Service 05
Secure software & cloud engineering
We build and improve software and cloud platforms with security designed in from the architecture onwards. The people who build it know how attackers test it, because that's the other half of our work.
What it covers
01
Custom web applications
Web applications built around how your organisation works, and able to grow with it.
02
Secure API development
APIs with authentication, rate limiting and threat modelling built in.
03
Enterprise software development
Custom software for the processes off-the-shelf tools don't fit.
04
Cloud infrastructure & DevOps
Deployment and cloud migration on AWS, Azure and GCP.
Frameworks & platforms we work with
Standards and platforms we work to and on. Not certifications or partner statuses.
- AWS
- Azure
- GCP
How an engagement runs
01
Discovery
We agree what the software has to do, who'll use it, and the constraints: budget, timeline, the systems it connects to and any rules you work under.
02
Design & threat model
We design the architecture and threat-model it before building, so the main risks are dealt with on paper first.
03
Build
We build in short iterations you can review, with code review, automated tests and security scanning on every change.
04
Handover
You get the source code, the documentation and the threat model. We can keep supporting it after launch.
What you receive
- Working software, with its source code, documentation and threat model
- Automated tests and security checks in the build pipeline
Start a conversation
Talk to us about secure engineering.
A penetration test, a compliance deadline, a system to build. Tell us where you are and we'll come back to you with how we'd approach it.