# lucabertelli.consulting

> Luca Bertelli is a freelance Cloud Native and Platform Engineering consultant based in Italy, working with clients across Italy and the European Union. Areas of work: DevOps consulting, cloud migration, Platform Engineering, Kubernetes, SecDevOps and CI/CD, Cyber Resilience Act compliance (SBOM, artifact signing, VEX and VDR, vulnerability monitoring), technical training, AI engineering, and temporal knowledge graphs.

## Identity
- Name: Luca Bertelli
- Alternate names: LB Consulting, lb.consulting
- Role: Freelance Cloud Native and Platform Engineering consultant
- Based in: Italy. Serves: Italy and the European Union
- Client profile: startups, scale-ups, enterprises and public sector organisations, mostly in Fintech, Insurtech and Industrial
- Languages: Italian, English
- Email: info@lucabertelli.consulting
- VAT / P.IVA: 05028510237
- Engagement model: independent freelance consultant (no agency); mostly remote, on-site days in Italy and the EU for workshops and training; scope agreed before starting.
- Site languages: English at /en/ (default), Italian at /it/. Service slugs are localized per language.
- Full text of every service, guide and article in one file: https://lucabertelli.consulting/llms-full.txt

## Key pages
- Home (en): https://lucabertelli.consulting/en
- Home (it): https://lucabertelli.consulting/it
- Services hub (en): https://lucabertelli.consulting/en/services
- Services hub (it): https://lucabertelli.consulting/it/servizi
- Blog (en): https://lucabertelli.consulting/en/blog
- Blog (it): https://lucabertelli.consulting/it/blog
- Insights (en): https://lucabertelli.consulting/en/insights
- Insights (it): https://lucabertelli.consulting/it/insights
- RSS (en): https://lucabertelli.consulting/en/rss.xml
- RSS (it): https://lucabertelli.consulting/it/rss.xml

