Auth, permissions, and audit as integral platform parts - not bolt-on add-ons. We build platforms where tenant isolation, compliance, and support workflows work from day one.
Companies worldwide trust WZ-IT
The first 80 percent of any member or tenant platform are built in two weeks. The last 20 percent - impersonation for support, audit-grade logs, soft delete without data loss, safe permission inheritance, MFA onboarding without lockouts - eat three months if not planned from the start.
We bring architecture patterns from production platforms. You skip the tuition phase and start with a model that survives audit number five.
Login, single sign-on against your existing identity provider, OIDC or SAML integration - vendor-independent, self-hosted on request. Accounts can be deactivated without losing audit history.
Global roles, tenant level, project or site level, optionally down to individual devices or records. Inheritance and exceptions cleanly modeled - and anchored deep in the data model, not just in the UI.
Every write action is logged - who changed what when, from where. When an admin acts on behalf of an end customer (support case), the admin identity stays in the log - accountability is preserved.
Multi-tier throttling against brute-force attacks, detection of unusual login patterns, generic error messages without data leakage. Optional multi-factor layer for sensitive areas.
API keys, stored credentials, and sensitive configurations are encrypted at rest. Per-install key, key rotation without downtime - even when compliance requirements demand it.
Tenant isolation is enforced at the database level - not just in the application. So separation holds even when an endpoint forgets a check. Defense-in-depth instead of blind trust in the frontend.
A SaaS product distributed by reseller partners to their end customers. Reseller admin sees all their own end customers, end customers see only themselves, platform operator sees everything and can intervene - all in one code base.
Associations, federations, cooperatives - with roles (board, member, guest), membership fee workflows, elections, and resolutions. Including privacy-focused data handling and right to forget.
Tools for your staff to manage customers, tickets, devices, or licenses. Single sign-on against your existing IdP, audit trail per action, export for compliance reports.
Per-tenant features, limits, UI branding. Self-service configuration by the tenant admin, centrally controlled by the platform operator. Feature toggles as first-class citizens.
Member and tenant platforms usually live in the context of other platform jobs. We combine them seamlessly with remote site management, custom dashboards, or classical business apps.
Scoping Sprint
Requirements, target architecture and effort are clarified. The result is a fixed-price offer for implementation.
Enquiry
Name target groups, roles, operational processes, and existing data sources.
Answers to the most important questions
Depends on the goal. For fast time-to-market and SaaS: Supabase. For enterprise compliance with SAML/OIDC and existing IdP landscape: Keycloak. For modern lightweight self-hosting: Authentik. We decide jointly in the workshop and advise vendor-neutrally.
Yes. We encapsulate auth behind a service layer in the API, so a switch from Supabase to Keycloak (or the other way around) is possible without losing permissions or audit data. It is an architectural effort, not a data-loss risk.
You pay a fixed price that we determine in a scoping sprint with a defined scope - scoped individually to your feature set, from a lean MVP with auth, tenant model, audit, and one permission level to a full platform with multi-level permissions, impersonation, MFA, and self-service tenant config. Instead of unpredictable per-user or per-seat license costs, you get predictable one-time project costs with no surprises as you grow.
MVP: 6-10 weeks. Full build: 4-8 months. We ship in iterative releases - usually something usable is in production by week 4.
Not necessarily. We host in European data centers (Hetzner, IONOS, OVHcloud, STACKIT) - privacy-focused, with dedicated VPC on request. Alternatively the platform runs on your Proxmox infrastructure or in a hyperscaler of your choice.
Default: all data in the EU, backups in the EU, no transfer to third countries. On request we document this in a data protection concept document you can attach to processor agreements.
No risk: worst case, you leave with a clearer understanding of your project than before.
“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Proof for modernization, API extension, architecture, deployment and ongoing operations.
“WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.”
Steve Kirchner
Managing Director, nextGYM GmbH
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
Andrea Pawlowski
Communications Manager, Golem.de
Golem.de - leading German IT news outlet.
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
Pascal Hakkers
Aphy AG
Aphy AG - AI platform for hotel back-office.
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
Sebastian Maier
Managing Director, Yonju GmbH
Yonju - business coaching and AI products.
11.05.2026
On 3 May 2026 the Vaultwarden maintainer team released version 1.36.0 — closing six security advisories, one of which is a server-side request forgery that...
01.04.2026
If you're looking for an Okta or Auth0 alternative, two open-source projects quickly rise to the top: Authentik and Zitadel. Both solve the same problem...
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Companies worldwide trust WZ-IT
