TECHPERFORMANCE
Alternative to managed cloud

Managed operations, real team. Your tech stack, turnkey.

Tech Performance bundles infrastructure, performance, security and continuous updates into a single fee. Strategy, devops, h24 monitoring and hardware/software support: all under one team that knows your stack. Not a generic helpdesk, not a hyperscaler bill that explodes.

  • Direct support, one dedicated team
  • Predictable cost, up to 50% less than hyperscalers
  • Modular: scale with the contract, no painful re-migration
tp.grafana / production / overview
LIVE Last 24h
Uptime
99.99%
Latency p99
42ms
RPS (avg)
12.4k
Active alerts
0
All systems operational
requests / sec • last 24h
edge origin
00:0006:0012:0018:00now
Sites that can’t afford downtime rely on us
40M+
aggregate monthly visits
across the entire managed portfolio.
99.9%
historical uptime
measured, not promised.
10+
years of partnership
same team, same craft.
GDPR Compliance EU Data Residency TLS 1.3 + WAF ModSecurity CIS-aligned Hardening On-premise AI lab · privacy-first
The problem

Generic hosting, hyperscalers, ticket-driven agencies: every standard road leads to a dead end.

The off-the-shelf options shift the problem instead of solving it. Here’s what really happens when your tech stack isn’t in expert hands.

01
// cloud

Hyperscalers: pricey, generic, blind to your real workload.

AWS, Azure, GCP charge by instance, not by understanding your stack. Without an in-house FinOps team the bill stays unpredictable, and you get neither capacity planning nor fine-grained tuning. Cost/performance worse than a well-tuned dedicated VPS. And you keep paying the gap.

02
// hosting

Traditional hosting: shared, interchangeable, nobody’s.

Hundreds of sites packed onto the same server, and behind the support desk a rotating cast of operators who never really know your stack. No continuity of person, no real understanding, no strategic guidance. When something breaks you start over every single time.

03
// ops

Operations on sight: no proactive monitoring, no real pipeline.

Without predictive alerting, continuous log analysis and a real CI/CD, every problem reaches you only when a customer calls. Errors pile up in logs and nobody reads them, regressions slip into production, rollbacks are manual maneuvers under stress. Stability by sheer luck.

04
// perf

Performance slips away, month after month.

Response times, slow queries, sudden traffic peaks, Core Web Vitals on the slide: you collect Real User Monitoring data, your provider doesn’t look at it. They know how to answer a ticket, not how to build a continuous tuning plan. You lose speed, you lose ranking. And you keep paying for not having one.

The solution

One product, four pillars, one team that owns your stack.

Tech Performance is not hosting. It’s proprietary technology + a managed-services team: tailor-made infrastructure, continuous optimisation, security and orchestrated updates. Modular from a single site to an HA cluster.

01 / Infrastructure Management

Tailor-made infrastructure, sized to your project.

No shared hosting, no hyperscaler bill. Dedicated cloud VPS with guaranteed resources, sized to your real traffic. When needed, we scale to a multi-node HA cluster with automatic failover, but only if the project really requires it.

  • Dedicated VPS → HA cluster, same squad.
  • Server and application stack picked to match the actual workload — editorial, API, custom backend.
  • EU datacenters, DNS and routing included, no cross-border transfer.
cluster / topology
Modular
Edge LB DC-MILANO DC-FRANKFURT node-a ● active node-b ● active node-c ● active node-d ○ standby db-primary db-replica
# roles/web/tasks/main.yml
- name: "Provision web server with hardened defaults"
  hosts: web
  become: true
  vars:
    tls_min: "TLSv1.3"
  tasks:
    - name: "Install web server package"
      apt:
        name: {{ web_server_pkg }}
        state: present
    - name: "Render server config"
      template:
        src: server.conf.j2
        dest: /etc/{{ web_server_pkg }}/server.conf
      notify: "reload web server"
    - name: "Verify TLS profile"
      command: /usr/local/bin/tls-check.sh
      register: tls
      changed_when: false
deploy.yml
CI Pipeline
  1. 1lint & ansible-syntax
  2. 2deploy → stage
  3. 3smoke + perf gates
  4. 4canary 10% → 100%
  5. 5auto-rollback on err-rate
last run: passed · 2m 14s
02 / Continuous Updates

OS, web server, applications: orchestrated updates without interruption.

