Services
Two services, one standard: software and systems that hold up under scrutiny.
Secure SaaS Engineering
For: startups and businesses that need a web or SaaS product built, rebuilt or extended.
What we build: customer-facing SaaS platforms, internal business tools and dashboards, client portals, integrations and APIs. We also build AI-enabled features, such as document processing, search and assistants, using established model APIs, with the same access control and data-handling rules as the rest of the product.
How we build secure SaaS productsSecurity built in, as standard
- Role-based access control and secure authentication, including multi-factor where appropriate
- Encryption of data in transit and at rest
- Audit logging of key actions
- Dependency and secret scanning before release
- Secure, documented deployment
You receive
A working product with deployment setup and documentation. Code ownership and handover are agreed in your contract.
Typical duration
6–12 weeks, depending on scope
Security Assessment and Remediation
For: teams that hold customer, health or financial data and need to know their risk, answer a customer's security questionnaire, or prepare for HIPAA, ISO 27001 or India's DPDP rules.
Remediation, if you want it: we implement the fixes — access controls, MFA, encryption, logging, backups, policies and staff training.
How the assessment worksYou receive
- Risk assessment report
- Risk register (spreadsheet)
- Prioritised remediation plan
- Two-page executive summary
Typical duration
3–5 weeks
What it is not
Not a certification and not legal advice. For hands-on testing of a specific system, see security testing.
Focused services
Email and domain security
Stop anyone from sending email that impersonates your domain. We set up SPF, DKIM and DMARC safely, harden your Google Workspace or Microsoft 365, and add security headers.
Read moreWeb app security testing
Authorised testing of your web app and APIs: automated scanning with manual verification, following the OWASP method, with a clear report, fixes and a retest.
Read moreEngagement models
Fixed-scope project
A defined product or assessmentMilestone build
Larger products delivered in stagesMonthly support
Ongoing development, maintenance or security workEvery engagement is scoped and quoted in a written proposal. Cost depends on scope, number of systems or features, integrations and timeline.
Have a product to build or a system to secure?
Tell us what you need. You will receive a written proposal within one business day.