Perimeter Zero · Norselabs

Start from a template

Start with a Zero Trust design, or load the legacy “before” network and apply the fixes to watch the score climb. Each template is a realistic starting point. Its cost and review update as soon as you change anything. Loading one replaces the current canvas (you can undo).

How Perimeter Zero works

Lay it out. Drag services from the left onto the canvas. Drop them inside a VPC, AZ or subnet and they pick up that placement automatically.
Connect. Drag from the small dot on a service's right edge to another service.
Tune. Select a service to set its size and usage. The monthly estimate updates instantly.
Review. The Zero Trust tab rates the design on the eight CISA Zero Trust Maturity Model v2 pillars (Identity, Devices, Networks, Applications & Workloads, Data, plus Visibility & Analytics, Automation & Orchestration and Governance) from Traditional to Optimal. Each finding names the NIST SP 800-207 tenet behind it, and most have a one-click fix. The W-A tab keeps the Well-Architected review as a second opinion.
Accounts. Draw account boxes (workload, security, log archive, management) around services to show where they live. Logs belong in their own account.

Shortcuts

Ctrl Z / Ctrl Shift Z: Undo / redo
Del: Delete selection
Ctrl D: Duplicate
Ctrl A: Select all
← ↑ → ↓: Nudge (Shift for bigger steps)
Drag empty space: Pan (Shift-drag to box-select)
Scroll / + −: Zoom; F fits, 0 resets
G: Snap to grid on/off
Ctrl S / Ctrl O: Save / open JSON
T / ?: Templates / this help

About the numbers

Disclaimer. The review is aligned with CISA ZTMM v2.0 and NIST SP 800-207; it reviews a diagram, not a deployed system, and does not make anything compliant, certified or authorized under any framework.

Icons are original Norselabs drawings inspired by AWS services; AWS and the service names are trademarks of Amazon.com, Inc. or its affiliates. This tool is not affiliated with AWS.

Compare regions

This design's estimated monthly cost in every region, cheapest first.

On-demand list prices from each region's AWS Price List offer files. Click a region to switch the estimate to it.

Start with a template or drag a service in