Home/Work

Selected work

Proof, where we're permitted to show it.

A selection of engagements across government and defense, biometrics, safety-critical software, cyber and forensics, cloud, data and the systems a business runs on. Much of our work is confidential by nature — what follows is described only to the extent we're able.

3 programs
Government, defense & law-enforcement
24
Capability domains engaged
3 regions
United States · United Kingdom · EU
100%
Engagements held in confidence

Government & defense

Programs where the standard is absolute.

National-security, law-enforcement and aerospace work, described at the level we're permitted to. Technical, operational and classified detail is withheld by design.

Federal Law Enforcement · GermanyGovernment · Biometrics

National Automated Fingerprint Identification System — Bundeskriminalamt (BKA)

Engineering and optimization work on the German Federal Government's national AFIS — the automated fingerprint identification platform underpinning federal law-enforcement identification, analogous in role to IAFIS in the United States.

Mandate

Improve the throughput, responsiveness and reliability of a national-scale biometric identification platform operating against very large fingerprint databases.

Approach

We focused on the matching and identification pipeline — large-database search performance, processing throughput and system reliability — and on interoperability aligned to recognized biometric data-interchange standards. Operational and security specifics remain with the authority and are not described here.

Delivered

Performance and reliability engineering across the identification workflow, throughput optimization for high-volume processing, and standards-aligned interoperability work.

Outcome

Faster, more dependable identification turnaround at national scale — supporting the platform's role in time-sensitive law-enforcement work.

AFIS / ABISBiometric matchingPerformanceStandards & interoperability
Defense & Aerospace · ItalyAir Force · Safety-Critical

Safety-Critical Software Support — Italian Air Force F-35B Fleet

Safety-critical software engineering support within the INTEGRITY-178 real-time operating system environment associated with the Italian Air Force's (Aeronautica Militare) fleet of F-35B aircraft.

Mandate

Support high-integrity software work to the rigor that airborne, mission-critical systems demand — where determinism, verification and certification evidence are non-negotiable.

Approach

Our work centered on safety-critical software engineering practice aligned to DO-178C-class objectives: verification, real-time and deterministic-behavior assurance, and the traceability and evidence that certification requires. Program, platform and technical specifics are restricted and are deliberately omitted.

Delivered

Verification and certification-support engineering and real-time software optimization within the RTOS environment, delivered under strict program controls.

Outcome

Contributed to high-integrity software assurance for a demanding airborne platform — to the standards on which such missions depend.

DO-178CRTOSVerificationAvionics-grade software

// Engagements involving classified, defense or national-security programs are described only to the extent permitted. Technical, operational and program-specific detail is deliberately omitted, and nothing here should be read as disclosing controlled or classified information. Naming of agencies and programs reflects the engagement at a capability level only.

Across the rest of the work

Software, security and the systems businesses run on.

A representative cross-section of commercial engagements — anonymized by sector and region where confidentiality applies. The pattern is consistent: a hard problem in, something measurably better out.

Business Systems · OptimizationFintech · United Kingdom

Plugging a billing system that was quietly leaking revenue.

A fast-growing payments business was losing money it couldn't fully account for — charges dropped between systems, manual reconciliation everywhere, and a finance team buried in spreadsheets.

Challenge

Legacy billing tooling with no single source of truth. Usage events, invoices and the ledger disagreed, and no one could say by how much or why.

Approach

We instrumented the full billing path, built an automated, reconciled invoicing platform integrated with their ledger, and added controls that flag discrepancies before they reach a customer.

Delivered

A replatformed billing engine, automated reconciliation, and a finance dashboard that closes the month in days, not weeks.

Outcome

Recovered an estimated 3–5% of previously leaked revenue and cut month-end close time by roughly two thirds.

BillingAutomationData integrationFinance ops
Data & AI · AnalyticsHealthcare · European Union

Turning fragmented clinical data into decisions clinicians trust.

A multi-site healthcare provider had rich data trapped in incompatible systems, and leadership was making operational calls on stale, hand-built reports.

Challenge

Siloed source systems, inconsistent definitions, and reporting that took analysts days to assemble and no one fully trusted.

