DEEN
WZ-IT Logo
MANAGED STACKIT

Managed STACKIT VMs: Linux administration and cloud operations

We take over the agreed operation of suitable Linux VMs and clearly scope SKE, databases, networking, and other platform services. Resources and the provider contract remain in your account.

Linux VMs & platform services

Systems in customer account

Monitoring around the clock

Response by service level

Configure STACKIT operationsGo to server audit

Companies worldwide trust WZ-IT

Reviews

The following are trademarks of their respective owners: STACKIT (STACKIT GmbH & Co. KG (Schwarz Gruppe)). WZ-IT is an independent service provider and has no business, partnership, or contractual relationship with these companies. We offer independent migration, installation, hosting, and operations services.

Companies worldwide trust WZ-IT

Stadtwerke BrühlDGHO e.V.ABCO Water SystemsGolem.deEVADXBnextGYMAInergyml&sOdiseo SolutionsAnnotaARGESweetConnect GmbH
Read client reviews

Service scope

Monitoring or full operations

Monitoring Only from €79.90Server operations from €149.90

With Monitoring Only, alerts go to your team; response by WZ-IT is not included. Standard Linux VM operations start at €149.90. Kubernetes, managed databases, multi-account setups, and further cloud services are scoped individually. This also applies to complex STACKIT VMs environments.

Configure server operationsPricing and service levels

Operate STACKIT infrastructure with clear ownership

STACKIT is the cloud platform of the Schwarz Group and documents EU headquarters and data centers in Germany and Austria. The audit determines whether location, provider structure, contracts, and scope match your requirements.

Provider attestations and certificates cover defined platform controls. Secure configuration, workloads, identities, data, and customer organizational controls remain separate.

We take over documented guest operations for suitable Linux VMs. SKE, managed databases, backup, and platform services are agreed separately according to their provider and customer responsibilities.

Because shared responsibility applies in a sovereign cloud too: STACKIT operates the platform, but the guest operating system, patches, applications and the response to monitoring alerts remain with you as the customer. That is exactly the part we take over. And if you want to build your own virtualization layer on STACKIT, we also support you with Proxmox on STACKIT.

European Cloud Option

STACKIT is headquartered in the EU and documents data centers in Germany and Austria. We assess legal and technical suitability for each project.

Reviewable Provider Evidence

C5 attestation, certificates, and service descriptions are assessed against the customer, workload, and compliance scope.

Operations in the Customer Account

The provider contract, resources, and billing remain with the customer. WZ-IT receives separate technical access for the agreed scope.

STACKIT service areas

Which STACKIT services we design, integrate, and operate

Ongoing operations do not stop at the Linux guest. Depending on the environment, we also cover networking, Kubernetes, data services, recovery, automation, and coordination with STACKIT, with a documented boundary between the provider, WZ-IT, and your team.

01Compute & Linux operations

Operate STACKIT servers as production systems

We take over existing or new Linux VMs from baseline configuration through ongoing operations. This includes more than updates: a known system state, controlled changes, and application-aware troubleshooting.

Responsibility boundary

STACKIT is responsible for the compute platform and underlying infrastructure. The operating system, installed services, access, and applications remain customer responsibilities until WZ-IT explicitly takes them over.

Specific scope

  • Sizing and selection of STACKIT Server, images, and Block Storage
  • Linux hardening, SSH access, system roles, and documented administration paths
  • Operating-system and security updates through Server Update Management or agreed operating paths
  • Operations for Docker, reverse proxies, databases, and agreed application services
  • Automation through the STACKIT API, CLI, Terraform, Server Agent, and Run Command by scope

Outcome

A documented VM baseline that keeps applications, maintenance, and incident response manageable over time.

02Networking & access

Design networks, security groups, and administrative access together

Production cloud systems need more than a public IP. We structure virtual networks, subnets, security groups, load balancing, and management access around the application and its protection requirements.

Responsibility boundary

STACKIT provides networking and security features. Topology, rules, approved data flows, and external-network integration must be designed and maintained in the customer's context.

