Curtilage · managed technology services

Secure, resilient operations. Cloud, on-prem and private AI.

Curtilage hosts, builds and runs the technology your business depends on — and builds and trains the teams that operate it. We take on the build, the hosting and day-to-day operations, the security and the technology debt, and weigh every one of them against getting to market on time.

Managed services

We build and train teams that build and operate business technology.

Hand us the whole stack or one piece of it. Every engagement balances three things that usually pull against each other: security, technology debt, and time to market.

Managed hosting and operations

Hosting for your applications and data — in your cloud, on your premises, or with us. Monitoring that alerts on exceptions, not noise; backups tested by restoring them; patching, change control, incident response and root-cause analysis.

Managed private AI

Private AI stood up on your own hardware or private cloud, then operated: model updates, access control and usage reporting, so you can see who used what and why.

Security and technology-debt program

A standing program, not a one-time assessment: least-privilege access, no long-lived keys, scanned releases, and a ranked list of technology debt paid down in order of business impact — sized so it never becomes the reason a launch slips.

Teams built, led and handed over

We staff onshore first, then nearshore, then offshore where the work allows — and keep operations onshore, where they work best. We lead the team alongside your managers and hand it over when you are ready.

Team training and enablement

We train your people on best-of-breed technology, techniques and processes: cloud and infrastructure as code, DevOps and release discipline, security controls, data platforms and private AI, and ITIL and Agile delivery — hands-on, on your own systems, so the capability stays when we step back.

Fractional technology leadership

A seasoned technology leader without a full-time hire: roadmap, budget, vendor management and executive reporting, for as long as you need it.

How we engage

Build it, run it, or both — then hand it over.

Teams are staffed onshore first, then nearshore, then offshore — and operations stay onshore, where they work best. Coverage, response times and pricing are set per engagement; we talk them through with you before anything is signed.

Build, then operate

We design and build it with the people who will run it, then operate it until it is steady.

Operate, then transfer

We take over an existing environment, stabilize it, pay down the riskiest debt, and train your team to own it.

Ongoing operations

We stay on as your operations team, with the reporting you would expect from your own staff.

Our experience

From small business to too big to fail.

Our experience runs from small and mid-size businesses to large enterprises, highly regulated firms, a federal banking regulator and institutions considered too big to fail. Each puts different weight on speed, cost, risk and compliance — we balance those business needs with the solution we recommend, rather than bringing the same answer to every size of problem.

Small and mid-size businesses

Where every dollar has to show a return: a software business built and sold, and technology run for franchise and private-equity-backed services companies.

Large enterprises

Aerospace, energy, insurance and financial-services organizations with thousands of users and many teams to keep moving in one direction.

Highly regulated industries

Banking, insurance, healthcare billing, card payments under PCI and federal programs — where audit, privacy and change control are part of the work, not an afterthought.

Regulators and too-big-to-fail institutions

A federal banking regulator acting for the U.S. Treasury, and systemically important banks — where recovery, controls and evidence are held to the highest standard.

A security pedigree, not a startup’s guesswork.

Certified Ethical Hacker (CEH)

Trained to think like an attacker, so FileFerret is built to withstand one. Security is designed in from the first line of code — never bolted on after.

Public Trust clearance

Held a U.S. Public Trust clearance while working with the nation’s central bank — handling information under some of the strictest custody and accountability standards there are.

Fortune 100 & regulated industries

Decades consulting for Fortune 100 organizations and highly regulated sectors, where a single data-handling mistake carries real legal, financial, and reputational weight.

30+ years in the field

More than three decades building and securing systems where confidentiality, accountability, and compliance are not optional — they are the job.

More on the convictions behind the work: About Curtilage →

Our software

Bring the software to your data — not your data to the cloud.

Alongside the services, Curtilage builds private, on-premises software for organizations that can’t hand their most sensitive data to a public cloud — delivered as appliances we ship, install, and support.

