website security assessment
A time-boxed assessment of an application you own or are authorized to test, with clear findings and remediation guidance.
- Written scope before testing
- Safe, agreed test window
- Report and remediation handover
Small, clearly scoped engagements
Before starting, I’ll confirm the systems in scope, access needed, exclusions, timeline, deliverables and a fixed quote. Cloud-provider charges, hosting, third-party tools and taxes are separate and never started without your approval.
Starter packages
Clear scope. Clear starting price.
Introductory prices for small, defined engagements. I’ll confirm fit, access, exclusions and a fixed quote before work begins.
01 / AZURE REVIEW
Cloud baseline check
Read-only review of one small Azure subscription or agreed resource group: identity/RBAC, network exposure and basic logging or backup posture.
₹1,500 starting price
TYPICAL HANDOVER · 2–3 BUSINESS DAYS
- Prioritized observation summary
- Practical fix checklist
- Written handover
02 / CLOUD BUILD
Small cloud proof of concept
One small, non-production Azure or AWS proof of concept with a reviewed architecture and documented setup or infrastructure-as-code starter.
₹3,000 starting price
TYPICAL HANDOVER · 3–5 BUSINESS DAYS
- Architecture and configuration notes
- Basic validation checklist
- Cost-awareness and teardown guide
03 / WEBSITE SECURITY
Focused website assessment
Time-boxed review of one staging website or domain and up to five agreed pages or workflows. No destructive or denial-of-service testing.
₹4,500 starting price
TYPICAL HANDOVER · 3–5 BUSINESS DAYS
- Prioritized report with evidence and impact
- Actionable remediation guidance
- Findings walkthrough
Final pricing depends on agreed scope. Re-testing, development fixes, third-party charges and applicable taxes are quoted or billed separately.
Portfolio demonstrations
Three practical ways to reduce risk.
Self-directed demo scenarios that show how I plan cloud foundations and security reviews. These are illustrative portfolio concepts, not client deployments or verified outcomes.
AZURE · CLOUD FOUNDATION · DEMO
A secure Azure foundation for a small team
Plan a small, segmented Azure network foundation with least-privilege access and room for a later workload.
Reference architectureEntra ID + RBAC → VNet/subnets + NSG → future workload and monitoring extensionDemo checklistReview address ranges, validate NSG attachment, inspect planned resources and document teardown.DeliverablesArchitecture diagram, Bicep network template, validation checklist and cleanup guide.
AWS · STATIC WEB · DEMO
A hardened static site on AWS
Demonstrate a low-complexity static website setup with a private storage origin and a controlled public edge.
ArchitectureBrowser → CloudFront + HTTPS → Origin Access Control → private S3 bucket; DNS and logs documented.Demo checklistBlock public bucket access, configure origin access, test TLS and cache behaviour, verify security headers and record cost assumptions.DeliverablesArchitecture diagram, Terraform source, security checklist and teardown steps.
WEB SECURITY · LOCAL LAB · DEMO
A safe web security assessment walkthrough
Show a repeatable assessment workflow against a deliberately vulnerable app running locally, such as OWASP Juice Shop.
ArchitectureLocal isolated lab → scoped manual review + passive tooling → evidence log → remediation retest.Demo checklistConfirm local-only scope, map attack surface, review common web risks, capture minimal evidence and retest fixes.DeliverablesLocal lab compose file, scope worksheet and blank report template.
Portfolio transparency: these project cards describe demo designs and workflows. They do not claim a client engagement, production deployment, measured result or certification. Detailed real-project case studies can replace them when evidence is ready.
The client experience
Clear communication. Useful handovers.
Here is what you can expect from working with me.
01 / BEFORE
Scope agreed in writing
Goals, access, systems in scope, test windows and exclusions are agreed before work begins.
02 / DURING
Evidence-led updates
Progress and findings are explained in plain language, with care taken around production systems and sensitive data.
