Default OS images ship with years of unpatched vulnerabilities baked in. Powell Technology Group delivers CIS-benchmarked, pre-hardened machine images available on AWS Marketplace and delivered directly for on-premises environments — so every server you spin up is secure from minute one, not month six.
A stock Ubuntu AMI from AWS Marketplace has hundreds of misconfigurations out of the box — unnecessary services running, weak SSH defaults, no audit logging, no file integrity monitoring. Every instance you launch from an unhardened image is a race against attackers to patch it before it's exploited. We end that race before it starts.
Powell Technology Group AMIs are listed directly on AWS Marketplace. Subscribe once, launch across your account in any supported region — no setup call required for standard images. All AMIs are distributed across us-east-1, us-west-2, eu-west-1, and ap-southeast-1.
The same Ansible CIS hardening that powers our AWS AMIs is applied to images built with Packer for VMware, Hyper-V, KVM, and bare metal. One hardening standard deployed across every platform you run. Images are delivered via secure S3 presigned URLs.
.ova — ready to import into vSphere, vCenter, or ESXi. Supports vApp and template cloning workflows..vhdx — compatible with Windows Server Hyper-V 2019 and 2022. Supports Generation 2 VMs..qcow2 — works with libvirt, Proxmox, and OpenStack. Thin-provisioned by default.For non-AWS environments and custom image builds, you pay once to build and once per month to maintain — not per instance launched. Spin up one server or one hundred from the same hardened image.
| Feature | Bare Metal $599 + $199/mo |
Custom OS Image $999 + $299/mo |
Golden Image Library $2,499 + $499/mo |
|---|---|---|---|
| Number of Images | 1 | 1 | Up to 5 |
| CIS Level 1 Hardening | ✓ | ✓ | ✓ |
| CIS Level 2 Hardening | ✓ | ✓ | ✓ |
| Ansible Hardening Playbooks | ✓ | ✓ | ✓ |
| CIS Compliance Report | ✓ | ✓ | ✓ |
| Monthly Rebuild + Patch Integration | ✓ | ✓ | ✓ |
| Version History | ✓ | ✓ | ✓ |
| Signed Manifest | — | ✓ | ✓ |
| Custom App Stack Baked In | — | ✓ | ✓ |
| VMware .ova | ✓ | ✓ | ✓ |
| Hyper-V .vhdx | ✓ | ✓ | ✓ |
| KVM .qcow2 | ✓ | ✓ | ✓ |
| On-Demand Rebuild SLA | — | — | ✓ |
| Change Log Per Rebuild | — | ✓ | ✓ |
| Platform Mix (any combo) | — | — | ✓ |
Book a free 30-minute scoping call. We'll walk through your platforms, OS requirements, and any custom stacks — and give you a fixed quote before any work begins.