Book a call

Home›Security

Security

Built by the company that would have to keep it running

AppTech has designed, secured and supported business IT since 2002. Every habit from that work goes into the software we write, because we know which shortcuts cause an incident two years later.

  • Hosting and backups Patched, monitored and restorable. Your cloud or ours.
    • Network and access Connections scoped to what the tool needs, and nothing more.
      • Identity and sign-in The Microsoft 365 accounts you already manage, with multi-factor authentication.
        • The application No credentials in the code, data encrypted, and a record of who did what.
Four layers around every application we build. The innermost is the software itself.

The specifics

Eight things we do
on every project

Not principles. The actual decisions, and the reason each one is made.

Sign-in with accounts you already manage
Microsoft 365 or your existing identity provider, with multi-factor authentication. No separate password for staff to forget or share.
Access limited by role
People see what their job requires. Sensitive actions are recorded, with who did what and when.
Credentials kept out of the code
Keys and passwords live in a managed secret store, not in a repository. This is the single most common failure in software built quickly.
Data encrypted, in transit and at rest
Personal information is identified during scoping, and we agree where it lives and how long it is kept.
Hosting that is looked after
Your cloud or ours, with backups, monitoring and patching. Not a laptop under a desk and not a free hosting account.
Connections with the least access that works
When we connect to your accounting system or Microsoft 365, the permissions are scoped to what the tool needs, and nothing more.
Kept current after launch
Dependencies and platforms are patched under a support agreement, and someone is watching.
Help with POPIA and GDPR
We document how your software handles personal information, which makes your compliance work shorter, and we can support your wider compliance needs through AppTech.

A small demonstration

This website is the first example

A marketing site is the easiest place to cut corners, so we did not. If we would not hold this page to our standards, the argument above would be worth nothing.

  • Content Security Policy, HSTS and a restrictive permissions policy, set in the server configuration.
  • No third-party scripts and no marketing trackers, so nothing about you leaves this domain.
  • Analytics without cookies, which is why there is no consent banner interrupting you.
  • The enquiry form is rate limited and validated on the server, not only in the browser.
  • Fonts are served from this domain. No request to a font provider on the critical path.

Already have a tool your team built?

We review it, secure it, document it and support it.

Talk to us about it What that review covers

Tell us about the process that wastes the most time

One call is usually enough to know whether it is worth building, and how we would approach it.

Book a call Send a short description instead
  • We read your enquiry and reply within one working day.
  • If an off-the-shelf product would do the job better, we will say so.
  • No sales sequence and no automated follow-ups.