
Strategic Technology Partners
IT Vortex partners with the most trusted names in enterprise technology. Every vendor in our stack earns its place by powering our own production environment before we recommend it to a client. The result is a portfolio of platforms we know cold, deployed the same way on both sides of the wire.
How We Build Our Stack
A disciplined approach to vendor selection that benefits both our cloud and yours. Partners are operational dependencies, not logo decoration.
Strategic Selection
We start with engineering requirements, not vendor pitches. Each platform is evaluated against availability, security, scale, and economics before any commercial conversation begins.
Internal Validation
Every partner runs in our own production stack first. Our team operates these platforms at scale, day in and day out, before any client carries our recommendation into their environment.
Client Delivery
We architect, deploy, and manage what we already operate. Our certified engineers transfer hard-won operational knowledge directly into your environment, not theory from a slide deck.
Continuous Optimization
We pressure-test partnerships against new options as the market evolves. When licensing models shift or better technology emerges, we engineer migration paths rather than locking clients into yesterday's decisions.
Premier Strategic Partners
The foundational platforms that power our cloud and shape how we deliver every service. These are the five we live in, every day.



The Platform Layer
The hypervisors, hyperconverged fabrics, and compute hardware that make a multi-tenant cloud actually run.

The substrate underneath every workload we host. We have been a VMware service provider for more than a decade, and our Premier VCSP status puts us in the top tier of Broadcom's worldwide cloud services partner program. Our engineers have lived through every major release from vSphere 5 to VMware Cloud Foundation, and we operate the same platform we license, deploy, and migrate clients onto.
In the IT Vortex Stack
The entire multi-tenant cloud runs on VMware:
- vSphere clusters with vMotion, DRS, and HA across paired data centers
- VMware Cloud Director for tenant isolation, self-service, and chargeback
- VMware Cloud Director Availability powering one-click DR replication
- NSX for tenant network virtualization and microsegmentation
- vSAN where hyperconverged economics fit, classic SAN where they do not
In Client Environments
Clients consume VMware four ways, depending on what they want to own:
- Hosted in our cloud via VMware Cloud Director self-service portals
- On-premises with our managed services overlay (vSphere, vSAN, NSX)
- Hybrid bridges via VMware Cloud Director Availability for active failover
- Guided Broadcom-era licensing transitions and VCF migrations
The right answer when clients want hyperconverged simplicity, an alternative path away from Broadcom-era VMware licensing, or workloads that benefit from native AHV virtualization. We invested early in Nutanix expertise so we could give clients a credible second option rather than locking them into a single virtualization stack.
In the IT Vortex Stack
We maintain a Nutanix engineering practice to support client deployments:
- Lab clusters running AHV and Prism Central for hands-on validation
- VMware-to-Nutanix migration tooling and runbooks
- Direct mapping of every VMware concept to its Nutanix equivalent
- Cross-trained engineering staff certified on both platforms
In Client Environments
Where clients have chosen Nutanix or want to evaluate the move, we deliver:
- VMware-to-AHV migrations with full assessment and cutover planning
- Greenfield Nutanix Cloud Platform deployments
- Prism Central operations, capacity planning, and lifecycle management
- Hybrid options via Nutanix Cloud Clusters where applicable

Where private cloud economics break down and pure hyperscale makes sense, AWS is the destination. We use AWS in our own architecture and design hybrid bridges that let clients consume both without rebuilding everything they own.
In the IT Vortex Stack
AWS sits alongside our private cloud for specific workloads:
- Object storage offloads via S3 for cold-tier backup data
- Managed AWS workloads alongside VCF private cloud for hybrid mobility
- Public-facing service endpoints that benefit from edge presence
In Client Environments
For clients with hybrid requirements:
- AWS capacity for burst workloads alongside VCF private cloud
- Region-paired DR with cross-account replication targets
- S3 long-term retention tier for Veeam Backup & Replication
- Network bridges to private cloud workloads via Direct Connect or IPsec

The physical hardware that makes our cloud a real thing rather than a marketing diagram. We standardized on Dell more than a decade ago because the combination of PowerEdge reliability, PowerStore array performance, and an enterprise support relationship we can actually escalate matters operationally.
In the IT Vortex Stack
Dell hardware physically runs the cloud platform:
- PowerEdge R-series rack servers across multiple data centers
- PowerStore and PowerVault arrays for tiered storage
- Dell EMC switching for ToR and aggregation
- iDRAC-driven out-of-band management for every node
- ProSupport Plus for hardware accountability
In Client Environments
For client on-prem and hybrid footprints, we deliver:
- PowerEdge refresh programs with sizing, procurement, and racking
- PowerStore deployments with replication to our cloud
- Edge nodes for hybrid cloud extensions
- Workstation and laptop lifecycle programs for SMB clients
- Hardware-as-a-Service via predictable monthly OpEx
Defense in Depth, Vendor by Vendor
No single vendor covers everything. Our security stack is built from best-of-breed partners we operate together every day, with the integration work already done.

