We build cloud native applications and secure the infrastructure they run on.

What we do

• Application development

  Cloud native applications, built in whatever stack suits the job. New builds, and long-running systems that need someone to take them seriously again.

  • Greenfield builds in Go, Rust, Node.js or PHP/Laravel
  • Upgrades and version migrations
  • API design and integration

• Kubernetes

  Cluster design, day-two operations, and the hardening most clusters never receive.

  • Cluster architecture and setup
  • Workload migration
  • Operations and on-call support

• Cloud infrastructure

  Provisioning and running the platform underneath, described as code so it can be reviewed.

  • Infrastructure as code
  • Access control and secrets
  • Cost and capacity review

• Security

  Review and hardening across both the application and the infrastructure, by the people who also build them.

  • Application and infrastructure review
  • Hardening and remediation
  • Incident readiness

How we work

1. 01

   You talk to the engineers

   The people in the kickoff call are the people doing the work. Nothing is translated on the way in or on the way out.

2. 02

   Security is not a phase

   We do not bolt a review onto the end of a build. The way something is designed determines how defensible it is, so that is where the work starts.

3. 03

   We say no

   We take on what four people can do well. If an engagement needs more than that, we would rather tell you at the start than discover it halfway through.