Skip to main content

codéjà Vu / Work with us

Work with us.

Software for your business, built with security in mind. We work with local businesses and international startups on websites, applications, business systems and security assessments.

Tell us about it

Secure websites & applications

Bring us a business workflow or product idea. We scope websites, customer portals, web applications and integrations with clear permissions, testing and a documented handover.

Websites · Customer portals · Apps & APIs

Let’s talk

POS & business systems

Start with your sales, stock and reporting needs. We offer discovery for POS, inventory and business systems, then agree a phased build around the workflows your team actually uses.

POS discovery · Inventory · Reporting & integrations

Let’s talk

Web & API testing

We test how your application behaves: who can access what, how accounts connect, and where a workflow can be misused.

Accounts · Permissions · Business logic

Let’s talk

Code & architecture review

We examine a feature or service with your engineers, following sensitive data and security decisions from design into code.

Identity · Integrations · Critical code paths

Let’s talk

How we work

  1. Discover and agree

    Define the outcome, scope, acceptance criteria, timing and written permission. Complex POS and ERP work begins with paid discovery.

  2. Build or assess

    Work through agreed milestones and share progress. For assessments, investigate application behaviour and share urgent findings straight away.

  3. Review together

    Demonstrate the software against agreed acceptance criteria. For security findings, show how to reproduce the issue and what needs fixing.

  4. Verify and hand over

    Deliver the agreed code, setup notes and handover. Retest submitted changes within the agreed window and record what remains.

We quote after discovery, with a deposit and milestone payments agreed before delivery. Maintenance, hosting and further changes are scoped separately. Need an NDA or vendor information? Ask when we talk. We arrange a secure channel for private evidence.

From our research

All research

MoSec · 2022

CRLF to Account Takeover: Chaining Three Bugs

MoSec followed a response-handling flaw beyond its first symptom. The investigation asked what changed when separate weaknesses worked together.

Published investigation