Every good solution starts with the right question.
Whatever your information technology needs, if you are looking for consulting where the right questions are asked and the right solutions are built for them, we provide support and consulting within a professional services framework.
When building the core of your network, we use open-source software and enterprise products from leading technology vendors to create the solution that fits you best.
Pick a question
Different approaches to your IT infrastructure
If a server fails, how long does our business stop?IT Infrastructure Consulting
If you're building your IT infrastructure for the first time, we design a solid, reliable, easy-to-maintain and scalable setup with you. If you already have one, we find the gaps and strengthen it step by step along a clear roadmap.
What we ask first
- Which system, if it stopped, would stop your business?
- Do you depend on a single server, or a single person, anywhere?
- How much will your team and your data grow in the next two years?
- Do your licences and contracts match how you actually use them?
What we do
- Analysis of your current infrastructure (performance, capacity, suitability, compliance)
- Infrastructure design that puts business continuity first
- Virtualisation, network and storage architecture
- Backup and disaster recovery planning
- A prioritised roadmap, and its implementation
- Installation, documentation and handover to your team
- Backups✓ tested
- Firewall✓ up to date
- Servers✓ monitored
- Support requests✓ answered
First step: Working out together which system, if it stopped, would stop the business.
If someone broke in, how long until we noticed?Security and Audit
Who connected to which system, when, how, and what data did they touch? We set up monitoring that makes these questions easy to answer, close the gaps in order of priority and prepare you for mandatory audits.
What we ask first
- Are your logs collected in one place, and who looks at them?
- When were your firewall rules last reviewed?
- When someone leaves, how quickly is their access removed?
- Is there a standard or audit you must comply with (KVKK, GDPR, ISO 27001, etc.)?
What we do
- Security assessment and a prioritised findings report
- Setting up monitoring and log collection
- Reviewing and simplifying firewall rules
- Checking user permissions and roles, password policies
- Finding outdated or unused software
- Pre-audit compliance report, roadmap and support through the audit
- Failed logins✕ repeated attempts
- Alert✓ immediately
- Account✓ locked
First step: A security assessment: logs, firewall, permissions.
Log monitoring: what you learn in the first 30 days →Who calls our APIs, and how often?API Security
Every API you expose is a door into your environment. We route all requests through an API Gateway and bring authentication, authorisation, rate limiting and logging into one place. Depending on the need, we set up open-source or enterprise gateway solutions.
What we ask first
- How many APIs do you have, and which are exposed to the outside?
- Do you know who every request comes from?
- What happens if one client sends thousands of requests per second?
- Where are API keys stored, and when were they last rotated?
What we do
- API inventory and risk assessment
- API Gateway setup: open source or enterprise
- Authentication and authorisation (OAuth 2.0, JWT, mTLS)
- Rate limiting and abuse protection
- Request logging, monitoring and alerts
- Versioning and API documentation
- Verified requests✓ passed
- Request without identity✕ blocked
- Over the limit✕ throttled
First step: An inventory of exposed APIs and a week of traffic logs.
Why are our systems so slow?Performance and Monitoring
We monitor your servers and applications and find idle or overloaded resources. We show the cause with data and fix it with lasting configuration changes.
What we ask first
- At what times, and in which tasks, does it slow down?
- Are your systems monitored today, and who gets the alerts?
- How much of your capacity is actually being used?
- Did it start after a recent change?
What we do
- Setting up performance monitoring
- Bottleneck and capacity analysis
- Tuning databases, operating systems and applications
- Meaningful alerts, without the noise
- Finding idle resources and cutting costs
- Bottleneckdisk queue
- Response time✓ back to normal
- Evidence✓ measured
First step: Putting the systems under monitoring for a few days to collect data.
Log monitoring: what you learn in the first 30 days →5 places to check first when systems slow down →We do the same tasks by hand every day.Automation
We turn defined, constantly repeated manual tasks into automated jobs the system runs. Work gets faster, errors drop and your team moves on to work that adds value.
What we ask first
- Which task is done the same way every day or every week?
- How many hours a week does it take, and what happens when it goes wrong?
- Where does the data come from, and where does it need to go?
- Who does it today, and is the process written down?
What we do
- Process analysis and prioritising what to automate
- Automating server installation and configuration
- Generating reports and data transfers automatically
- Scheduling and tracking routine maintenance
- Setting up and documenting the infrastructure it needs
- Weekly report✓ ready every morning
- New user✓ set up in minutes
- Manual steps✓ none
First step: A list of repetitive tasks and how many hours a week each takes.
What should you automate? A simple calculation →We can't find the software we need.Software Development
We solve processes that off-the-shelf software doesn't cover, and integration problems between your systems, with applications that fit your budget and are easy to maintain.
What we ask first
- How does this process run today, on spreadsheets or by email?
- Who will use it, and which systems does it need to talk to?
- What is the smallest version that would already be useful?
- Who will develop and maintain it later?
What we do
- Requirements analysis and project plan
- Web-based internal applications
- System integrations and data transfers
- Testing, deployment and documentation
- Support and further development after launch
- Multi-tab spreadsheet✕ retired
- One screen✓ everyone on the same data
- Changes✓ logged
First step: Listening, step by step, to how the process runs today.
Teklif: from spreadsheets to a web-based application →What should you automate? A simple calculation →How can we use AI in our business?AI
We use AI for work that can be measured, not because it's fashionable. We decide together where your data stays: we run open-source models on your own servers, or connect enterprise services securely.
What we ask first
- Which task repeats and runs on documents or text?
- Can your data leave the company (KVKK, GDPR)?
- How will we measure success: time, errors or cost?
- Which of your systems does it need to talk to?
What we do
- Choosing the use case and running a small trial
- A question-answering assistant over company documents that cites its sources
- Running open-source models on your own servers
- Secure integration of enterprise AI services
- Access control, logging and cost tracking
- Measuring results and training your team
- Model✓ on your own server
- Data✓ stayed in the company
- Answer✓ cites its sources
First step: Picking one task and measuring it with a small trial.
Teklif: from spreadsheets to a web-based application →
Why Sorgu?
Because we start every job by questioning. Our motto is "the right question brings the right solution". We apply it in our name, our logo and the way we work.
Answers from the field
Notes from real work. Plain language for managers, details for technical teams.