Server and application stack tuned on your real workload. Application code, dependencies, security patches, operating system: every layer is updated in an agreed window with tested rollback. You no longer think about who and when has to do what.

  • OS and web server patches, weekly.
  • Application core and dependencies, controlled deploy.
  • Zero-downtime CI/CD where applicable.
03 / Performance & Operations

End-to-end tuning, h24 monitoring and intervention within an hour.

Observability stack with Prometheus + Grafana + Loki: dashboards, centralised logs, predictive alerting on anomalies. We optimise the whole stack: database, cache, application, CDN, assets. Core Web Vitals in the green zone as a natural consequence. H24/7 monitoring with multi-channel alerts (email, app, phone call) and intervention guaranteed within one hour during business hours. The call is always with an SRE, not with a first-level dispatcher.

  • Iterative DB, cache and application tuning.
  • Quarterly capacity planning, no surprises on peaks.
  • Intervention within 1h, direct escalation to SRE.
core-web-vitals / 30 days
field datapassing
LCP
1.6s
INP
142ms
CLS
0.04
TTFB
210ms
capacity ceiling
[tuning round] p99 latency −38% after query refactor · cache hit rate +14pt.
defense.in.depth / 5 layers
All layers active
L5
Cloudflare WAF
edge / DDoS · bot mgmt · rate-limit
on
L4
Edge Firewall
iptables · fail2ban · geo-rules
on
L3
Application WAF
ModSecurity · OWASP CRS 4
on
L2
TLS 1.3
HSTS · OCSP stapling · ECDSA P-256
on
L1
Hardened OS
CIS-aligned · auditd · auto-patching
on
Backup verification
last restore: OK
3.4 GB · 2026-05-02 · 04:11 UTC
Data residency
EU only · DE / IT
no cross-border transfer
04 / Security & Reliability

Layered security and backups that actually work.

iptables firewall, fail2ban anti brute-force, TLS 1.3, CIS-aligned hardening. Daily incremental backup on offsite storage (S3-compatible), customisable retention, restore actually tested. Five layers of defense in depth, all within EU borders.

  • Daily offsite backup, custom retention.
  • fail2ban + iptables + TLS 1.3 default.
  • Periodic restore drill, GDPR + EU residency.
The real thing

Real dashboards, not stock illustrations.

This is the actual control plane we run every day: Proxmox virtualization, live resource metrics, orchestrated backups. Same tools, same discipline we apply to your stack.

Proxmox VE — live node overview: CPU, RAM, storage, I/O delay and 24h usage graph.
Proxmox VE — live node overview: CPU, RAM, storage, I/O delay and 24h usage graph.
European data centers, dedicated resources
Live metrics via Prometheus + Grafana
Orchestrated, verified backups (PBS)
How it works

Three steps. A team that actually follows you, from the first audit to day-to-day.

From the initial audit to set & forget in a few weeks. No rewrites, no lock-in, no end-of-month surprises.

01

Audit & strategy

We analyse stack, traffic, plugins, critical dependencies and business goals. We decide together on the strategy: single VPS, multi-site on shared resources, HA cluster. Technical report with cost estimate.

~ 1 week
02

Setup & migration

Provisioning of the new environment, data replication, parallel testing, article archive and SEO preserved. Cutover in an agreed window, zero-downtime when possible. Single site in 5–7 days, multi-site network in 2–3 weeks, HA cluster up to 30 days.

single site 5–7d · network 2–3w · HA cluster up to 30d
03

Set & forget

h24 monitoring, intervention within 1h, orchestrated updates, verified restore, proactive decisions. You work on your product, we keep your tech stack in expert hands.

on-going
Case studies

Who entrusts their stack to Tech Performance.

Editorial digital, e-commerce, B2B SaaS, sports clubs: different workloads, same operating model. Same Romiltec team across all configurations, real engineers instead of a ticket system. And next to every case, the fee band: we have nothing to hide on numbers.

Caffeina Media + NEM Network · 40+ titles
20M+
aggregate monthly visits

"An international network with Italian magazines and foreign-language editions, all on the same operating model. No different providers, one team that owns the whole stack."

Network band · from ~€900/mo, all included
Equivalent stack on AWS: ~€2,400–5,000/mo between infrastructure and DevOps
Technical Direction
Caffeina Media + NEM
Yobee Network Network · 10 sites
~3M
aggregate monthly views

"Ten sites, one technical squad. No different providers, no ticket system, one team that owns your stack."