Live

FileFerret

Law · Tax · CPA · RIA · defense

Private AI document search, shipped & supported.

Semantic search and cited answers across your firm’s documents, images, audio, and video — delivered as a turnkey appliance we ship, install, and support, with nothing ever leaving your network. Built by Acknowledged Development Inc.

Explore FileFerret →
Live

Sensitive-Data Discovery

GLBA · FTC Safeguards · IRS 4557 · CMMC/CUI

Find your CUI before your assessor does.

Point it at your file shares and it shows where personally identifiable information, privileged material, and Controlled Unclassified Information markings actually live — a clear report of what’s where, so you can prove you know your data and bring the exposed material under control.

Explore Sensitive-Data Discovery →
Live

PulseWatch

Websites · mail · DNS · servers

Know before your customers do.

When a website goes down, a mail server stops answering, or a Transport Layer Security (TLS) certificate quietly expires, you usually hear about it first from an unhappy customer. PulseWatch checks your websites, mail servers, Domain Name System (DNS) records, ports and hosts around the clock, emails you when a check keeps failing and again when it recovers, and warns you before a certificate expires.

Explore PulseWatch →

Shipped, installed & supported. Every Curtilage software solution runs on a private deployment on your premises.

  • Hardware + software, delivered
  • Ongoing support & updates
  • Nothing in our cloud

The problem we solve

Modern capability shouldn’t cost you control of your data.

The best tools increasingly assume your data lives in someone else’s cloud. For confidentiality-bound work, that trade is unacceptable. Curtilage closes the gap: the same modern capability, kept entirely inside your walls.

Confidentiality is non-negotiable

The problem

The cloud and SaaS playbook is to send your data to someone else’s servers. For privileged, regulated, or classified work, that hands custody of your most sensitive material to vendors, subprocessors, and support staff you’ll never meet.

Our approach

Curtilage runs the software where the data already lives — inside your own network. Nothing is copied out to an outside cloud, so confidentiality is a fact of the architecture, not a promise in a policy.

Compliance & data residency

The problem

Mandates like privilege rules, GLBA, HIPAA, CMMC, ITAR, and data-residency laws expect you to know exactly where your data is and who can reach it — answers a multi-tenant cloud can’t always give you.

Our approach

When the system sits on your premises, the data stays under your physical control and your jurisdiction, with a complete audit trail of who did what. The hard compliance questions answer themselves.

Own your tools, predict your costs

The problem

Per-seat, per-use, and pay-as-you-go pricing punishes you for growing, while a vendor can change terms, raise prices, or sunset the product and strand you — with your data locked behind their account.

Our approach

We ship hardware and software together and support it for years at a fixed, predictable cost. No metering, no lock-in, no account anyone else can suspend — the tools are yours.

Resilience on your terms

The problem

A cloud outage, a suspended account, or a severed connection can cut you off from your own systems at the worst possible moment — on the vendor’s schedule, not yours.

Our approach

On-premises means it keeps working even when the public internet doesn’t. You control uptime, upgrades, and backups — including encrypted offsite copies in locations you choose.

Why “Curtilage”

A private perimeter around your data — by name.

The name is a promise. We picked a legal term for the most protected private ground there is, because that is what every product is built to give your data.

cur·ti·lage

In law, the curtilage is the enclosed ground immediately around a home — the yard, the fence line, the private space the law treats as part of the home itself.

Where privacy is strongest

It is the area where you have the highest expectation of privacy — the ground the Fourth Amendment protects most closely. What happens inside it is nobody else’s business.

Your data’s curtilage

That is exactly what we build: a private perimeter around your data and the tools that work on it. The .zone is that protected ground — yours, under your control, with nothing crossing the fence.

Tell us what you run — and what keeps you up at night.

Cloud, on-prem, private AI, or a team that needs building. We’ll talk it through and tell you plainly where we can help and where we can’t.