## Services

### English
- [DevOps Consultant](https://lucabertelli.consulting/en/services/devops-consulting): Freelance DevOps consultant working across Italy and the EU: delivery automation, CI/CD pipelines, Infrastructure as Code and operational practices for Fintech, Insurtech and industrial teams.
  - Answers on the page: What does a DevOps consultant actually do? | Do you work as a freelancer or through a consultancy? | How long does a DevOps consulting engagement last? | Do you work remotely or on site? | Which DevOps technologies do you specialise in? | How much does a DevOps consultant cost, and how is the work priced? | Should we hire a DevOps engineer or bring in a consultant?
- [Cloud Consulting and Migration](https://lucabertelli.consulting/en/services/cloud-migration-consulting): Cloud consulting across Italy and the EU: adoption strategy, migration of applications and infrastructure to AWS, Azure and Google Cloud, governance and cost control.
  - Answers on the page: Where does a cloud migration start? | Is it always worth migrating everything to the cloud? | Which cloud providers do you work with? | How do you keep cloud costs from running away? | How long does a cloud migration take?
- [Platform Engineering Consulting](https://lucabertelli.consulting/en/services/platform-engineering-consulting): Platform Engineering consulting across Italy and the EU: Internal Developer Platform design, golden paths, self-service on Kubernetes, and measuring real adoption by product teams.
  - Answers on the page: What is Platform Engineering? | How is Platform Engineering different from DevOps? | Does my company actually need an Internal Developer Platform? | Do you use Backstage or similar tools? | How do you measure whether the platform is working?
- [Kubernetes Consulting](https://lucabertelli.consulting/en/services/kubernetes-consulting): Kubernetes consulting from a CKA certified consultant: cluster architecture, multi-tenancy, GitOps with Argo CD, security hardening and day-2 operations.
  - Answers on the page: Are you Kubernetes certified? | What are the most common mistakes in production Kubernetes clusters? | Managed Kubernetes or self-managed? | Can you work on clusters that are already in production? | How do you handle test environments on Kubernetes?
- [SecDevOps and CI/CD Consulting](https://lucabertelli.consulting/en/services/secdevops-cicd-consulting): SecDevOps and CI/CD consulting across Italy and the EU: toolchain selection, secure pipelines, HashiCorp Vault secrets management, software supply chain security and NIS2 evidence.
  - Answers on the page: What is the difference between DevSecOps and SecDevOps? | Do security checks slow the pipeline down? | How do you manage secrets in pipelines? | What does NIS2 compliance mean technically? | Which CI/CD tools do you work with?
- [Cyber Resilience Act Compliance Consulting](https://lucabertelli.consulting/en/services/cyber-resilience-act-compliance): Cyber Resilience Act consulting in Italy and the EU: Annex I gap assessment, vulnerability handling, SBOM, secure updates, documentation, reporting readiness.
  - Answers on the page: Who does the Cyber Resilience Act apply to? | What are the Cyber Resilience Act deadlines? | What does the CRA actually require beyond an SBOM? | Which class is my product in, and does it change the conformity assessment route? | Is there a mandated SBOM format? | What is the difference between SBOM, VEX and VDR, and why do I need all three? | What starts the 24-hour reporting clock? | How long do the obligations last? | What is a substantial modification, and why does it matter for software that ships continuously? | What are the penalties, and who enforces the CRA in Italy? | Do you provide legal advice on the Cyber Resilience Act?
- [DevOps and Cloud Native Training](https://lucabertelli.consulting/en/services/devops-cloud-native-training): Corporate training on Kubernetes, DevOps, SecDevOps and Terraform: tailored programmes in English and Italian, with hands-on labs based on your own real tooling.
  - Answers on the page: Which topics do you teach? | Are courses delivered in English or Italian? | How is this different from an off-the-shelf course? | How long does a training programme take? | Are courses delivered remotely or on site?
- [AI Agent Governance and Adoption](https://lucabertelli.consulting/en/services/ai-agent-governance): Consulting on AI agent governance and adoption across Italy and the EU: usage policy, security hardening, Model Context Protocol integration and inference cost control.
  - Answers on the page: What does AI Engineering consulting cover? | What security risks are specific to AI agents? | What is the Model Context Protocol and when is it worth using? | How do you keep inference costs under control? | Do we need a self-hosted model or is a managed service enough? | When does AI agent governance consulting make sense?
- [Temporal Knowledge Graph Consulting](https://lucabertelli.consulting/en/services/knowledge-graph-consulting): Knowledge graph and temporal knowledge graph consulting in Italy and the EU: operational facts, time-aware memory for AI agents, and MCP access.
  - Answers on the page: What is a pragmatic knowledge graph? | How is this different from a graph database or a data-catalogue knowledge graph? | When is a knowledge graph worth building? | What is a temporal knowledge graph? | How does a temporal knowledge graph give AI agents memory? | How do AI agents use the graph? | Why do large CI/CD platform migrations stall so often without one? | What do we keep after the engagement?

