We do the hard part and make your project work.

When Someone Is Already Inside

A custom-built PHP site was being actively exploited. We scoped the attacker’s access from the logs, automated the search for string-built SQL queries, and fixed 5 Execution After Redirect flaws. Every one of these jobs has been on a codebase new to us, so we look for the next weak point as well as the last one.

Software People Can Keep

Calculations that took engineers 4 hours by hand now take under 5 minutes. We wrote it in Visual Basic on purpose, so the engineers could maintain it themselves. The same thinking in Perl took WHM customer onboarding from 2 hours to 2 minutes.

Built to Last

A multithreaded C daemon, backed by MySQL, monitored 800+ websites and stayed in production for about 8 years.

The Box Tracker

We co-founded a gym management platform for 8 CrossFit gyms. Recurring ACH billing ran in-house: failed payments rolled back for an automatic next-day retry, and no member was charged more than once per billing cycle. We security-tested it for 2 years with Burp Suite and fuzzing.

Keeping the Lights On

On-site and off-site hosting: DNS, mail servers with SPF and DKIM, networking, firewalls, and PCI DSS compliance for client environments. We once moved a whole server room overnight, re-cabling the racks, with zero business disruption.

Finding the Slow Part

A store’s product lookup used 128 MB of memory, 5 MB of HTML and 2 minutes of CPU time. One custom SQL query brought it to 2 seconds and under 32 MB.

A Pretty Big Town

We have worked with companies in California, Arizona, Texas, Georgia, France, England and Australia, including 4 web design firms where we built the custom features after working through the problem with their UX designers.