Consultancy, no licence
Typical models (examples)
What the software needs
Strong access control. Encryption everywhere. Minimal logging of client data.
Security & intelligence
Platforms for security firms that can't use off-the-shelf.
For penetration-testing firms, OSINT and investigations practices, threat-intelligence vendors, secure-communications providers and protective-services firms whose tooling is the product.
What we build
- OSINT collection and case management with evidence handling and chain of custody
- Threat-intelligence platforms: feed ingestion, enrichment, scoring, distribution
- Secure client portals: report delivery, encrypted messaging, engagement tracking
- Penetration-test management and reporting pipelines
- Self-hosted secure-communications deployments and hardened infrastructure
- Data pipelines with strict access control and retention
The jurisdiction ladder for security
| Rung | Typical models (examples) | What the software needs |
|---|---|---|
| Consultancy, no licence | Advisory, OSINT, research | Strong access control. Encryption everywhere. Minimal logging of client data. |
| Registered security services | Jurisdiction-specific private-security or investigations licences | Client segregation. Retention-policy enforcement. Audit logs. Evidence integrity. |
| Certified and government-facing | ISO 27001, SOC 2, CREST | Certification-grade controls. Assurance reporting. Continuous control monitoring. |
Registered security services
Typical models (examples)
What the software needs
Client segregation. Retention-policy enforcement. Audit logs. Evidence integrity.
Certified and government-facing
Typical models (examples)
What the software needs
Certification-grade controls. Assurance reporting. Continuous control monitoring.
Models are examples only. Nothing on this page is legal advice; we build the software your advisers specify.
Typical timelines
- OSINT and case-management platform8–12 weeks
- Threat-intelligence platform MVP10–14 weeks
- Secure client portal4–6 weeks