Approach

We built governed data pipelines into a central lakehouse, modeled consistent metrics, and delivered self-serve dashboards with privacy controls appropriate to clinical data.

Delivered

A governed data platform, a trusted metric layer, and operational dashboards across sites — with lineage and access controls throughout.

Outcome

Reporting that was once measured in days now lands in near real time, and operational reviews run from a single agreed set of numbers.

Data engineeringLakehouseBIData governance
Enterprise Apps · ModernizationLogistics · EU / US

Replatforming a logistics ERP without stopping the trucks.

An ageing, heavily customized ERP was holding a logistics operator back — slow, fragile, and impossible to change safely as the business grew across borders.

Challenge

A decade of bespoke customization on an unsupported platform, with operations that could not tolerate a big-bang cutover.

Approach

We modernized incrementally — strangling functionality across to a supported platform module by module, with integration and automated testing protecting live operations at every step.

Delivered

A modern, supported ERP core, re-engineered procurement and fulfilment workflows, and integrations that ended manual re-keying between systems.

Outcome

Order processing time fell materially, change that once took months now ships in weeks, and the cutover landed with no operational outage.

ERPLegacy modernizationIntegrationWorkflow
Cloud & DevOps · PerformanceRetail · United Kingdom

Making an e-commerce platform fast — and ready for peak.

A retailer's storefront buckled under campaign traffic and cost a fortune to run, with releases that were slow and nerve-wracking.

Challenge

A monolithic platform with poor observability, painful deployments, and performance that collapsed exactly when marketing succeeded.

Approach

We re-architected hot paths, introduced containerized services, automated the release pipeline, and added SLO-based monitoring and cost controls.

Delivered

A faster, observable platform with automated CI/CD, autoscaling for peak, and a cloud bill brought back under control.

Outcome

Page-load times roughly halved, peak-traffic incidents effectively eliminated, and cloud run-cost reduced by around 30%.

Cloud-nativeCI/CDPerformanceFinOps
Digital Forensics · DFIRLegal · United Kingdom

Reconstructing the truth for a high-stakes dispute.

A law firm needed defensible answers — fast — about what happened on a set of devices and systems central to contested litigation.

Challenge

Time pressure, a mix of endpoints, cloud and mobile sources, and a standard of evidence that had to hold up under challenge.

Approach

We forensically collected and analyzed across disk, memory, cloud and mobile, preserving chain of custody, and produced a clear, exhibit-backed timeline.

Delivered

A defensible investigation, documented methodology, and expert reporting suitable for proceedings.

Outcome

The findings withstood legal scrutiny and gave counsel a clear, evidenced account to act on.

ForensicseDiscoveryChain of custodyExpert reporting
Cyber Defense · OT / ICSManufacturing · European Union

Securing a factory floor without halting production.

A manufacturer's operational technology had grown organically and was dangerously exposed, but production could not stop for security work.

Challenge

Flat networks bridging IT and OT, legacy controllers, and no tolerance for downtime on the production line.

Approach

We mapped the environment, segmented IT from OT, deployed monitoring suited to industrial protocols, and built an incident playbook the site could actually run.

Delivered

A segmented, monitored OT estate, hardened remote access, and a tested response plan — delivered around production schedules.

Outcome

Lateral-movement risk between IT and OT was sharply reduced, with continuous visibility where there had been none.

OT securitySegmentationMonitoringIR planning
Cloud & DevOps · FinOpsTechnology · United States

Cutting a SaaS company's cloud bill while improving reliability.

A scaling SaaS business was burning cash on cloud and firefighting reliability at the same time — growth was making both worse.

Challenge

Over-provisioned infrastructure, no cost accountability, and reliability gaps that surfaced as customer-visible incidents.

Approach

We migrated to a right-sized, IaC-managed platform, introduced SLOs and observability, and put FinOps practices and guardrails in place.

Delivered

A modern, codified platform with reliability targets, cost visibility per team, and automated waste removal.

Outcome

Cloud spend reduced by roughly a third even as load grew, with a measurable drop in customer-impacting incidents.

