Buy once, ship the same hour. No SaaS, no lock-in.
Security-first Terraform module on the modern GCP stack: Cloud Run v2 with Direct VPC Egress + Cloud SQL (private IP, SSL-only, IAM auth, CMEK) + Secret Manager + scoped IAM. CIS GCP Benchmark v4-aligned. One command apply.