### Italian
- [Consulente DevOps](https://lucabertelli.consulting/it/servizi/consulenza-devops): Consulente DevOps freelance in Italia: automazione della delivery, pipeline CI/CD, Infrastructure as Code e pratiche operative per team Fintech, Insurtech e industriali.
  - Answers on the page: Che cosa fa concretamente un consulente DevOps? | Lavori come freelance o tramite società di consulenza? | Quanto dura un intervento di consulenza DevOps? | Lavori da remoto o in sede? | Su quali tecnologie DevOps sei specializzato? | Quanto costa un consulente DevOps e come viene prezzato il lavoro? | Conviene assumere un DevOps engineer o rivolgersi a un consulente?
- [Consulenza Cloud e migrazione](https://lucabertelli.consulting/it/servizi/consulenza-cloud-migrazione): Consulenza cloud in Italia: strategia di adozione, migrazione di applicazioni e infrastruttura verso AWS, Azure e Google Cloud, governance e controllo dei costi.
  - Answers on the page: Da dove si comincia una migrazione in cloud? | Conviene sempre migrare tutto in cloud? | Con quali cloud provider lavori? | Come si evita che i costi cloud sfuggano di mano? | Quanto dura una migrazione cloud?
- [Consulenza Platform Engineering](https://lucabertelli.consulting/it/servizi/consulenza-platform-engineering): Consulenza Platform Engineering in Italia: progettazione di Internal Developer Platform, golden path, self-service su Kubernetes e misurazione dell'adozione da parte dei team.
  - Answers on the page: Che cos'è il Platform Engineering? | Che differenza c'è tra Platform Engineering e DevOps? | Serve davvero una Internal Developer Platform alla mia azienda? | Usate Backstage o strumenti simili? | Come si misura se la piattaforma sta funzionando?
- [Consulenza Kubernetes](https://lucabertelli.consulting/it/servizi/consulenza-kubernetes): Consulenza Kubernetes in Italia da consulente certificato CKA: architettura dei cluster, multi-tenancy, GitOps con Argo CD, hardening di sicurezza e operatività day-2.
  - Answers on the page: Sei certificato su Kubernetes? | Quali sono gli errori più frequenti nei cluster Kubernetes in produzione? | Meglio Kubernetes gestito o self-managed? | Puoi intervenire su cluster già in produzione? | Come gestisci ambienti di test su Kubernetes?
- [Consulenza SecDevOps e CI/CD](https://lucabertelli.consulting/it/servizi/consulenza-secdevops-cicd): Consulenza SecDevOps e CI/CD in Italia: toolchain, pipeline sicure, gestione dei segreti con HashiCorp Vault, supply chain del software e conformità NIS2.
  - Answers on the page: Che differenza c'è tra DevSecOps e SecDevOps? | Aggiungere controlli di sicurezza rallenta la pipeline? | Come gestite i segreti nelle pipeline? | Cosa comporta la conformità NIS2 sul piano tecnico? | Con quali strumenti CI/CD lavori?
- [Consulenza Cyber Resilience Act (CRA)](https://lucabertelli.consulting/it/servizi/consulenza-cyber-resilience-act): Consulenza Cyber Resilience Act in Italia: gap assessment sull'Allegato I, gestione delle vulnerabilità, SBOM, aggiornamenti sicuri, documentazione e notifiche.
  - Answers on the page: A chi si applica il Cyber Resilience Act? | Quali sono le scadenze del Cyber Resilience Act? | Che cosa richiede davvero il CRA oltre alla SBOM? | In quale classe rientra il mio prodotto, e cambia il percorso di valutazione della conformità? | Esiste un formato obbligatorio per la SBOM? | Che differenza c'è tra SBOM, VEX e VDR, e perché servono tutti e tre? | Che cosa fa partire le 24 ore per la notifica? | Quanto durano gli obblighi? | Che cos'è una modifica sostanziale, e perché conta per il software che rilascia in continuo? | Quali sono le sanzioni, e chi vigila sul CRA in Italia? | Fornisci consulenza legale sul Cyber Resilience Act?
- [Formazione DevOps e Cloud Native](https://lucabertelli.consulting/it/servizi/formazione-devops-cloud-native): Formazione aziendale su Kubernetes, DevOps, SecDevOps e Terraform: percorsi su misura in italiano e inglese, con laboratori pratici basati sui vostri strumenti reali.
  - Answers on the page: Su quali argomenti tieni corsi di formazione? | I corsi sono in italiano o in inglese? | In cosa si differenziano dai corsi standard di mercato? | Quanto dura un percorso formativo? | I corsi si tengono da remoto o in sede?
- [Governance e adozione di agenti AI](https://lucabertelli.consulting/it/servizi/consulenza-agenti-ai): Consulenza su governance e adozione di agenti AI in Italia: policy di utilizzo, hardening della sicurezza, integrazione MCP e controllo dei costi di inferenza.
  - Answers on the page: Che cosa comprende una consulenza di AI Engineering? | Quali sono i rischi di sicurezza specifici degli agenti AI? | Che cos'è il Model Context Protocol e quando conviene usarlo? | Come si tengono sotto controllo i costi di inferenza? | Serve un modello proprietario o si può usare un servizio gestito? | Quando ha senso una consulenza di governance sugli agenti AI?
- [Consulenza temporal knowledge graph](https://lucabertelli.consulting/it/servizi/consulenza-knowledge-graph): Consulenza temporal knowledge graph in Italia: conoscenza operativa, memoria per agenti AI, accesso MCP e migrazioni CI/CD di grande scala.
  - Answers on the page: Che cos'è un knowledge graph pragmatico? | In che cosa differisce da un graph database o da un knowledge graph da data catalogue? | Quando vale la pena costruire un knowledge graph? | Che cos'è un temporal knowledge graph? | In che modo un temporal knowledge graph dà memoria agli agenti AI? | Come usano il grafo gli agenti AI? | Perché senza un grafo le grandi migrazioni CI/CD si arenano molto spesso? | Che cosa resta dopo l'intervento?

