Pikas Systems — DevOps, platform & custom software

Platform engineering · Europe

Your platform should stop being the bottleneck.

We design and ship the pipelines, infrastructure-as-code and automation that let your team deploy daily without drama. And when a piece of the product is missing, we build it.

40+ pipelines in production
−71% deploy lead time
EN / ES bilingual team

The work, as it actually looks.

Instruments from a live engagement: a pipeline that moves, a cluster you can explain, alerts that earn the page, and models that stay inside.

deploy.yml
RUNNING
lint + unit queued
build image queued
terraform plan queued
canary 10% queued
promote → prod queued
Delivery pipelines One-command rollback. Canary deploys. Reproducible builds.
prod-eu-1
READY 4/4
A cluster you can explain Named nodes, real CPU, pods that do not flicker.
slo.checkout
LIVE
error budget2.14%
p99118ms
pages this week0
Alerts that earn the page Noisy baseline, a deploy blip, then quiet.
Environment
APPLYING
versioned 100% console 0
$ terraform apply
plan: 12 to add, 0 to change
state: locked · ci
Infrastructure as code One command to rebuild the environment.

What we do

Three fronts, one team: the platform, the AI layer, and the product itself.

Delivery pipelines

GitHub Actions, GitLab CI, Argo. Reproducible builds, canary deploys, one-command rollback.

Infrastructure as code

Terraform and Pulumi with versioned modules, identical environments, zero console drift.

Kubernetes & platform

Clusters your team can reason about: GitOps, autoscaling, policy, cost under control.

Observability

Metrics, logs and traces with SLOs and alerts that only fire when they should.

Migration & automation

We move workloads to AWS, Azure or GCP and automate whatever someone still does by hand.

AI gateways

One entry point for every LLM: keys, quotas, caching, tracing and cost control. When data cannot leave, we self-host the models on your infrastructure.

Custom software

Services, internal APIs and apps built by the same team that will operate them. No handoff to another vendor.

What we also build

We do not only operate platforms. Some pieces we turn into product. The first is ARTEX.

ARTEX · autonomous pentest

A planner decides, workers run real tools, and everything flows back into one map of the target. A pentester that never sleeps — inside your walls.

artexautonomous
planner → intents
workers → facts · findings
goals = proven

It runs inside

One binary with PostgreSQL, on your own infrastructure. The target's traffic and the evidence do not leave for a third-party SaaS.

deployself-hosted
binary1 egressauthorized trafficrecorded datainside

Only for the accountable

A tool that really attacks is only licensed to listed companies and the public sector, under written authorization for every target.

accessnarrow
  • listed✓
  • public sector✓
  • authorizationin writing
auditable
See ARTEX

How we work

The engagement is designed to end.

01
Week 1

Audit

We read your repos, pipelines and cloud bills. You get a map of risks and quick wins.

02
Weeks 2–4

First deploy

One real end-to-end path to production before we touch anything else.

03
Month 2+

Roll out

We extend the pattern across services and teams with reusable modules.

04
Exit

Handover

A pass/fail drill on production, then we leave.

For work that cannot afford theatre.

Three situations we are hired for. The diagram is the brief.

Teams that ship daily

One path to production — with canary and rollback — before we touch the rest.

checkoutp99
  • web-122ms
  • web-226ms
  • api-141ms
  • canary39ms
prod canary

Regulated, before the law

Detection, identity, signed artifacts. A report the board can read.

NIS2art. 21
identityOIDC artifactssigned detecton boardready

Models that stay inside

An AI gateway is not a chat box. It is keys, quotas, traces, and a switch.

gpu-worker-aprivate
resource "vllm_endpoint"
network_interfaces = {
  subnet = private.gpu
  egress = deny
}

What we work with

Tools we have already run in production — not a wish list.

CI/CD
GitHub Actions, GitLab CI, Argo CD, Jenkins, Buildkite, Tekton
IaC
Terraform, Terragrunt, Pulumi, Ansible, Helm, Kustomize
Runtime
Kubernetes, EKS · AKS · GKE, Docker, Nomad, Serverless
Cloud
AWS, Azure, GCP, Cloudflare, Hetzner
Observability
Prometheus, Grafana, OpenTelemetry, Loki, Datadog, PagerDuty, Vector.dev
Security
Vault, OPA · Gatekeeper, Trivy, SOPS, SSO · OIDC, Istio mTLS
AI / LLM
LiteLLM, vLLM, Ollama, Bedrock · Vertex, NVIDIA GPU Operator, pgvector
Code
Go, Python, TypeScript, Rust, C#
< 15 min from commit to production on the pipelines we ship
100% of infrastructure versioned in Git — nothing hand-made in a console
1 cmd to rebuild an entire environment from scratch

Tell us what breaks on Fridays.

Send two lines about your stack. Within 24h you get an initial read and a ballpark quote — no hour-long discovery call required.

hola@pikas.systems
CET · EST — remote
Español · English
avg. reply: 6 business hours