Cloud Readiness Score – ApexStack Cloud | Free Infrastructure Assessment

Architecture

How is your cloud infrastructure defined and managed?

Manually configured through cloud console (click-ops) Mix of manual and some scripted automation Mostly Infrastructure as Code (Terraform, CloudFormation, Pulumi) 100% Infrastructure as Code with version control and peer review

Architecture

How do you run your application workloads?

Directly on VMs or bare metal servers Containerized (Docker) but managed manually Containers orchestrated with Kubernetes or ECS Kubernetes with auto-scaling, namespaces, and resource quotas

Security

How do you manage secrets and sensitive credentials?

Hard-coded in application code or config files Environment variables, not centrally managed Secrets manager (AWS Secrets Manager, HashiCorp Vault, etc.) Centralized vault with automatic rotation and audit logging

Security

Do you have automated security scanning in your pipeline?

No security scanning in place Manual security reviews before major releases Automated vulnerability scanning on code or containers Full DevSecOps pipeline with SAST, DAST, container scanning, and compliance checks

Deployment & DevOps

How do you deploy code to production?

Manual deployment via SSH, FTP, or console Basic CI/CD pipeline but deployments need manual approval Automated CI/CD with testing and staging environments Full CI/CD with canary/blue-green deployments and automatic rollbacks

Deployment & DevOps

How often does your team deploy to production?

Monthly or less frequently Every 1–2 weeks Multiple times per week Multiple times per day (continuous delivery)

Monitoring & Reliability

What level of monitoring do you have in place?

No monitoring — we find out about issues from users Basic uptime checks and server metrics Application-level monitoring with alerts (Datadog, New Relic, etc.) Full observability stack: metrics, logs, traces, SLOs, and automated incident response

Monitoring & Reliability

Do you have a disaster recovery plan and test it regularly?

No disaster recovery plan exists We have backups but no formal DR plan or testing Documented DR plan with periodic testing Multi-region DR with automated failover and regular chaos engineering tests

Monitoring & Reliability

What is your current platform uptime?

We don’t track uptime formally Below 99% — we experience regular outages 99%–99.9% — occasional incidents 99.9%+ with SLOs and error budgets

Cost Optimization

How do you manage and optimize cloud spending?

We don’t actively monitor cloud costs We review the monthly bill but don’t optimize We use reserved instances and basic cost alerts FinOps practice with real-time dashboards, rightsizing, and cost allocation by team/product

Cost Optimization

Do you use auto-scaling for your compute resources?

No — resources are statically provisioned Basic auto-scaling on some workloads Auto-scaling on all production workloads with defined thresholds Predictive auto-scaling with historical data analysis and pre-warming

Security

What is your compliance and audit posture?

No compliance certifications or formal audit process Aware of requirements but not yet compliant Working toward SOC 2 or PCI-DSS certification Fully certified (SOC 2, PCI-DSS, ISO 27001) with continuous compliance monitoring

Get Your Cloud Readiness Score.

How is your cloud infrastructure defined and managed?

How do you run your application workloads?

How do you manage secrets and sensitive credentials?

Do you have automated security scanning in your pipeline?

How do you deploy code to production?

How often does your team deploy to production?

What level of monitoring do you have in place?

Do you have a disaster recovery plan and test it regularly?

What is your current platform uptime?

How do you manage and optimize cloud spending?

Do you use auto-scaling for your compute resources?

What is your compliance and audit posture?

Your score is ready.

Calculating...

Score Breakdown by Category

⚠ Top Risks Identified

✓ Top Recommendations

Ready to improve your score?