FinOpsIaCSREObservability
Mobile Verification · MVTSCivil Society · Global

Protecting people whose phones are a target.

Journalists and human-rights defenders had credible reason to believe their devices were being targeted by mercenary spyware.

Challenge

High-risk individuals, sophisticated commercial surveillance implants, and a need for discretion and care throughout.

Approach

We forensically verified the devices for Pegasus-class indicators, remediated where compromise was found, and put ongoing hardening and monitoring in place.

Delivered

Device verification, remediation, and continuous protection for at-risk principals — handled quietly.

Outcome

Affected individuals regained a trusted device and an ongoing safety net, with practical guidance they could live with.

MVTSSpyware detectionMobile hardeningHigh-risk protection
Biometrics & Identity · Public SectorGovernment · European Union

Scaling an identity-onboarding system to national volume.

A public-sector identity programme needed to enrol and verify people reliably at a scale its existing system could not sustain.

Challenge

Millions of records, strict accuracy and interoperability requirements, and latency that had to stay low under heavy load.

Approach

We optimized the biometric matching and deduplication pipeline, tuned large-database search, and aligned data handling to recognized biometric interchange standards.

Delivered

A higher-throughput identity pipeline, reduced match latency, and standards-aligned interoperability.

Outcome

Identification turnaround improved substantially at national scale, with accuracy and throughput both holding under load.

IdentityABISPerformanceStandards
Secure Comms · CryptographyFinancial Services · United Kingdom

Getting ahead of the quantum threat to long-lived secrets.

A financial institution held data that must stay confidential for decades and wanted a credible, prioritized path to quantum-resistant cryptography.

Challenge

Cryptography spread across many systems, unclear crypto-agility, and a 'harvest-now, decrypt-later' risk to long-lived data.

Approach

We inventoried cryptographic use, reviewed implementations against current best practice, and built a phased migration plan toward post-quantum readiness.

Delivered

A cryptographic inventory, an implementation review, and a crypto-agility roadmap with clear sequencing.

Outcome

The organization moved from an unknown exposure to a measured, prioritized programme it could fund and track.

CryptographyPost-quantumCrypto-agilityReview
TEMPEST / EMSEC · FacilitiesCritical Infrastructure · European Union

Certifying a space that simply could not leak.

A critical-infrastructure operator needed a secure facility whose sensitive processing could not be reconstructed from outside the room.

Challenge

Compromising emanations, an existing space not built for it, and an exacting emanation profile to meet and prove.

Approach

We assessed and zoned the facility, specified shielding and filtering, and verified attenuation through instrumented measurement.

Delivered

A zoned, shielded space with documented emanation performance and the gear specified to maintain it.

Outcome

The facility met its required emanation profile, evidenced by measurement rather than assertion.

TEMPESTShieldingRF surveyCertification support
Business Admin · AutomationInsurance · United Kingdom

Taking the manual grind out of back-office insurance ops.

An insurer's back office was drowning in repetitive, error-prone administrative work that scaled headcount linearly with volume.

Challenge

High-volume manual processing across disconnected systems, with errors and backlogs that grew with the book.

Approach

We automated the highest-volume workflows with RPA and integration, added document capture, and put operational reporting around the whole flow.

Delivered

Automated back-office workflows, integrated systems, and management reporting on throughput and exceptions.

Outcome

Processing capacity rose sharply without added headcount, error rates fell, and staff moved to work that needed judgment.

RPABack-officeDocument managementReporting

// Commercial clients are anonymized by sector and region where confidentiality applies. Figures describe representative outcomes for the engagement type rather than audited results attributed to a named client. We're happy to discuss relevant references directly, under NDA, with serious prospective clients.

Sectors we've delivered in

Where a failure isn't a help-desk ticket.

Government Defense & Aerospace Law Enforcement Critical Infrastructure Financial Services Healthcare Legal Manufacturing Logistics Technology & SaaS Retail & E-commerce Civil Society

Your problem could be next

Tell us what's keeping you up at night.

Whether it's a system that's failing, a threat you can't see, or a program that has to meet an exacting standard — describe it, and we'll tell you honestly how we'd approach it.