Network band · multi-site
On per-site managed platforms: thousands of $/mo for ten sites at this traffic
Technical Direction
Yobee SRL · Milan
Hall of Series Editorial · 3y
0 downtime
daily deploys

"We publish dozens of articles a day, we can’t stop for a deploy. Tech Performance made this possible."

Editorial+ band · flat fee
Managed WP at this traffic: Business plans plus visit overages
Tech Lead
Hall of Series
Pisa Sporting Club Sport · Serie A
match-day
traffic peaks handled

"On match day traffic explodes. The infrastructure holds — and on Mondays we get a real call on what to optimise next, not a ticket."

Network band · peaks included
On usage-based cloud, match-day is billed as a spike. Here it is in the fee.
Digital Direction
Pisa Sporting Club · Serie A
Scordia.info Local outlet
< 1h
guaranteed intervention

"A local outlet needs the same seriousness as a large network. Tech Performance gives us that at a sustainable fee."

Editorial band · ~€250/year
Less than a Kinsta Starter plan ($35/mo), with the team included
Newsroom
Scordia.info · Catania
San Paolo Store Ecommerce · WooCommerce
promo-day
peaks handled, stable checkout

"Campaigns bring sudden peaks, and not all of that traffic is good traffic. The platform stays stable, and there is always a technical contact who actually knows our store."

Ecommerce Direction
San Paolo Store
Dormilù Ecommerce · home & sleep
green CWV
Redis, PHP-FPM tuning, WAF

"A mattress is not an impulse buy: product pages must open instantly and checkout must never fail. Continuous tuning shows up where it matters, in conversion."

Editorial–mid band · ~€100–300/mo
Equivalent DIY stack on AWS: ~€150–250/mo, sysadmin excluded
Ecommerce
Dormilù

Fee bands from our public pricing; cloud equivalents estimated from public price lists, July 2026.

Pricing

One fee, all included. Modular.

Three starting tiers to give you an idea. The actual fee is calculated after the audit: traffic, support level, criticality of the project. Server, traffic, storage and backups are always included. No fluctuating cloud bill.

Build your quote
Editorial
single outlet or site
from ~€21/mo (~€250/y)
  • Dedicated VPS, guaranteed resources
  • h24 monitoring + 1h intervention
  • Daily offsite backup
  • Orchestrated updates
most chosen
Network
multi-site, sustained traffic
from ~€900/month
  • Everything in Editorial, on multiple sites
  • Core Web Vitals tuning
  • Advertising / cookie compatibility
  • Dedicated team contact
HA Cluster
enterprise, mission-critical
from ~€2,000/month
  • HA cluster, 5+ dedicated machines
  • Load balancing + multi-master replication
  • Automatic failover
  • Only if you really need it

one-off setup + recurring fee · annual contract · 1–3 month termination notice (scaled by tier) · custom configurations between tiers on request · no lock-in: the playbooks remain yours.

Cost comparison

Same workload, on the hyperscalers. Do the math with us.

We priced our three tiers against AWS, Google Cloud, DigitalOcean and the managed WordPress platforms, using public price lists and configurations we actually run in production. One detail changes everything: cloud prices buy you machines. Ours buys you machines plus the team that runs them.

Configuration
Editorial
single site
Network
multi-site, sustained traffic
HA Cluster
mission-critical
Tech Performance from ~€21/mo · all includedfrom ~€900/mo · all includedfrom ~€2,000/mo · all included
AWS ~€45–75/mo + operations~€900–1,200/mo infra only~€3,500–6,000/mo + DevOps
Google Cloud ~€45–75/mo + operations~€850–1,100/mo infra only~€3,300–5,500/mo + DevOps
DigitalOcean ~€25–95/mo + operations~€550–800/mo infra only~€2,500–4,000/mo + DevOps
Kinsta / WP Engine ~$35–115/mo · visit tiersthousands of $/mo (per-site + visits)not on public price lists
Who operates the infrastructure our engineers, included in the fee you: +€500–1,500/mo for a retainer, ~€4,000/mo for an in-house hire. Platform support ≠ operations.

Egress: AWS and GCP bill ~$0.09/GB outbound. On editorial traffic volumes that is a four-figure yearly line item, even behind a CDN. In our fee, traffic is simply included.

Visit overages: managed WordPress platforms meter visits (e.g. $2 per extra 1,000). Your best traffic day becomes your worst billing day. Our fee does not move on a good headline.

