Security
Security isn't a feature added at the end. It's a property of how a system is designed, built, and run.
Designed in
We consider who might attack a system, and how, while it’s still being designed. Many of our projects have been in regulated industries (lotteries, gaming, and finance) where security and auditability are requirements, not options.
Encryption
We are experts in understanding the security space and have lead the development of some of the most secure products in the world. We understand the difference in security posture versus security hardening. We understand scope and target, such as as when public/private key encryption versus a synchronous encryption is used (this is oddly a concept many don’t understand!) We apply the appropriate and safest and most secure encryption at every step, including data at rest (including cloud data).
Least privilege
Every part of a system gets only the access it needs. A component that’s compromised can’t reach what it was never allowed to touch.
No secrets in code
Passwords, keys, and credentials live in managed secret stores, never in source code or in software sent to users’ devices.
Checked continuously
Dependencies are audited automatically on every change, and known vulnerabilities fail the build. Logs record what happened without recording personal data.
Privacy
We collect only what a system needs. This site collects nothing about you: no cookies, no tracking, no analytics.