Every engagement follows the same four stages, so you always know what you are paying for, what you will get and when. Security and testing are not a phase at the end; they run through all of it.
Each stage ends with something you keep, whether or not you carry on with us.
STAGE ONE
Consult
A free health check or first conversation. We look at what you have and tell you plainly whether we are the right fit. You get a short written view of the problem and the options.
STAGE TWO
Discover
Fixed price, sized to your project. We map users, data and systems, test the riskiest assumptions and size the work. You get a costed plan, an architecture and a backlog.
STAGE THREE
Deliver
Short sprints, with a working release every two weeks. You see progress in a live environment, and the IP transfers to you under the contract.
STAGE FOUR
Support
Hosting, monitoring and improvement to an agreed SLA, with the same people who built it. A named team, a service desk and a monthly report.
Security and testing
Built secure, tested properly
Running through every stage, not bolted on at the end.
Developed under our ISO 27001 information-security management system
Threat modelling at discovery and OWASP-aligned coding standards
Separate development, test and staging environments that mirror production
Automated unit, integration and end-to-end tests on every change
Independent penetration testing by an accredited partner before go-live, with findings fixed and retested