Capabilities
Eight disciplines, one way of working.
Systems integration and AI agents
Most businesses don't need another platform. They need the ones they have to talk to each other. We write the glue, through a vendor's API where there is one and through a scripted browser where there isn't, and we build MCP servers that let AI assistants work in real systems with the risky verbs removed.
What we do
- Connections between HR, point-of-sale, kitchen ordering, training and e-signature systems from different vendors, none of which expected to meet
- MCP servers for Microsoft 365 and QuickBooks Online, fenced per mailbox and per company
- Point-of-sale to ledger automation that reconciles before it posts
- Replicas and capture labs for systems that have no proper API
- Agent skills with a human approval gate on anything that writes
- On-premises document pipelines (scanner, local OCR, deterministic extraction, data entry) for HR, accounting and personal data that must never leave the building
Typical stack
- Python
- Playwright
- Model Context Protocol
- Microsoft Graph
- QuickBooks Online API
- MySQL
- PostgreSQL
Related work
Cloud and hybrid infrastructure
We run Azure, Hyper-V and Proxmox estates, from a static website to a fleet of 44 containerised services. Everything is declared, deployed by pipeline and logged, and we're just as happy telling you a workload doesn't belong in the cloud.
What we do
- Azure Static Web Apps, Container Apps and Key Vault, declared in Bicep
- Hyper-V and Proxmox hosts built from install images and cloud-init
- Cloudflare DNS and tunnels, so internal apps need no open ports
- Backups with a proven restore (a replica is availability, not a backup)
- Hosted PBX, SIP trunks and office networks, phones and wifi
- Support when you need it, 24/7
Typical stack
- Azure
- Bicep
- Hyper-V
- Proxmox
- Docker
- Cloudflare
- Azure DevOps
Related work
Identity and security
Identity is where most systems are quietly weakest. We design and build identity providers, scope service access down to a single mailbox or secret, and take stored secrets out of pipelines altogether.
What we do
- OpenID Connect identity providers with passkeys, TOTP and step-up
- Entra ID app registrations with certificate credentials and Exchange RBAC
- Workload identity federation for CI/CD, so there's no secret to leak
- Key Vault with per-secret access, and dependency, secret and image scanning in every pipeline
- Scheduled vulnerability scans on every application we ship, so a new CVE is patched and redeployed before it becomes your problem
Typical stack
- OIDC / OAuth 2.0
- WebAuthn
- Entra ID
- Exchange RBAC
- Key Vault
- Trivy
Related work
AI adoption with guardrails
AI can take hours out of a working week, and it can also invent a number and state it with total confidence. We review your processes, find where AI adds value without adding risk, and design it in so your people stay in charge and accountable for every outcome.
What we do
- Process reviews that find where AI saves real time, and where it shouldn't be trusted at all
- Assistants that prepare and draft whilst a person approves, so accountability never moves to the machine
- Guardrails in code rather than in a prompt: fenced tools, dry runs, read-back checks, and refusal when the numbers don't reconcile
- Deterministic steps wherever a wrong answer matters, so a hallucination has nowhere to land
- Safe access to Microsoft 365 and line-of-business data, scoped so an assistant can only reach what its job needs
Typical stack
- Model Context Protocol
- Microsoft 365
- LLM assistants
- Agent skills
- Python
Related work
Software and product engineering
We build bespoke software that fits how a business actually works: operations platforms, multi-tenant SaaS, workforce tools and the websites in front of them. Every build runs through the same plan, verify and ship discipline.
What we do
- Django and DRF back ends with Next.js or React PWAs
- Multi-tenant designs, from row-level security to an instance per customer
- Hardware integration over serial, with fail-closed state machines
- Bespoke replacements for per-seat subscriptions, owned outright and run on your own hardware
- Plugins that extend proprietary software where the vendor's own roadmap won't reach
- Static websites like this one, served from Azure with managed certificates
Typical stack
- Python
- Django
- TypeScript
- Next.js
- React
- Java
- PostgreSQL
- Redis
Related work
Marketing engines and customer engagement
Your customer history is the best marketing asset you own. We turn it into tested audiences, fair offers and campaigns that land in the inbox, with consent and suppression enforced in code.
What we do
- Rule-based segmentation over a replica of your point-of-sale data
- Campaign runners with A/B splits, caps, test mode and one-click unsubscribe
- Bounce, complaint and click handling that feeds straight back into suppression
- Social publishing with an approval queue and results ingested for reporting
- Booking and walk-in queues where the customer belongs to the business
Typical stack
- PostgreSQL
- Microsoft Graph
- Redis + RQ
- Next.js
- Stripe
Related work
Energy and home automation
We specify, install and commission solar PV and battery storage, then make it earn its keep. Home Assistant drives the batteries from the tariff and the season, and the dashboards are reconciled against the utility's own meter.
What we do
- Solar PV and battery systems sized to your consumption, not a template
- Local Modbus control of inverters and batteries, following tariff signals
- Lighting, heating, cameras and energy monitoring on one platform
- Remote management without exposing the home network
Typical stack
- Home Assistant
- Modbus
- Matter / Thread
- Proxmox
- Cloudflare Tunnel