## Field guides (insights)

### English
- [Cyber Resilience Act: where things stand and what to do first](https://lucabertelli.consulting/en/insights/cyber-resilience-act) - 2026-09-28 - Reporting is live, harmonised standards are not, and December 2027 is closer than the release calendar suggests
- [When a knowledge graph makes a platform migration possible](https://lucabertelli.consulting/en/insights/light-knowledge-graphs) - 2026-08-14 - People and AI agents need queryable facts. Without them, large CI/CD migrations stay tribal and stall.
- [DevOps consulting for Fintech, Insurtech and industrial teams](https://lucabertelli.consulting/en/insights/regulated-industries) - 2025-10-26 - What changes when releases, audits and change windows are business constraints rather than operational details
- [Platform Engineering vs DevOps: the difference that matters in practice](https://lucabertelli.consulting/en/insights/platform-vs-devops) - 2024-07-13 - Same delivery goals, different operating models. How to choose without buying a developer portal too early
- [When you need a Kubernetes consultant](https://lucabertelli.consulting/en/insights/kubernetes-consultant) - 2024-04-27 - What changes between a focused engagement and another YAML sprint

### Italian
- [Cyber Resilience Act: a che punto siamo e da dove cominciare](https://lucabertelli.consulting/it/insights/cyber-resilience-act) - 2026-09-28 - Le notifiche sono già obbligatorie, le norme armonizzate non ci sono ancora, e dicembre 2027 è più vicino di quanto suggerisca il calendario dei rilasci
- [Quando un knowledge graph rende possibile una migrazione di piattaforma](https://lucabertelli.consulting/it/insights/light-knowledge-graphs) - 2026-08-14 - Persone e agenti AI servono fatti interrogabili. Senza, le grandi migrazioni CI/CD restano tribali e si arenano.
- [Consulenza DevOps in Fintech, Insurtech e industriale](https://lucabertelli.consulting/it/insights/regulated-industries) - 2025-10-26 - Cosa cambia quando release, audit e finestre di change non sono un dettaglio operativo ma un vincolo di business
- [Platform Engineering vs DevOps: la differenza che conta in pratica](https://lucabertelli.consulting/it/insights/platform-vs-devops) - 2024-07-13 - Stessi obiettivi di delivery, modelli operativi diversi. Come scegliere senza comprare un portale per sviluppatori troppo presto
- [Quando serve un consulente Kubernetes](https://lucabertelli.consulting/it/insights/kubernetes-consultant) - 2024-04-27 - Cosa cambia tra un intervento mirato e un'altra sprint di YAML

## Blog articles

### English
- [Digging up fossils in your K8s cluster fleet](https://lucabertelli.consulting/en/blog/omastx) - 2026-07-26 - How to use Omastx to sniff out obsolete images and Helm charts, plus MCP for AI agents
- [A self-hosted dashboard for Renovate Bot](https://lucabertelli.consulting/en/blog/krabbx) - 2025-05-01 - How to use Krabbx to track dependency freshness and open update PRs across your GitHub organization
- [A self-hosted CI/CD dashboard for GitHub Actions](https://lucabertelli.consulting/en/blog/snorlx) - 2025-03-08 - How to use Snorlx to get centralized visibility and real-time updates across all your repositories
- [Ephemeral test environments for CI workflows](https://lucabertelli.consulting/en/blog/vcluster) - 2024-04-01 - How to use vCluster and Argo Workflow to manage ephemeral test environments

### Italian
- [A caccia di fossili nella tua fleet di cluster K8s](https://lucabertelli.consulting/it/blog/omastx) - 2026-07-26 - Come usare Omastx per scovare immagini e chart Helm obsoleti, e collegarlo agli agent AI via MCP
- [Una dashboard self-hosted per Renovate Bot](https://lucabertelli.consulting/it/blog/krabbx) - 2025-05-01 - Come usare Krabbx per monitorare le versioni delle dipendenze e le PR di aggiornamento aperte nella tua organizzazione GitHub
- [Una dashboard self-hosted per le GitHub Actions](https://lucabertelli.consulting/it/blog/snorlx) - 2025-03-08 - Come usare Snorlx per ottenere visibilità centralizzata e aggiornamenti in tempo reale su tutti i repository
- [Ambienti di test effimeri per flussi di CI](https://lucabertelli.consulting/it/blog/vcluster) - 2024-04-01 - Come usare i vCluster e Argo Workflow per gestire ambienti di test effimeri

