02 Focus Area

Software written by a security company

We build the Cyber Operations Toolkit, and we build the flight software on our own satellites and drones. That is the same team you get for your project. Threat modeling, secure defaults, and a real test bench are how we work by default, not a hardening pass bolted on before launch.

05Build areas, from web apps to firmware
Secure SDLCThreat modeling from the first sprint
03Engagement models
You own itSource, pipelines, and documentation

01 Capability

What we build

Five areas, all of them things we have shipped for ourselves before shipping them for a client. If your project does not fit one of these, say so on the scoping call and we will tell you honestly whether we are the right shop.

B-01

Mission & Enterprise Applications

Internal tools, operator consoles, case management, and workflow systems for teams whose work does not fit an off-the-shelf product. Built for the people who will sit in front of them eight hours a day.

  • Web applications and operator interfaces
  • Case, workflow, and evidence management
  • Role-based access and audit logging
  • Accessibility and keyboard-first design
B-02

Data Pipelines & Analytics

Getting telemetry, imagery, and log data from where it is produced to where a decision gets made, without losing provenance along the way.

  • Ingest, normalization, and enrichment
  • Streaming and batch processing
  • Search, correlation, and reporting layers
  • Retention and provenance controls
B-03

Integration & Automation

Connecting the systems you already paid for. API work, connector development, and the automation that removes a manual step somebody currently does at 2am.

  • API design, development, and documentation
  • Connectors between security and IT tooling
  • Workflow and response automation
  • Legacy system interfaces
B-04

Security Tooling

Detection content, analysis utilities, and internal platforms for security teams. This is the work our own toolkit came out of, so it is well travelled ground.

  • Custom detection and hunting content
  • Analyst tooling and triage automation
  • Evidence handling and chain of custody systems
  • Toolkit extensions and custom modules
B-05

Embedded & Flight Software

Firmware, command and control links, and autonomy code for uncrewed systems. We run this code on our own satellites, maritime drones, and aerial drones.

  • Flight and vehicle firmware
  • Authenticated command and telemetry links
  • Onboard processing and payload control
  • Ground station and fleet software

02 Method

How we build it

A secure development lifecycle that produces working software on a schedule, with the security work spread across the whole build instead of piled up at the end.

  1. 01

    Threat model first

    Before the first commit we agree on what the system protects, who wants it, and what an acceptable failure looks like. That document drives the architecture.

  2. 02

    Build in short cycles

    Working software in front of you every couple of weeks. Requirements change, and finding that out at week four costs less than finding out at month six.

  3. 03

    Test like an attacker

    Unit and integration tests are the floor. Our own security practice reviews the build, and abuse cases get tested alongside the happy path.

  4. 04

    Hand over cleanly

    You get the source, the build pipeline, the deployment runbook, and the documentation. No dependency on us to keep the lights on unless you want one.

03 Working Together

Three ways to engage

Pick the shape that fits your organization. We will tell you if a different one would serve you better.

Project delivery

Fixed scope, agreed milestones, defined acceptance criteria. Best when you know what you need built.

Embedded engineers

Our developers work inside your team and your process, on your board. Best when the roadmap is yours and the capacity is not.

Build and transfer

We build the first version and train your team to own it. Best when you are standing up an internal capability.

→ Next Step

Have something that needs building?

Send us the problem rather than the spec. The first call is about whether custom software is even the right answer.