Secure Software Development
We design and build fast web and backend systems with security in from the first decision, not patched on before release.
- Security-focused products
- Web applications and APIs
- Backend systems and internal tools
We break it before they do.
TechinSecurity builds secure software, then attacks it the way a real intruder would. We can do the same for the systems you already run.
What we do
Penetration Testing & Audits
We attack your systems the way a real intruder would, then show you exactly what we got into and how to close it.
- Web applications and APIs
- Mobile apps
- Network infrastructure
Static & Dynamic Code Analysis
We read your source line by line and test it while it runs, so problems are caught before they reach production.
- Logic errors
- Authorization flaws
- Data-leak risks
Security Consulting
Advice from people who understand attackers, on your architecture, your priorities and the decisions you need to get right.
- Architecture reviews
- Security roadmaps
- Second opinions
IT & Infrastructure
Domain controllers, servers, networks and backups, set up by people who know how they get attacked.
- Domain controllers and Active Directory
- Servers and networks
- Backups and hardening
From first call to fixed.
-
Scope
We agree what you need, what is in bounds and what worries you most.
-
Threats
We work out who would attack it, how they would try and what it would cost you.
-
Build or break
We build it securely, or test what you have the way a real attacker would.
-
Fix
Every problem is ranked by risk, with proof and a clear way to fix it.
-
Verify
We attack it again to confirm that every fix holds.
Don't take our word for it. Read the code.
All solutions-
Pass1
A zero-knowledge password manager for the web. Your vault is encrypted in your browser, so the server only stores ciphertext it can't read.
-
Bloogla
Everything a blog needs, in one small program. A lighter WordPress alternative with signed updates, two-factor login and no plugins to patch.
-
Reclaimer
Recovers deleted files from raw disk images by carving for file signatures. A forensics project written in Rust.
Latest writing
All postsThe most expensive security failures were boring
Equifax, Colonial Pipeline, Capital One, Uber, Heartbleed and xz: six famous security stories, the small things behind them, and what to check on your own systems.
Change one number in the URL. See someone else’s invoice.
The top web risk is often one missing ownership check. Why logins and scanners miss it, where it hides, and a ten-minute test you can run today.
What an attacker can learn about your company without touching your website
Certificate logs, DNS records, job adverts and old web archives say a lot about your company. Here is how to look at yourself the way an attacker would.
Let's talk about your security architecture.
Talk directly with our engineers about your project or existing infrastructure.
We reply within 24 hours