Skip to content
ARB Codes

Hosting and support

Security and data protection

We examine the way your software deals with sign-in, permissions and personal data, repair the risky parts, and help you satisfy GDPR and the security questionnaires clients send.

The issue

What leads teams to ask us

  • A client's security questionnaire has arrived

  • It is unclear who can see what

  • Personal data is kept with no clear rules

What is covered

Inside the work

We set the scope around your goal each time. Most projects contain the parts listed here.

  • Access reviewServer-side checks, permissions and roles.
  • Vulnerability scanCommon attacks, headers and dependencies.
  • Data protectionAudit trails, encryption and retention.
  • GDPR supportProcessing records and data maps.
  • Security questionnairesAccurate answers, backed by evidence.

The steps

How we deliver

  1. 01DiscoverWe study how your business runs, settle the goals, then send a written scope with a fixed quote.
  2. 02DesignBefore any code is written, you sign off a clickable prototype, one screen at a time.
  3. 03BuildSprints of two weeks. Each one ends with you trying the real product.
  4. 04LaunchGo-live happens at a quiet hour. We train your team and pass over every account.
  5. 05CareA monthly plan keeps it safe, quick and getting better as you grow.

One-off project

An agreed scope at a fixed quote, paid by milestone. Once it's paid, the code and accounts are yours.

Monthly care plan

A subscription paid monthly so your software stays secure, monitored and improving, with written response times.

Common questions

Answers up front

Do you carry out penetration tests?

Our work is security reviews and fixes. Where a penetration test is required, we can arrange an independent one.

How do you price this?

It is a one-off project. We agree a fixed quote after a short call and you pay it in milestones. A monthly care plan covering hosting, updates and support can be added after launch.

Tell us what you'd like built.

Describe the problem in a few lines. One call later, a written scope and a fixed quote reach you within 48 hours.