Who we are · How we work

Consult, discover, deliver. Then we stay.

Every engagement follows the same four stages, so you always know what you are paying for, what you will get and when. Security and testing are not a phase at the end; they run through all of it.

Fixed-price discovery · working releases every two weeks · IP transfers to you under contract

At a glance

What to expect

DiscoveryFixed price, sized to your project
First releaseAgreed at discovery
Who does the workArchitects, not juniors
IPTransfers to you under contract
After launchSupport to an SLA
Cyber Essentials PlusISO 27001ISO 9001BPSS & BS7858 screenedUK-based delivery
Four stages

From first conversation to live service

Each stage ends with something you keep, whether or not you carry on with us.

STAGE ONE

Consult

A free health check or first conversation. We look at what you have and tell you plainly whether we are the right fit. You get a short written view of the problem and the options.

STAGE TWO

Discover

Fixed price, sized to your project. We map users, data and systems, test the riskiest assumptions and size the work. You get a costed plan, an architecture and a backlog.

STAGE THREE

Deliver

Short sprints, with a working release every two weeks. You see progress in a live environment, and the IP transfers to you under the contract.

STAGE FOUR

Support

Hosting, monitoring and improvement to an agreed SLA, with the same people who built it. A named team, a service desk and a monthly report.

Security and testing

Built secure, tested properly

Running through every stage, not bolted on at the end.

  • Developed under our ISO 27001 information-security management system
  • Threat modelling at discovery and OWASP-aligned coding standards
  • Separate development, test and staging environments that mirror production
  • Automated unit, integration and end-to-end tests on every change
  • Independent penetration testing by an accredited partner before go-live, with findings fixed and retested
  • Accessibility tested against WCAG 2.2 AA
Assurance

Certified and screened

  • —ISO 27001 and ISO 9001, UKAS-accredited
  • —Cyber Essentials Plus
  • —BPSS and BS7858 screened team
  • —UK-based delivery

Start with a free health check.

A written view of the problem and the options, and an honest answer on whether we are the right fit.