The Fortinet Security Fabric is the connective tissue of our security architecture. We run a complete FortiGate environment in our own perimeter, our engineers carry NSE certifications, and we deploy the same fabric in client environments with policy and visibility federated back to our SOC.
In the IT Vortex Stack
A full-stack Fortinet Security Fabric protects our cloud:
- FortiGate 200F next-generation firewalls at the perimeter
- FortiAuthenticator 300F for SSO, MFA, and SAML federation
- FortiSwitch for ToR with FortiGate-managed network access
- FortiClient SSL VPN with SAML and MFA for engineer remote access
- FortiAnalyzer for log aggregation, correlation, and SIEM
- FortiManager for unified policy across the fabric
In Client Environments
For SECaaS clients and managed deployments we deliver:
- Managed FortiGate firewalls with 24x7 policy administration
- SD-WAN deployments connecting branch locations to cloud
- FortiClient endpoint VPN with SAML federation
- Security Fabric integration so client logs flow to our FortiAnalyzer
- Multi-tenant FortiManager policy templates by industry vertical
- SSL/IPsec tunnels into hosted cloud workloads

CrowdStrike Falcon is the EDR/XDR layer on every endpoint we manage. We deployed Falcon on our own infrastructure first because the platform's threat hunting and identity protection capabilities materially changed how quickly we can contain an incident, and we have not looked back.
In the IT Vortex Stack
Falcon protects everything we operate:
- Falcon Insight on all servers, management plane, and internal endpoints
- Falcon Identity Threat Detection on our directory
- OverWatch managed threat hunting on our cloud platform
- Real-time IOC correlation with FortiAnalyzer feeds
In Client Environments
Clients consume CrowdStrike through our managed practice:
- Falcon Complete fully managed XDR for SECaaS clients
- Identity protection across hybrid Entra ID and Active Directory
- Falcon Spotlight for risk-based vulnerability management
- Integration with our SOC playbooks and FortiGate enforcement

Email remains the most common initial access vector in real-world incidents, which is why we run Proofpoint on every mailbox we manage, starting with our own. The platform's threat intelligence and insider threat capabilities (now folding in the former ObserveIT product line) cover both inbound risk and outbound data movement.
In the IT Vortex Stack
Proofpoint defends our own mail flow:
- Proofpoint Essentials filtering inbound for our team
- URL Defense and attachment sandboxing
- DMARC and BIMI enforcement on theitvortex.com
In Client Environments
For client mail security we deliver:
- Proofpoint Essentials or Enterprise tiers based on volume and complexity
- Targeted Attack Protection for advanced threats and impersonation
- Email Fraud Defense with DMARC implementation
- Security Awareness Training programs
- Insider Threat Management (formerly ObserveIT) for regulated industries

Cisco Duo is how we put a meaningful gate in front of administrative access, both ours and yours. We adopted Duo years ago for our own engineering team and standardized on it for client MFA wherever federation flexibility and device trust matter more than ecosystem lock-in.
In the IT Vortex Stack
Duo wraps everything administrative:
- MFA for engineer access to all production systems
- Device trust posture checks before privileged access
- Duo SSO for SaaS administrative consoles
In Client Environments
Duo deployments for client identity:
- MFA for VPN, RDP, SSH, and web application access
- Federated SSO into M365, Salesforce, and other SaaS
- Device trust and managed-device enforcement
- Risk-based authentication policies

You cannot patch what you cannot see. Tenable is the platform we use to keep our own attack surface mapped and prioritized, and the same tooling powers the vulnerability management service we deliver to clients who need continuous visibility rather than annual snapshots.
In the IT Vortex Stack
Tenable runs continuously against our infrastructure:
- Authenticated scans of every server in the cloud platform
- Tenable Vulnerability Management for SaaS-side visibility and reporting
- Risk-based prioritization feeding our patch program
In Client Environments
Managed vulnerability services for clients:
- Continuous internal and external vulnerability scanning
- Attack surface management for internet-facing assets
- Compliance-mapped reporting for HIPAA, PCI, and CIS benchmarks
- Remediation prioritization tied to active exploitability

