SaaS development · Security audits · AI · Cloud

Software, security and cloud. Done properly.

We build SaaS products, audit the security of cloud, Microsoft 365 and applications, and build AI and cloud systems for Australian businesses.

Security audit · example findings

  1. MappedCloud accounts, 38 public endpoints, Microsoft 365 tenant
  2. CriticalStorage bucket allowing public read of customer files
  3. HighMFA not enforced on three admin accounts
  4. MediumLegacy API still accepting TLS 1.0
  5. FixedBoth critical and high items closed the same day

Services

  • SaaS development

    We design, build, host and maintain SaaS products, from first version to production.

    • Product design, architecture and MVPs
    • Multi-tenant platforms with separated customer data
    • Billing, user management and single sign-on
    • APIs and third-party integrations
    • Takeover of existing products
  • Security audits

    Independent reviews of your applications, cloud, Microsoft 365 and processes, with findings ranked by risk and the fix for each one.

    • AWS and Azure configuration reviews
    • Microsoft 365 and identity security
    • Web application and API testing
    • ACSC Essential Eight assessments
    • Retesting after fixes
  • AI

    We build AI features and internal tools on large language models, connected to the systems you already use.

    • Document processing and data extraction
    • Search across your own documents
    • AI features inside your product
    • Workflow automation with human review
    • AI usage policies and risk reviews
  • Cloud

    Cloud architecture, migration and cost control on AWS and Azure, with infrastructure defined as code.

    • Architecture and landing zones
    • Migrations from on-premises or between clouds
    • Infrastructure as code and CI/CD pipelines
    • Cost reviews and right-sizing
    • Backups, monitoring and disaster recovery

Industries

Software we have built and support for businesses in these sectors.

Trucking and transport

Systems that track every truck, driver and load, and show what is running late.

  • Job allocation and dispatch
  • Driver apps and proof of delivery
  • GPS and telematics integration
  • Delivery updates for customers

Health

Systems for specialist practices that cut the admin between a referral arriving and a patient being seen.

  • Referral intake and tracking
  • Online booking and SMS reminders
  • Practice management software integration
  • Patient data stored in Australia

CCTV and licence plate recognition

Cameras connected to the rest of the business, so a plate read or camera event triggers an action.

  • Gate and boom control
  • Visitor and contractor logs
  • Alerts sent to the right person
  • Footage linked to incidents

Real estate

Analytics for agencies, showing how each listing, enquiry, campaign and agent is tracking.

  • Dashboards for every agent
  • Listing, enquiry and ad spend reports
  • Commission forecasts 30, 60 and 90 days out
  • Data from the agency's existing CRM

Security audits

What we review

Cloud
Identity and access, storage, network rules, logging, encryption and backups in AWS and Azure.
Microsoft 365
MFA, conditional access, admin roles, email protection and external sharing.
Applications
Authentication, authorisation, data handling and common web and API vulnerabilities.
External surface
Internet-facing domains, servers, open ports and certificates.
Process
Patching, backups, account management and incident response, assessed against the ACSC Essential Eight.

What you receive

  • Executive summary
  • Findings ranked by risk
  • Remediation steps for each finding
  • Report walkthrough
  • Retest after fixes

Most audits take one to three weeks depending on scope. Fixed price, agreed before we start.

Book an audit

AI

Document processing

Extract data from invoices, forms and contracts into your systems, with exceptions flagged for review.

Internal search

Search your policies, manuals and records, with answers linked to the source document.

Drafting

Draft emails, reports and quotes for staff to review and send.

AI in your product

Search, recommendations and assistants built into your own software.

How we handle your data

  • Not used to train public models
  • Kept in Australian regions where possible
  • Human review of important outputs
  • Accuracy tested before launch and monitored after

How we work

  1. Understand

    We learn how your business works and agree what needs solving.

  2. Scope

    A written scope, timeline and price before work starts.

  3. Deliver

    We deliver in stages, with regular updates.

  4. Support

    We host, monitor and maintain what we build.

Ways to work with us

Fixed-scope project

Defined work at an agreed price and timeline, such as an MVP, a migration or a security audit.

Ongoing

Monthly development, hosting, monitoring and support.

Advisory

Architecture reviews, vendor assessments, technical due diligence and board briefings.

Technology

  • AWS
  • Microsoft Azure
  • Microsoft 365
  • Entra ID
  • Terraform
  • Docker
  • TypeScript
  • Node.js
  • Python
  • PostgreSQL
  • GitHub Actions

FAQ

How much does a project cost?

Pricing depends on scope. We provide a fixed quote for defined work or a monthly rate for ongoing work. The first conversation is free.

How long does a security audit take?

Most audits take one to three weeks, depending on scope. Critical issues are reported as soon as we find them.

Where is our data stored?

In Australian regions on AWS or Azure by default. If a service is only available offshore, we tell you before using it.

Will you sign an NDA?

Yes, before you share anything sensitive. We will also raise any potential conflicts of interest or related previous work before we start.

Can you work with our existing developers or IT provider?

Yes. We work alongside in-house teams and managed service providers.

Do you support what you build?

Yes. Hosting, monitoring, backups and updates are available as an ongoing arrangement.

Can you take over our existing software?

Usually. We start with a review of the code, hosting and security, then agree a plan.

Contact us

Send us a short description of what you need. We reply within one business day.