Managed Services for Your
Open Telekom Cloud (OTC)
Germany's most secure cloud – professionally operated by us. We manage ECS, VPC and Kubernetes so you can focus on your business.
Standard Cloud with Enterprise Security.
Open Telekom Cloud offers everything you expect from a modern cloud: Virtual machines (ECS), private networks (VPC) and scalable storage. The difference lies in security (BSI C5) and technology (OpenStack). But OpenStack can be complex. We take over the administration. We configure your security groups, manage floating IPs and ensure your Elastic Cloud Servers actually scale elastically.
ECS Management (Servers)
We manage the Linux OS on your instances. Updates, monitoring, user management. Whether Ubuntu, Debian or Enterprise Linux (RHEL/SLES).
VPC & Networking
We configure your private network. Subnets, VPN tunnels to the office and Load Balancer (ELB) for high availability.
Storage & Backup
Setup of automatic snapshots (CSBS) and backups to Object Storage (OBS) – Telekom's S3-compatible storage solution.
Scope of Service
What you get for your monthly flat rate.
OS Patch Management
Security updates for Debian, Ubuntu, RHEL, SLES. Scheduled reboots in maintenance windows.
VPC Configuration
Subnets, security groups, VPN gateways and Elastic Load Balancer for your infrastructure.
Security Groups
Configuration of OpenStack security groups following the principle of least privilege.
Incident Response
When monitoring alerts, we respond. Including escalation to T-Systems for platform issues.
CBR Backup
Cloud Backup and Recovery for VM snapshots plus file-level backups to Object Storage (OBS).
CCE Kubernetes
Management of Cloud Container Engine: node pool updates, persistent volumes and cluster scaling.
Focus: BSI C5 & Compliance
The most secure cloud for regulated industries.
German Sovereignty
- BSI C5 certified infrastructure
- OpenStack-based (Terraform compatible)
- VPC with private subnets
- Elastic Load Balancer (ELB)
- S3-compatible Object Storage (OBS)
BSI C5 Certified
Highest security standards for government, healthcare and financial sector.
The Process: OTC Adoption
Switching to managed operations is this easy.
Audit
We check current state (security, updates, backups)
Hardening
We close security gaps and set up IAM users
Onboarding
Installation of our monitoring agents
Operations
Ongoing support at a fixed price
The secure cloud, professionally operated
BSI C5 compliance without headaches. We manage your OTC infrastructure.
Manage Your Stack in the Customer Portal
Monitor your infrastructure in real-time, schedule maintenance and get direct support – all in one central portal.
- Real-time infrastructure status
- Reschedule maintenance windows yourself
- View complete access logs
- Direct support without detours
Frequently Asked Questions
Everything about ECS, VPC, Kubernetes and compliance
Topics
Cloud Basics (ECS & VPC)
We primarily take care of the Elastic Cloud Servers (ECS) – your virtual machines. We keep the operating system up to date, monitor services and configure the upstream firewalls (Security Groups). We make sure the foundation runs smoothly.
In principle: Yes. You get VMs and networks. But under the hood it runs OpenStack. This makes it extremely flexible, but often more complex to operate than Hetzner. We navigate through the console for you and use APIs to avoid errors.
Yes. We isolate your databases in private subnets that are not accessible from the internet, and configure Load Balancers (ELB) that cleanly distribute traffic to your web servers.
We set up VPN gateways (IPsec) or Direct Connects. This way your employees can securely access internal servers as if they were in the next room.
OpenStack & Automation
Yes. Since OTC is based on OpenStack, it can be excellently controlled with Terraform ('Infrastructure as Code'). We build your environment so that it's reproducible at any time – no manual click errors.
Yes. The concepts are very similar (EC2 = ECS, S3 = OBS, VPC = VPC). We help you 'translate' your application to the Telekom Cloud and securely bring your data to Germany.
Security & Compliance
If you have BSI C5 certification or special compliance requirements (e.g. in healthcare or government), OTC is often the only option. We ensure that the operation of this secure infrastructure also meets the highest standards.
We use OTC's Identity and Access Management (IAM). Every admin gets their own user with 2-factor authentication (MFA). We assign permissions according to the 'need-to-know' principle.
Container & Kubernetes
Yes. CCE is Telekom's 'Managed Kubernetes'. We handle cluster updates and node scaling. You simply deploy your containers.
We use OTC's Software Repository for Container (SWR) service. It's a private registry that stores your images securely and performantly in the Telekom network.
Operations & Support
No. You create an IAM user for us with technical permissions. We never access your contract data or invoices.
All common Linux distributions that run on OTC: Ubuntu, Debian, CentOS/Rocky, as well as enterprise systems like SUSE (SLES) and Red Hat (RHEL).
We use the Cloud Backup and Recovery (CBR) service for whole-machine snapshots and often supplement this with file-level backups to Object Storage (OBS) to be able to restore individual files granularly.
Yes. WZ-IT is a German company. Our support speaks German and English. We are your direct contact and escalate platform issues to T-Systems support for you.
Yes. We can implement scenarios where sensitive data resides in OTC (for compliance), but compute-intensive workloads run on cheaper Hetzner servers – connected via VPN.
We charge a service fee for our operational work. You pay the cloud costs (consumption) directly to Telekom. This gives you full transparency.
More questions? We are happy to help!
Industry-leading companies rely on us
What do our customers say?
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea – we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Trusted by leading companies
Timo Wevelsiep & Robin Zins
CEOs of WZ-IT