Support and operations
Security and data protection
We review how your software handles sign-in, permissions and personal data, fix what's risky, and help you meet GDPR and client security questionnaires.
The challenge
Why clients come to us
A client sent a security questionnaire
You're not sure who can see what
Personal data is stored without clear rules
Scope
What's included
Every engagement is scoped to your needs. These are the parts most projects include.
- Access reviewRoles, permissions and server-side checks.
- Vulnerability scanDependencies, headers and common attacks.
- Data protectionRetention, encryption and audit trails.
- GDPR supportData maps and processing records.
- Security questionnairesAnswered accurately with evidence.
Delivery
How the project runs
- 1
Discover
We learn how your business works, agree the goals and send a written scope and fixed quote.
- 2
Design
You approve a clickable prototype screen by screen before any code is written.
- 3
Build
Two-week sprints. At the end of each one you try the real product.
- 4
Launch
We go live at a quiet hour, train your team and hand over every account.
- 5
Care
A monthly plan keeps it secure, fast and improving as you grow.
One-time project
A fixed quote for an agreed scope, paid in milestones. You own the code and accounts once it's paid.
Monthly care plan
A monthly subscription that keeps your software secure, monitored and improving, with response times in writing.
FAQ
Common questions
Do you do penetration testing?
We do security reviews and fixes, and can arrange an independent penetration test when one is required.
How is this priced?
As a one-time project with a fixed quote, agreed after a short call and paid in milestones. After launch you can add a monthly care plan for hosting, updates and support.
More in support and operations
Let's talk about what you need built.
Tell us about your project. You'll get a written scope and a fixed quote within 48 hours of our first call.