Security architecture
Threat modelling and design review
Identify risks before building: identities, secrets, APIs, data and the delivery chain, with proportionate measures.
Which needs it covers
- You are launching an application that handles sensitive data
- A large customer has sent you a security questionnaire
- You want to know whether your current architecture holds up
Compare packages
Choose the package that matches your situation. You can adjust it with us.
Package: Review and support
What is not included
- Penetration testing and certification audits
- Legal compliance (GDPR, contracts), which is a matter for your advisers
What we need from you
- The application's diagrams or code
- A technical contact
The steps
- 1.Scoping
- 2.Threat modelling
- 3.Review
- 4.Measures and debrief
- 5.Implementation (depending on package)
After delivery
The threat model belongs to you and can be updated with each major change.
What affects the quote
- Size and complexity of the system
- Sensitivity of the data
- Support with implementation
How we work
Our approach
We model threats against your actual architecture, review identities, APIs, data, dependencies and pipeline, then propose measures ranked by severity and effort.
How we deliver
- Findings backed by observed evidence
- Blocking objections flagged as such
- Priorities agreed with you
The surfaces we protect
Select an element to see what it does.