Security and data protection
Your application stores customer, sales and employee data. We check that it is protected, that each person sees only what they should and that you can recover if something fails.
What it includes
Security review
We look for common flaws in your web app: unauthorized access, injection, sessions and passwords.
Role-based access
Each person signs in with their own user and sees only what their job requires.
Backups and recovery
Automatic copies stored away from the main server, with proof they can be restored.
Personal data
The technical side of Law 1581 of 2012: consent, consent records, retention and deletion, together with your lawyer.
Headers and configuration
HTTPS, browser security policies and a server setup with no open doors.
Prioritized report
Each finding with its severity and how to fix it, ordered so you start with what is urgent.
Who it is for
- Companies with their own application that has never had a security review.
- Businesses that handle personal data and want to comply with the law.
- Teams with no backups, or that have never tried restoring them.
Where we already use it
- Bodegix (opens in a new tab)
Internal security audits, each company’s data isolated and daily backups.
- MisComandas (opens in a new tab)
Per-person roles, abuse limits and daily database backups.
How we work
The same process we use to build our own products, applied to your project.
We understand the problem
We talk with the people who will use the software and see how they work today, before proposing anything.
You get: a summary of what we understood, so you can correct it before we continue.
We put it in writing
Requirements, architecture, costs and test plan, before writing a single line of code.
You get: the document with scope, cost and delivery order. Without your approval we do not start building.
We build in deliveries
Each delivery is tested and running in an environment where you can use it from day one.
You get: access to a test environment where you use each delivery as soon as it is ready.
We support the operation
Deployment, daily backups and support once the software is in your team’s hands.
You get: a direct support channel with the people who built your software.
Start with the first step
Frequently asked questions
If your question is not here, write to us.
What is a security review?
We review your application’s code and configuration for known flaws, such as those on the OWASP Top 10 list, and deliver a report with each finding, its severity and how to fix it.
Can you help us comply with data protection law?
With the technical side, yes: how consent is requested and stored, how long data is kept and how it is deleted. Your lawyer reviews the policy and legal texts.
Can you fix what you find?
Yes. If we built the system or have access to the code, we fix findings by severity and review again.
When was your system’s security last reviewed?
We reply with specific questions, not a generic quote.
Tell us about your project