While it grows
Technical consulting and security
Architecture, performance, cloud, security audits and pentests.
Hard problems call for an experienced second opinion.
We support teams with decisions on architecture, performance, scale, cloud, quality, technical debt and security. Security goes through the same architecture and code reviews as the rest of the engineering.
Application security
Audits and pentests of web applications and APIs, always authorized, with scope and rules agreed in writing before we start.
- Application security audits
- Authorized pentests of web applications and APIs
- Security-focused code review
- Authentication and authorization
- Dependencies, secrets and configuration
- Cloud security review
- Threat modeling
- Vulnerability prioritization, remediation and hardening
- When it fits
- When your team already has software running and a hard decision, a bottleneck or a security question ahead.
- What you get
- A diagnosis with the risks in priority order, the trade-offs of each path and a plan your own team can carry out.