Support ≠ operations: AWS Business Support costs 10% of your bill and covers their platform, not your application. Tuning, updates, incident response at 3 AM: that is the part we include.

Indicative estimates from public price lists and calculators (AWS, Google Cloud, DigitalOcean, Kinsta, WP Engine), July 2026. USD prices converted for readability. Equivalent configurations sized on workloads we run in production. Not a quote: your quote comes after an audit.

The approach

Artisanal does not mean small. It means made to measure.

Enterprise is a business model: standardise everything, scale the sales, put a ticket system between you and the people who know the answer. Craftsmanship is a different process: measure first, size accordingly, keep the same engineers on your stack for years. We run infrastructure the second way.

The enterprise model
  • Self-service by design

    The console is the product. Architecture, sizing and mistakes are yours to figure out.

  • Tickets, in tiers

    Severity levels, escalation queues, a different person every time. Nobody on the other side has ever seen your stack.

  • Platform support, not application support

    They answer for the hypervisor and the API. Your slow query, your broken deploy, your bot flood: out of scope.

  • Prudential oversizing

    Nobody audits your workload, so you buy headroom "to be safe" and pay for it twelve months a year.

  • A bill that moves

    Egress, IOPS, snapshots, visit overages. Your best traffic day is your worst billing day.

  • Lock-in by service

    Every proprietary managed service is one more reason you can never leave.

The Tech Performance model
  • Audit before quote

    We measure your real workload first. The fee is sized on what you actually run, not on a price list fantasy.

  • A call, not a ticket

    The engineer who answers is the one who built your stack and tuned it last month. Context included.

  • Whole-stack ownership

    From the hardware to the PHP pool to the CDN rule: one team, accountable end to end.

  • Sized on measurements

    We tune RAM, database buffers and PHP workers on observed traffic. You pay for what the workload needs.

  • A flat, boring fee

    Server, traffic, storage, backups, interventions: included. The invoice looks the same every month. On purpose.

  • No lock-in, by contract

    Standard open-source stack, documented playbooks that remain yours. You can leave. That is why clients stay.

Enterprise is a business model. Quality is a process. We chose the process.

FAQ

Frequently asked questions.

The questions we get asked before signing. If yours isn’t here, write to us: we reply the same day.

Ask an architect
What SLA do you offer?
Historical uptime measured above 99.9% across the portfolio. Typical contractual SLA: 99.9% for Editorial and Network, scalable up to 99.99%/99.999% with HA cluster. Metrics are concrete (uptime, error budget, intervention time) and verifiable at any time.
How do you handle security?
iptables firewall, fail2ban anti brute-force, TLS 1.3 by default, CIS-aligned hardening, periodic vulnerability scans. Daily incremental backups offsite (S3-compatible) with customisable retention and tested restore. For enterprise tiers we add application WAF (ModSecurity + OWASP CRS) and edge WAF.
Do you provide h24 support?
H24/7 monitoring is included in all fees with multi-channel alerts (email, app, phone call). Intervention guaranteed within 1 hour during business hours (Mon–Fri 9–6 CET); for Network and HA tiers we extend the intervention to h24/7 with an agreed escalation policy. The call is always with an SRE, not with a first-level dispatcher.
How long does it take to migrate my site to Tech Performance?
Single site in 5–7 working days, multi-site network in 2–3 weeks, HA cluster up to 30 days. Counts from acceptance. We coordinate the cutover with the newsroom/team to preserve the archive, SEO ranking and zero-downtime when possible.
Can I leave? Are you locking me in?
No. The stack is entirely mainstream open-source: standard web server, database, automation and observability layer, nothing exotic. On exit we hand over the automation playbooks, complete infrastructure documentation and full data snapshots, plus engineer assistance up to cutover. No extra fee for the handover. 1–3 months termination notice depending on the tier. Not a happy goodbye, but not a leash either.
How much does it cost?
Starting from ~€250/year for a local outlet (Editorial), ~€900/month for a multi-site network at millions of views/month (Network), ~€2,000/month for a mission-critical HA cluster. One-off setup + recurring fee, server and storage included. Concrete numbers after the 30-minute audit, no black-box quote.
Free audit

Let’s talk about your stack,
free, no strings attached.

30 minutes with a Romiltec architect. Together we figure out whether Tech Performance is a fit, and if it isn’t, we tell you straight away. No cold pitch, no black-box quote.

Book a call cal.com/romiltec/tech-performance · 30 min call