## Topics
- Argo: https://lucabertelli.consulting/en/blog/tag/argo
- CI/CD: https://lucabertelli.consulting/en/blog/tag/cicd
- Dependency management: https://lucabertelli.consulting/en/blog/tag/dependency-management
- DevSecOps: https://lucabertelli.consulting/en/blog/tag/devsecops
- Drift: https://lucabertelli.consulting/en/blog/tag/drift
- Fleet management: https://lucabertelli.consulting/en/blog/tag/fleet-management
- GitHub Actions: https://lucabertelli.consulting/en/blog/tag/github-actions
- Helm: https://lucabertelli.consulting/en/blog/tag/helm
- Kubernetes: https://lucabertelli.consulting/en/blog/tag/kubernetes
- MCP: https://lucabertelli.consulting/en/blog/tag/mcp
- Multi-tenancy: https://lucabertelli.consulting/en/blog/tag/multi-tenancy
- Observability: https://lucabertelli.consulting/en/blog/tag/observability
- Renovate: https://lucabertelli.consulting/en/blog/tag/renovate
- vCluster: https://lucabertelli.consulting/en/blog/tag/vcluster

## Certifications
- CAPA: Certified Argo Project Associate (2024-03-06) - https://www.credly.com/badges/94866167-7c1e-48f3-81a8-5e0cc404e3de
- Vault: Certified HashiCorp Implementation Partner (CHIP) (2022-12-19) - https://www.credly.com/badges/1f0c4f14-ba34-40ae-8a30-143360c36edc
- Kong Konnect Cloud Foundations (2022-11-01) - https://www.credly.com/badges/6469e3ef-01e4-464c-8d1b-dc350f697570/public_url
- Kong Gateway Foundations (2022-10-30) - https://www.credly.com/badges/18136076-4a9b-4e9d-8b3c-4ba662b5d114
- Kong Mesh Foundations (2022-10-30) - https://www.credly.com/badges/77043068-245e-42cc-81c4-41c0386c1d7e/public_url
- HashiCorp Certified: Vault Operations Professional (2022-01-19) - https://www.credly.com/badges/26a9f3ba-36c6-4f92-822f-20bb9999635f
- GitLab Solutions Architect Core Verified Associate (2021-12-14) - https://www.credly.com/badges/990360c8-6384-4758-b451-bf12e44c5ea8
- GitLab Sales Core Verified Associate (2021-12-08) - https://www.credly.com/badges/1f526ed1-a864-4453-87b1-19bf9887f289/public_url
- HashiCorp Certified: Terraform Associate (002) (2021-08-16) - https://www.credly.com/badges/e0d4bcf6-cece-4c15-9d2d-7835f23568a9/public_url
- VMware Certified Master Specialist - Cloud Native 2021 (2021-04-01) - https://www.credly.com/badges/cf5345c9-e050-4e66-8833-5b4be584dc53
- Hashicorp Certified: Vault Associate (2020-12-02) - https://www.credly.com/badges/aec4502e-7c5d-4ff1-b43b-53c9bde23542/public_url
- CKA: Certified Kubernetes Administrator (2020-12-01) - https://www.credly.com/badges/2377551e-bc85-41d4-8613-de294f5e453a

## Professional profiles
- LinkedIn: https://www.linkedin.com/in/luca-bertelli-a1413b77
- GitHub: https://github.com/banshee86vr
- Medium: https://medium.com/@bertelli.luca
- Credly: https://www.credly.com/users/luca-bertelli

## Policies
- Privacy (en): https://lucabertelli.consulting/en/privacy
- Privacy (it): https://lucabertelli.consulting/it/privacy
- Cookies (en): https://lucabertelli.consulting/en/cookies
- Cookies (it): https://lucabertelli.consulting/it/cookies

## Machine-readable discovery
- Full text (llms-full.txt): https://lucabertelli.consulting/llms-full.txt
- Sitemap index: https://lucabertelli.consulting/sitemap-index.xml
- robots.txt: https://lucabertelli.consulting/robots.txt
- Security contact (RFC 9116): https://lucabertelli.consulting/.well-known/security.txt
- Structured data: every HTML page embeds a schema.org JSON-LD graph (Person, ProfessionalService, WebSite; Service + FAQPage on service pages; BlogPosting on articles and guides).