RFC app
Administrator accounts for participants, with each participant's records encrypted under their own key.
App development, built secure
I build web apps for real business problems: CRMs, invoicing, encrypted record systems. Being a qualified network security engineer means security is designed in from the first line, not added at the end.
What's included
Secure by design
Least privilege, hardened sessions, CSRF protection and strict content security policies.
Encryption where it matters
Sensitive records encrypted with keys the server never sees, where the job calls for it.
Tested properly
Automated tests and attack probes before every release.
Light hosting
Runs on ordinary hosting without heavy frameworks or big monthly bills.
How it works
Map the workflow
How the work happens now, and where it hurts.
Threat model
Who should see what, and what an attacker would try.
Build in slices
Usable pieces early, with tests from day one.
Audit and launch
A security pass with attack probes, then go-live and support.
