The people who do the work
Security architects and engineers who focus on software companies, led by a consultant with 15 years in the industry. You’ll meet us on the call.
Between us we hold CISSP and ISO 27001 Lead Auditor certifications, and we’ve worked hands-on in AWS, Azure and Google Cloud.
Sanskrit for the opening of the eyes. That’s what an assessment does for your company: you see who and what can reach your data and your customers’ before you decide what to fix.
Scale with your eyes open.
Where our experience comes from
What we did in earlier roles, and the part of a platform each piece helps with. We focus on software companies now, after years in fintech, banking and healthcare. We don’t name employers, clients or products.
Web app and API
Platform design reviews
Security architecture reviews of SaaS and cloud platforms, from how customers are kept apart to how data moves. Our team signed off once the serious findings were closed.
Web app and API
Application and API testing
Threat modelling, hands-on testing and design reviews of cloud services, APIs, mobile apps and databases.
Cloud account
Multi-cloud visibility
One place to see every account, identity and security setting across AWS, Azure and Google Cloud, wired into policy reviews and releases.
Cloud account
Detection and response
Alert rules and investigation steps built on cloud, device, server and Microsoft 365 logs, used from the first alert to the clean-up.
Packages and pipeline
Supply-chain incidents
Investigation support for several organisations after a software supplier was compromised, from building the timeline to helping them recover. It informs how we look at pipelines and third-party code.
Your team
Data protection at scale
Wrote and rolled out the rules for labelling and protecting a large company’s sensitive files.
Meet us on a free call
Tell us a little about your platform and we’ll set up a free 30-minute call. Leave out passwords and customer data. We reply within one working day.
- We reply within one working day. We set up the call, and you meet the people who’d do the work.
- We send a proposal with the scope, the timing and a fixed fee.
- Work starts when you say go.