Specific scope

  • Network and subnet design separating frontend, application, database, and management tiers
  • Least-privilege security-group rules and documented communication paths
  • Integration of STACKIT Network Load Balancer, DNS, Public IPs, and private endpoints as required
  • Site-to-site, client VPN, and hybrid connectivity to sites or other clouds
  • Separate technical identities, roles, and traceable access paths for WZ-IT

Outcome

A network architecture with explainable data flows instead of accumulated one-off rules.

03SKE & platform services

Fit Kubernetes and managed services into the operating model

With SKE and managed databases, part of the platform is already managed. We take over the remaining integration and operations work for nodes, workloads, add-ons, data, access, and applications.

Responsibility boundary

STACKIT operates the SKE control plane. Kubernetes objects, workloads, add-ons, persistent data, and application functionality still require separate protection and operations.

Specific scope

  • SKE cluster design, node pools, ingress, certificates, and network integration
  • GitOps, deployments, secrets, policies, observability, and capacity management
  • Integration of STACKIT PostgreSQL, MariaDB, MongoDB, Redis, or RabbitMQ after product assessment
  • Application integration with STACKIT Object Storage, Block Storage, Secrets Manager, and KMS
  • Upgrade, test, and rollback procedures for add-ons and production workloads

Outcome

A platform scope that does not confuse provider services with the customer's remaining operating duties.

04Backup & recovery

Take backups from product feature to tested recovery

Server Backup Management creates crash-consistent backups. For reliable recovery, we add retention, application awareness, failure-domain separation, and regular restore procedures.

Responsibility boundary

An enabled backup feature is not yet a complete recovery design. Recoverability, failure domain, and application-consistent state must be assessed for each workload.

Specific scope

  • Backup schedules and retention for servers and attached volumes
  • Application-consistent protection for databases and stateful services
  • Object Storage with versioning, lifecycle rules, and Object Lock where suitable
  • Protection of Kubernetes objects, configuration, and persistent application data
  • Documented restore tests and alignment of RPO, RTO, and restart sequence

Outcome

A recovery path that is not tested for the first time during an outage.

05Governance, migration & operations

Control the cloud environment, changes, and incidents over time

We connect technical operating tasks with roles, documentation, monitoring, cost control, and a controlled migration path. C5 attestations and other provider evidence are correctly mapped to the customer's own scope.

Responsibility boundary

A provider attestation covers only its documented provider scope. Configuration, applications, data, identities, and the customer's organizational controls remain separate evidence areas.

Specific scope

  • Inventory of projects, resources, dependencies, identities, and costs
  • Landing-zone and role design plus infrastructure as code for repeatable changes
  • 24/7 monitoring and integration of LogMe or existing observability by scope
  • Coordination of provider tickets and technical isolation of STACKIT incidents
  • Migration from AWS, Azure, other infrastructure, or standalone servers with testing and rollback

Outcome

A STACKIT environment with defined responsibilities, repeatable changes, and a reliable operating path.

When STACKIT belongs on the shortlist

Public Sector

For projects whose procurement and security requirements match current STACKIT evidence.

Regulated Industries

For organizations that need to combine provider evidence and their own controls transparently.

Data Sovereignty

For companies placing greater weight on location, provider structure, and portability.

How we take over existing STACKIT environments

The audit first establishes current state, responsibilities, and required action.

  1. 01

    Audit

    Assessment of your STACKIT environment (VMs, Kubernetes, databases, network)

  2. 02

    Hardening

    Security hardening, monitoring setup and documentation

  3. 03

    Onboarding

    Configure monitoring, alert paths, maintenance windows, and documentation

  4. 04

    Operations

    Perform documented operating duties according to the service level

One operating model

One operating model for STACKIT and additional systems

The provider is only one operating location. WZ-IT connects servers, clouds, and on-premises systems into a documented environment with consistent monitoring, controlled access, and one coordinated service level.

Location and control

Contracts, accounts, and administrative control remain with you. We take over the agreed technical operations without moving the infrastructure into a closed hosting product.

Private connectivity

NetBird, WireGuard, or existing site connections integrate further clouds, Proxmox systems, and on-premises networks through controlled paths.

Operations and response

Monitoring, updates, backups, documentation, and incident response are designed across all participating systems and operated according to the selected service level.