Annual pen tests miss what changes the day after the report is delivered. NodeZero by Horizon3.ai lets us run continuous, authenticated attack-path analysis against environments and prove where real risk lives, rather than where a scanner thinks risk might live.
In the IT Vortex Stack
NodeZero runs on our own attack surface:
- Scheduled autonomous pen tests against our infrastructure
- Validated proof of exploitability before we change controls
- Continuous feedback loop into our hardening program
In Client Environments
Pen testing as a continuous service for clients:
- Scheduled internal and external NodeZero engagements
- Attack path narratives and remediation walkthroughs
- Validation testing after every major remediation
- Board-ready reporting on real-world exploitability
Backup, Replication, and Long-Term Retention
The platforms behind our BaaS and DRaaS practices, and the storage tiers that keep recovery economically practical.
Veeam is the engine behind both our BaaS and DRaaS offerings. We have run Veeam Backup & Replication in production for more than a decade, our engineers are VMCE-certified, and the same platform powering tens of thousands of protected VMs for clients is the same one protecting our own infrastructure.
In the IT Vortex Stack
Veeam runs as the data protection backbone:
- Veeam Backup & Replication clusters powering BaaS infrastructure
- Immutable XFS backup repositories with hardened Linux
- Veeam Cloud Connect endpoints for tenant DR replication
- Veeam ONE monitoring across the entire protection estate
- Backup Copy Jobs to off-site repositories on a 3-2-1-1-0 model
In Client Environments
Multiple consumption models for client data protection:
- BaaS direct-to-cloud for clients with no on-prem backup infrastructure
- Veeam Cloud Connect tunnels for clients running on-prem Veeam
- DRaaS via VMware Cloud Director Availability with Veeam-based source-side replication
- SureBackup verification ensuring backups actually restore
- Instant VM Recovery for minutes-not-hours restore SLAs
- Microsoft 365 backup via Veeam for Microsoft 365

S3-compatible storage at a price point that makes long-term retention economical. We use Wasabi as a tier in our own data protection stack, and we layer it into client backup architectures wherever predictable, egress-free retention beats hyperscaler bills.
In the IT Vortex Stack
Wasabi serves as our retention tier:
- Veeam Capacity Tier target for cooled backup data
- S3 Object Lock for immutable, ransomware-resilient copies
- No egress fees, no API call charges, predictable economics
In Client Environments
Client object storage architectures:
- Long-term retention tier for client Veeam Scale-Out Backup Repositories
- Object Lock for compliance retention (SEC 17a-4, HIPAA, GDPR)
- S3-compatible target for application-native backup tools
- Cost-effective alternative to hyperscaler glacier tiers
Desktops, Apps, and the Devices That Access Them
The DaaS platform and endpoint ecosystem we operate to deliver Windows desktops, published apps, and graphics-intensive workloads at scale.
The former VMware EUC business, now an independent company. Omnissa Horizon is the engine of our Desktop as a Service practice, and Workspace ONE is what gives our managed-device clients a single identity and policy fabric across Windows, macOS, iOS, and Android.
In the IT Vortex Stack
Horizon powers our DaaS platform:
- Horizon Connection Servers, Instant Clones, and Unified Access Gateways
- Instant Clones for sub-minute desktop provisioning
- App Volumes for application layering
- vGPU-enabled pools for engineering and creative workloads
- Workspace ONE for our own internal device fleet
In Client Environments
Three tiers of desktop delivery for clients:
- Basic user pools (2 CPU / 4 GB) for office workers
- Knowledge worker pools (4 CPU / 8 GB) for power users
- vGPU pools (8 CPU / 16 GB / 2 GB vRAM) for designers and engineers
- Published apps for partial-desktop use cases
- Workspace ONE UEM for managed BYOD and corporate devices
- Just-In-Time desktops with non-persistent profile separation

IGEL OS turns almost any x86 device into a managed, secure, read-only thin client. We use it on our engineering bench, and we deploy it as the access layer for DaaS clients who want to repurpose existing hardware rather than buying new endpoints.
In the IT Vortex Stack
IGEL OS in our own workspace:
- IGEL endpoints for engineer access to lab environments
- UMS console for centralized configuration and update management
In Client Environments
Endpoint strategy for client DaaS rollouts:
- Convert existing PCs into managed thin clients via IGEL OS
- Centralized UMS management across distributed offices
- Read-only OS that materially reduces endpoint attack surface
- Extended hardware lifecycle for ESG and budget benefits

