Security by Design fintech platforms tailored to your operating model
Over a decade of building regulated, resilient software that brings compliance, cybersecurity, and customer journeys together.
Get in Touch See How We BuildWho We Are
We are a Lisbon-based team of architects, security engineers, and product strategists dedicated to shipping software that financial institutions and critical infrastructure can trust. Every engagement follows our four pillars: Design-first discovery, Secure SDLC, Compliance accelerators, and measurable outcomes.
That approach has helped Siemens, Nokia, SIX Group and other leaders modernize payments, automate SOC workflows, and bring new digital products to market faster.
Services
Every engagement starts with collaborative design sprints and regulatory due diligence so the software we ship is tailor-made, auditable, and resilient. We audit code against a declared standard, and we plug into your teams to accelerate secure delivery of mission-critical fintech and security programs.
Products
Crafted solutions designed to solve real-world business challenges. Pick one to see how it is put together.
Meerkat
Meerkat is a local AI deployment your people can actually use, with a border post in front of the internet. One machine holds the chat interface, the local model and your documents, and has no route out. A second holds the cloud credentials and decides, for every single request, whether it may leave.
- The machine holding your documents has no route to the internet
- A per-request decision, made in exactly one place
- Users can force local, and can never force cloud
- A decision log you can check against your own firewall telemetry
ALPACA
ALPACA does not replace your SIEM, it completes it. QRadar, Splunk, Sentinel and Elastic handle the events. ALPACA answers what they leave unsaid: who owns each log source, how critical it is, how long its data is kept, and which assets are escaping security coverage entirely.
- Every log source with a named owner, a criticality and a retention period
- CMDB assets correlated against what actually reports, so blind spots surface by name
- Read-only visibility into SIEM configuration and detection rules, with change history
- Entry, update and decommission under approval, by assistant or API
IBEX
IBEX is a sealed appliance that runs on its own hardware inside your perimeter. It maps the attack surface of the environments the cloud can never reach, scans the code your teams build, and governs every model and agent on the network. It has no route to the internet, and the only thing that leaves is the evidence.
- Its own hardware inside your perimeter, with no cloud and no data egress
- Discovers hosts, services and AI systems, including the models nobody declared
- Inline enforcement on live AI traffic: block, redact, or alert
- Findings ranked against a locally held vulnerability database, with no external lookups
ALF
ALF puts a team's own knowledge behind a question box. It ingests the playbooks, product documentation and tickets that already exist, and answers in plain language with the source and its owner attached, under the access rules your directory already enforces.
- Domain-adaptive retrieval across manuals, tickets and knowledge bases
- Plain-language questions answered with cited sources and ownership context
- Role-based governance through your existing AD or SSO, with an audit trail
- Deployed on-premises, in a private cloud, or fully isolated