03 / AFTER
Practical next steps
You receive prioritized recommendations, validation notes and a clear handover or cleanup checklist.
Clear scope, evidence-led updates and practical next steps—throughout the engagement.
A clear process
Careful work.
No guesswork.
01 — DISCOVERUnderstand the goalEnvironment, priorities and constraints
02 — DEFINEAgree the scopeWritten scope, access and timeline
03 — DELIVERDo the workCareful implementation or assessment
04 — HAND OVERMake next steps clearFindings, fixes and cleanup notes
Before we start
Good work starts with a clear brief.
A few quick answers to make the first conversation easy.
What should I send in the first message?
Tell me whether you need Azure/AWS help or a website review, the outcome you want, approximate scope and preferred timeline. Please do not email passwords, API keys, customer data or production secrets.
How do you price and agree scope?
I first clarify the work and access requirements. You receive a written scope, deliverables, timeline and quote before any implementation or testing begins. Ongoing cloud usage and third-party expenses are excluded unless agreed.
Can you test a live website?
Only after the owner provides written authorization and we agree the exact domains, accounts, test window, allowed techniques and emergency contact. I can work against staging where available.
Are the projects on this site client deployments?
No. They are self-directed reference demos authored to show approach and documentation. I will add client case studies only when real work and permission to share evidence are available.
Core capabilities
Practical skills across
cloud, infrastructure and security.
A clear view of the areas I work in. Specific project evidence is shown above; certifications are listed only when earned.
01 / CLOUD
Azure & AWS fundamentals
Azure administration topics, cloud networking, resource configuration and hands-on lab work, with AWS fundamentals.
02 / SYSTEMS
Networks & Windows Server
Networking concepts, basic-to-intermediate troubleshooting, Server Manager and Active Directory administration.
03 / APPLICATION SECURITY
Website review & VAPT
Web application security testing, vulnerability assessment and clear audit findings within written authorization.
About
Cloud skills.
Security mindset.
I’m Karan, focused on cloud infrastructure and website security. I’ve completed three hands-on cloud projects and work across Azure administration topics, AWS fundamentals, networking and troubleshooting, Windows Server and Active Directory, and website security testing and VAPT. My teaching background helps me explain technical work and handovers clearly.
I explain technical work in plain language and focus on practical next steps. My knowledge includes AZ-104 topics and CCNA-level networking concepts; these are presented as skills, not as certification claims. I test only systems that are owned by the client or explicitly authorized.
Testing is performed only on systems you own or have explicitly authorized me to assess.
AZ-104 topicsAzure administrationAWS fundamentalsNetworking · CCNA-level knowledgeTroubleshootingWindows ServerActive DirectoryWeb application VAPTWebsite security auditTechnical teaching
Have a project in mind?
Let’s make it more secure.
Share the platform, goal and preferred timeline. I’ll reply with scope questions and the next step. Please don’t send passwords or production secrets.
Open to small, clearly scoped projectsReply target: within 2 business days
Short project brief
Tell me what you need.
Your details are sent to the site’s private form endpoint and saved for follow-up. Please don’t include passwords, API keys or sensitive target details.
Privacy
A simple, transparent enquiry.
What happens to your enquiry?
The form collects your name, email, chosen service, preferred timeline, high-level project description and consent timestamp. On submission, these details are sent over HTTPS to a private Cloudflare Pages Function and stored in Karan’s private Supabase database for Karan to review. The site has no public endpoint for reading submissions. No automatic email alert is sent; Karan reviews saved enquiries manually. Karan keeps enquiries only as long as needed to follow up; you can ask for earlier deletion by emailing kdgirdher@gmail.com. Cloudflare and Supabase process the stored data; the Supabase project is hosted in Sydney, Australia. The site also loads fonts from Google Fonts, which may receive standard connection metadata. Please do not enter passwords, one-time codes, API keys, customer information or sensitive vulnerability details.