When clients want purpose-built hardware rather than repurposed PCs, 10ZiG delivers thin and zero clients optimized for Horizon, Citrix, and Azure Virtual Desktop. We resell, configure, and ship.
In the IT Vortex Stack
10ZiG endpoints in our test labs for DaaS protocol validation against Horizon, Citrix, and AVD environments.
In Client Environments
Greenfield endpoint deployments:
- Pre-imaged thin clients for new DaaS rollouts
- Zero clients for high-security environments
- Centralized configuration via 10ZiG Manager
Partners by Discipline
The supporting ecosystem that rounds out the platform. Each vendor here has earned its spot in our delivery model, with internal use and client deployment paths defined.
Microsoft
Software · Identity · Cloud
Windows Server, SQL Server, and Remote Desktop Services licensed for our multi-tenant cloud, with SPLA reporting handled in our back office.
Internal · Client Hosted WorkloadsM365 powers our internal collaboration; Entra ID is the identity fabric we federate with for tenant SSO and conditional access policies.
Internal · Client IdentitySelective Azure consumption for hybrid scenarios, Azure Arc for cross-cloud management, and Azure Virtual Desktop where Microsoft-native DaaS is the right answer.
Client Hybrid ArchitecturesNetworking & Carrier
Switching · Transport · Connectivity
Catalyst switching in select environments, Meraki for cloud-managed LAN/Wi-Fi at client sites where simplicity matters more than power-user knobs.
Client LAN · SD-BranchCarrier circuits, transit, and direct cloud connections feeding our data centers. Lumen also serves client multi-site WAN designs where last-mile diversity matters.
Internal Transit · Client WANOperations & Management
Monitoring · Endpoint · Insider Risk
Endpoint management, patching, and asset intelligence on managed desktops. Internally, Ivanti supports our patch cadence; client-side, it powers our Managed IT desktop fleet operations.
Internal · Client Endpoint FleetReal-time DaaS and EUC analytics. We use it in our NOC for Horizon session health; for clients, it surfaces user-experience issues before tickets get opened.
Internal DaaS NOC · Client UX MonitoringInsider threat and user behavior analytics where regulated industries demand visibility into privileged action and data movement.
Client Regulated WorkloadsNetwork monitoring, alerting, and SolarWinds Platform observability across heterogeneous infrastructure where centralized visibility matters more than single-vendor dashboards.
Client Network OperationsPhysical Security & Surveillance
Video · Access · AI Analytics
Cloud-native cameras and access control. Modern, IT-friendly physical security that we deploy for clients alongside their network and endpoint stack.
Client Multi-Site DeploymentsMore than a decade of ACTi camera deployments across multiple industries, with AI-driven facial recognition, license plate recognition, and loitering detection options.
Client Specialty SurveillanceCollaboration & UC
Voice · Video · Conference Rooms
Our hosted voice platform of choice. Internally for our own staff, externally for clients who need full UC without on-prem PBX hardware.
Internal Voice · Client Hosted UCMeetings, Phone, Webinars, and Rooms. We use Zoom extensively for internal and client conversations; we also resell, license, and configure for clients.
Internal · Client CommunicationsThe hardware that turns conference rooms into Zoom Rooms or Microsoft Teams Rooms. Deployed extensively in our own offices and configured for clients alongside their UC rollout.
Internal · Client Room SystemsFile & Productivity Services
Cloud Storage · SaaS
Managed file sync and share for clients who want a clean SaaS rather than running their own file servers, with our team handling licensing, lifecycle, and integration.
Client ProductivityGoogle identity, mail, and productivity for clients standardized on Google rather than Microsoft. Federated into our managed services delivery model.
Client ProductivityDistribution & Licensing
Procurement · License Management
Our preferred distribution partner for SaaS and software licensing, including Microsoft 365 CSP, Acronis, and a broader catalog. Makes complex multi-vendor procurement a single point of contact.
Internal Procurement · Client LicensingWorkstations for engineering and creative power users where Z-series specifications matter. Also a procurement option for client laptop and desktop refresh programs.
Client Endpoint RefreshEmail & Endpoint Security
Filtering · Anti-Malware
Email security gateway and cloud-to-cloud backup for clients standardized on Barracuda, with our certified engineers handling architecture and operations.
Client Email SecurityEndpoint and server anti-malware bundled into our hosting platform and offered a la carte for clients with existing Trend Micro standardization.
Internal Hosting · Client EndpointPick the Right Stack the First Time
Whether you are evaluating Broadcom-era VMware licensing, choosing between Horizon and AVD, or rebuilding your security stack after a near miss, we are happy to walk through what we run and why.