STACKIT
Private connectivity
Cloud · Proxmox · On-premises
Monitoring · SLA · Operations
Configure server operationsView hybrid and multi-cloud operations

Discuss STACKIT operations

We assess your environment and clearly scope VMs, SKE, databases, networking, and backup.

Enquiry

What can we take over for you?

Tell us briefly what it is about - we will get back to you within one business day.

Which STACKIT service do you need?

Name the key services and the required responsibility.

How should we get back to you?

We usually respond within one business day. Please do not send access credentials yet.

Frequently Asked Questions about Managed STACKIT

Everything about STACKIT, BSI C5, migration and operations

For suitable Linux VMs, we take over the agreed guest scope including patching, hardening, monitoring, backup management, and documented services. SKE, managed databases, networking, and platform services are scoped separately.

No. STACKIT provides attestations and certificates for defined provider scopes and periods. Configuration, identities, guest operations, applications, data, contracts, and the customer's organizational controls remain separate assessments.

STACKIT positions itself as a European provider headquartered in the EU with data centers in Germany and Austria. Whether this meets a project's legal and regulatory requirements must be assessed individually; WZ-IT does not give a blanket legal guarantee.

We manage suitable Linux VMs and can include SKE, PostgreSQL Flex, MariaDB, MongoDB Flex, Redis, RabbitMQ, Object Storage, and other documented services in an individual scope. Availability, edition, and responsibility are assessed for each service.

STACKIT automates the control plane, upgrades, and parts of monitoring. Workloads, add-ons, access, policies, capacity, and persistent data still require planning. The SKE team backs up the control plane for disaster recovery; cluster data remains the customer's responsibility.

No. Control-plane and etcd backup for disaster recovery is handled by the SKE team. We additionally plan protection of Kubernetes objects, applications, and persistent data under the agreed recovery scope.

STACKIT Server Backup Management creates automated crash-consistent backups. We configure schedules, retention, and monitoring and add application-consistent backups and recovery tests where needed. Object Storage is not automatically a separate failure domain.

Yes. We map services and dependencies, assess portability, data transfer, identities, and operating model, and plan test migration, cutover, and rollback. Containerization does not make migration automatically simple.

Yes. The provider contract, resources, and cloud costs remain with the customer. WZ-IT receives separate, least-privilege technical access for the agreed scope.

Monitoring-only starts at €79.90 net per customer environment and month. Operating a suitable Linux VM starts at €149.90 net per month. SKE, managed databases, and complex cloud environments are priced by scope.

Response time follows the selected service level. Production and Critical include 24/7 response to qualified P1 incidents; provider response and repair times remain separate.

Only after a separate assessment. STACKIT currently describes Confidential Kubernetes as a customer-specific, self-managed platform. Key management, recovery, attestation, and operating responsibilities must be clarified before takeover.

More questions? We are happy to help!

Further guides

In-depth knowledge from our knowledge base.

Outsource server administration

Plan ownership, access, and onboarding

What does server monitoring cost?

Compare self-hosting, SaaS, and managed service

Proxmox on STACKIT

Your own virtualization on sovereign infrastructure

Free intro call

Let's talk about your project - honest and no strings attached

  • Straight with Timo and Robin - no sales team, no pitch
  • An honest take, including when we are not the right fit
  • Concrete next steps for infrastructure, software or AI

No risk: worst case, you leave with a clearer understanding of your project than before.

Timo and Robin, founders of WZ-IT
Jakob Öschlberger
“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Jakob ÖschlbergerInno7 GmbH
Reviews

Operations that visibly relieve customers

Customer feedback on monitoring, updates, maintenance, support and stable production systems.

AInergyAphy AGYonjuKeymateStadtwerke BrühlDGHO e.V.ABCO Water SystemsAnnotaCORGOSRekorderFührerscheinmacherSolidProof
GermanyNetworking & ProvisioningVPNAutomationOperations

“WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.”

Steve Kirchner

Steve Kirchner

Managing Director, nextGYM GmbH

nextGYM GmbHRead the case study
Pascal Block
GermanyProxmox & BackupProxmoxBackupDocumentation
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”

Pascal Block

Project Manager, Stadtwerke Brühl GmbH

Stadtwerke Brühl - municipal energy and infrastructure utility.

