Menu

Services

Focused help, from first review to ongoing advice

We deliberately keep our services few and clear. Each one starts with a conversation and an agreed scope, so you always know what you're getting — and what you're not.

01 Review & Assess

Independent Application Review

An experienced second set of eyes before you launch.

A scoped, independent assessment of a website, web application or business tool — security, application quality, architecture, usability and operational readiness — with documented findings and practical recommendations.

  • Checking whether users can see records that belong to someone else
  • Reviewing how secrets, sessions and access controls are handled
  • Assessing hosting, deployment, backups and recovery
  • Spotting design decisions that will be expensive to change later
Learn about this service Request an Independent Review
02 Troubleshoot & Improve

Application Troubleshooting & Technical Guidance

Experienced investigation when something isn't working the way it should.

Hands-on investigation of applications that are broken, slow, unreliable or hard to maintain. Sometimes we fix the problem directly; sometimes we give you or your developer precise instructions to fix it.

  • It works on a laptop but fails once deployed
  • Recurring errors that AI-suggested fixes keep moving around
  • DNS, SSL, hosting or caching problems
  • Unexpected server load or cloud costs
Learn about this service Discuss a Technical Problem
03 Monitor & Advise

Ongoing Application Assurance

Continued, experienced attention after launch.

A recurring arrangement for applications that matter to your business: periodic reviews, vulnerability and dependency awareness, configuration checks and an experienced adviser who already knows your system.

  • Periodic manual reviews of what has changed
  • Guidance when a newly disclosed vulnerability affects your stack
  • Follow-up on previously identified findings
  • Regular advisory conversations as your application grows
Learn about this service Discuss Ongoing Assurance

Also available

AI Advisory & Tailored Solutions

Need something built or integrated? We also assist with carefully scoped AI and technology solutions where our experience can make a practical difference.

This is a selective capability, not our core business. We take on AI and development work where the scope is clear, the benefit is real, and our infrastructure and security experience genuinely helps. If something would be better served by a specialist firm or an off-the-shelf product, we'll tell you.

  • Advising on which AI tools fit a business problem — and when they don't
  • Integrating AI services securely, with sensible permissions and data boundaries
  • Small, well-scoped internal tools and workflow automation
  • Practical guidance for staff using AI tools day to day

Talk About an AI Project

Plain definitions

Different kinds of checking are not interchangeable

Security services are often described loosely. We use these terms precisely, and we never present one as another.

Automated monitoring
Software that repeatedly checks something specific — such as whether a site responds or a certificate is about to expire. Useful, but it only sees what it was configured to look for.
Dependency and vulnerability intelligence
Tracking published vulnerabilities (CVEs) and actively exploited ones (such as CISA's Known Exploited Vulnerabilities list) against the components your application uses.
Configuration assessment
Reviewing how hosting, DNS, certificates, security headers, environments and cloud services are set up.
Authenticated application testing
Signing in as test users — with your authorization — to check whether the application enforces the rules it should, such as keeping customers' data separate.
Formal penetration testing
A structured, authorized attempt to exploit a system under a defined methodology and rules of engagement, often required by contracts or compliance standards. It is not part of our standard reviews, and we will say so clearly if you need one.

What every engagement has in common

  • A written scope agreed before work begins, including what is excluded.
  • Your explicit authorization for any testing of systems you own or operate.
  • Confidential handling of your code, configuration and data.
  • Findings explained in plain language, with business impact as well as technical detail.
  • Honest limits: our reviews are professional opinions based on the scope and access available. They are not certifications or guarantees.

Not sure which service fits?

That's completely fine. Describe what you've built or what's going wrong, and we'll suggest a sensible starting point.

Start a Conversation How we work