Unslop
Find and fix known bugs. No model in the loop.
Live
Breaking it before someone else doesSecurity engineering
Reviews, hardening, bot and abuse defence, and privacy compliance.
Application and infrastructure security review, remediation, edge and bot policy, and making sure customer information is handled the way your customers would assume it is.
How we approach it
A review covers the application, its dependencies, its hosting and its data handling, and comes back as a written report with each finding rated and the fix described. Not a scanner dump with the false positives left in.
The specialism is the balance most people get wrong in one direction or the other: stopping scrapers, scanners and enumeration without blocking Googlebot, the AI crawlers and social preview bots along with them. Blocking everything automated is easy and costs you most of your reach.
For Australian businesses this includes a plain read on your obligations under the Privacy Act 1988 and the Australian Privacy Principles, and what would actually have to change to meet them.
What you get
- Application, dependency and supply-chain review
- Hosting, TLS, DNS and edge configuration review
- Bot, scraper and abuse policy that preserves search reach
- Data handling, retention and privacy review
- Written report, findings rated, fixes described
- Remediation, then a re-test
Typical timeline: One to four weeks for a review.
What we have built with this
MXCyberSLaM
An infinite, self-playing cyber range.
Active
HumanIO
Human-like mouse and keystrokes, plus the detector.
Live
ExtensionUltima
One encrypted extension that hosts all the others.
In Development
DominionOS
An operating system from scratch, in Rust.
Research
WeftScript
Intent in. Running software out.
Released
HiveMind Platform
One account, one wallet, one gateway, one control station.
Live
7 of our own systems use this discipline. Every one is ours, and the ones marked open source are yours to read. The whole product line →
Client work and public source
Where this comes up
Take over a half-finished build
The previous developer is gone. Nobody has the hosting login, the code is undocumented, and you do not know whether to continue it or start again.
Harden a product before launch
Launch is close and nobody has looked at the security, the bot exposure or the data-handling obligations.
How we work
- We talk it through
- A conversation about the problem, not a sales pitch. If we are not the right people for the job we will say so and point you somewhere better. Free, and there is no obligation after it.
- You get a written quote
- A fixed price for a fixed scope, in plain English, with a delivery date. No hourly billing that quietly doubles. If the scope changes later, you approve the change and its cost before any work starts.
- We build it in stages
- You see working software every week or two, not a status report. That means you can course-correct early, while it is still cheap to change your mind.
- You take ownership
- At handover you receive the source code, the accounts, the domains and the documentation, all in your business name. Nothing stays locked to us. You could hire anyone else tomorrow and they could pick it up.
- We look after it
- An ongoing support agreement, or on-call as you need it. Your choice, and you can change or end it whenever you like.
Last reviewed · Site changelog