Stadtwerke Brühl GmbH
Secure your Proxmox & backup setup
John Hellmerichs
GermanyProxmox & VirtualizationBackupVPNSecurity
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”

John Hellmerichs

Managing Director, AInergy GmbH

AInergy - consultancy for energy and facility management.

AInergy GmbH
Virtualize with Managed Proxmox
Pascal Hakkers
SwitzerlandManaged ProxmoxClusterMonitoringHigh Availability
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”

Pascal Hakkers

Aphy AG

Aphy AG - AI platform for hotel back-office.

Aphy AG
Build a high-availability Proxmox cluster
Christoph Mußmann
GermanyInfrastructure ModernizationData SovereigntyGDPRDocumentation
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”

Christoph Mußmann

Project Officer, DGHO e.V.

DGHO - German Society for Hematology and Medical Oncology.

DGHO e.V.
Modernize your infrastructure - sovereign
Andrea Pawlowski
GermanyArchitecture ConsultingSovereign Software SelectionOpen Source Strategy
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”

Andrea Pawlowski

Communications Manager, Golem.de

Golem.de - leading German IT news outlet.

Golem.de
Plan a sovereign open-source stack
H
GermanyLocal AI IntegrationTechnical IntegrationImplementation
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”

Henrik Jeche

Head of IT Administration

ml&s - full-service provider for the electronics industry.

ml&s
Integrate a local AI solution
Sonja Aßer
GermanySoftware DevelopmentPHP ModernizationAPI Extension
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”

Sonja Aßer

Data Manager, ARGE

ARGE Neue Medien - master data & digital standards for plumbing and building technology.

ARGE
Modernize your legacy software
Aleksandr Shuliko
UAECloud MigrationAWS ExitProxmox81% Cost Reduction
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”

Aleksandr Shuliko

CTO, EVA Real Estate

EVA Real Estate - leading real-estate agency in Dubai.

EVA Real Estate
Cut cloud cost - up to −81%
Matthias Zimmermann
GermanyOpen Source ArchitectureImplementationTechnical Consulting
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”

Matthias Zimmermann

Managing Director, Annota GmbH

Annota - healthtech startup with an AI documentation assistant.

Annota
Design an open-source AI architecture
Sebastian Maier
BulgariaSovereign CollaborationOpen Source StackOperationsMaintenance
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”

Sebastian Maier

Managing Director, Yonju GmbH

Yonju - business coaching and AI products.

Yonju
Get collaboration fully managed
Gabriel Sanz Señor
SpainProduction DeploymentCI/CDPaaSOperations
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”

Gabriel Sanz Señor

Managing Director, Odiseo Solutions

Odiseo Solutions - software engineering for the space industry.

Odiseo Solutions
Ship your prototype to production
Kai Clauß
GermanyNetBird & KubernetesNetBirdKubernetesConsulting
“WZ-IT supported us professionally with the provisioning and setup of NetBird. Alongside the technical implementation, we also received well-founded advice on connecting our Kubernetes clusters. The recommendations were concrete and directly actionable. The collaboration was consistently reliable, fast and on equal terms. We can recommend WZ-IT without reservation.”

Kai Clauß

Head of Development, SweetConnect GmbH

SweetConnect - cross-manufacturer Industry 4.0 platform for confectionery production.

SweetConnect GmbH
Connect sites and clusters securely
Contact

Let's Talk About Your Idea

Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.

Email
[email protected]
Arrange a callback

Callback

Arrange a callback

Leave your number and we will call back — at the latest on the next business day.

For a longer conversation you can book an appointment instead.

Companies worldwide trust WZ-IT

  • ml&s
  • Rekorder
  • Keymate
  • Führerscheinmacher
  • SolidProof
  • ARGE
  • Boese VA
  • nextGYM
  • SweetConnect GmbH
  • Golem.de
  • Millenium
  • Paritel
  • Yonju
  • EVADXB
  • Mr. Clipart
  • Aphy AG
  • Negosh
  • ABCO Water Systems
1/3 - Topic Selection33%

What is your inquiry about?

First select the service area that best matches your project.