Bespoke software for the systems your business runs on. Backend platforms, internal tooling, APIs, data pipelines, integrations — written from a blank repository, on the current frontier of the toolchain, under a security posture chosen for the project. Nothing recycled, nothing white-labelled, nothing left for the next firm to clean up.
The boundary of the engagement is set in writing before work begins.
Bespoke software for the systems your business runs on. Backend platforms, internal tooling, APIs, data pipelines, integrations — written from a blank repository, on the current frontier of the toolchain, under a security posture chosen for the project. Nothing recycled, nothing white-labelled, nothing left for the next firm to clean up.
Scope is written collaboratively during discovery and signed off before any build work starts. Changes are handled as written amendments, not surprise invoices.
Method
How we build.
The discipline below is constant across engagements. It is the reason clients return; it is the reason a build that started here still reads cleanly years later.
Built from scratch, every time.
No template marketplaces, no white-labelled themes, no recycled SaaS skeletons. Every engagement begins on a blank repository and an architecture chosen for the project in front of us. Reusable patterns from the practice, yes — patterns the practice has hardened against real production load. Inherited debt, no.
Tooling chosen at the current frontier.
We re-evaluate the toolchain on every engagement so the build starts on what is genuinely the strongest implementation of each layer today — not what shipped well three years ago. The specific names move; the standard does not: minimal surface area, fewest moving parts, and a maintainership story that does not depend on a single weekend volunteer.
Security treated as a build-time concern.
Every dependency that ships under the RESILIENCE banner is selected against a written threat model, audited for known-vulnerability exposure, and pinned to a version we have read the changelog of. The build pipeline runs supply-chain integrity checks. The deploy pipeline ships behind the strictest sensible content-security, transport-security, and referrer-policy headers. Operational secrets never live in the repository and never travel through email.
Maintained, not abandoned.
The codebase that ships at launch is the codebase the practice continues to read. Dependency updates, security patches, and runtime upgrades are continuous — handled under retainer for clients who want the practice to keep its hands on the work, or in a written handoff for clients who staff this in-house. We do not build something we are not prepared to read at three in the morning two years later.
Deliverables
What you'll receive.
Custom software & platform builds
SpotlightCustom-quoted
Take an idea from sketch to production — full-stack engineering across web, backend, and infrastructure, shipped with the same discipline as a team three times our size.
From $4,999 · typical builds $5K–$120K
Final project total is scoped during discovery and varies with surface area, integrations, and timeline. We'll review your needs and send a custom-priced invoice within five business days. No payment is charged until you approve scope.
From $4,999
Internal tools & business systems
Custom-quoted
Operations dashboards, admin consoles, workflow tools, and the internal systems that quietly run the company — built around how your team actually works, not how a template thinks it should.
From $3,999 · typical builds $4K–$60K
Internal tooling totals scope with the workflow surface, role count, and integrations. Tell us what your team does today and we'll send a custom-priced invoice with line-item scope. No payment is charged until you approve.
From $3,999
APIs, integrations & data pipelines
Custom-quoted
Move data between the systems you depend on, expose clean APIs to the partners you trust, and stitch the operation together without brittle glue code.
From $2,999 per integration
Integration totals scope with the number of systems, the protocols in play, and the data-shape mapping. We'll review the systems and quote a custom price. No payment is charged until you approve.
From $2,999 per integration
AI-built codebase rescue & audit
Spotlight
You shipped fast with an AI coding tool and now the app runs the business — but nobody has read every line. We do: a fixed-price, written audit of an AI-generated or vibe-coded codebase covering security posture, auth and access-control coverage, dependency and supply-chain hygiene, secrets handling, and a prioritized map of the technical debt underneath. You leave with a report you can act on and a clear remediation plan — which we're happy to carry out on retainer.
The same audit an outside attacker would run — from the public internet, with no source code, no credentials, and no server access, exactly as a stranger sees you today. We map what your live site exposes: forgotten subdomains and stale staging environments, outdated software with known CVEs, missing security headers and weak TLS, exposed .env or .git files, secrets accidentally shipped in your frontend bundles, whether your row-level security is actually enforced when the public API is hit directly, and injection or OSINT exposure discoverable without touching a file. This is the outside-in counterpart to the AI-built codebase audit's inside-out read. Non-intrusive reconnaissance by default; any active testing happens only inside a signed scope-of-work — we begin no scanning of any kind until written authorization is countersigned and the target is confirmed yours to test.
From $1,999 · fixed-price external exposure report
We scope the target and send a fixed-price quote after a signed scope-of-work. No scanning of any kind — not even passive reconnaissance — begins until that authorization is countersigned and you've confirmed the target is yours to test. Turnaround and price scope with the size of the external surface.
From $1,999 · fixed-price report
Continuous exposure monitoring
Custom-quoted
Your attack surface changes every time you ship. This retainer re-runs the external exposure assessment on a recurring cadence, flags newly exposed assets, endpoints, and misconfigurations as they appear, and feeds each finding into a remediation plan before someone else finds it first. Attaches after an initial exposure report and runs under the same signed authorization.
From $499 / month · periodic re-scans
Attaches after an initial External Exposure Report and re-runs the assessment on a recurring cadence under the same signed authorization. Cadence and price scope with how often you ship and the size of the surface. We'll review and quote a monthly retainer; no payment is charged until you approve scope.
From $499 / month · periodic re-scans
Engineering retainers & technical advisory
A senior engineer on call for the decisions that matter — architecture reviews, hiring panels, on-the-fly support for the team you already have.
From $1,999 / month · cancel anytime
Selected work
One we can describe.
Anonymized by sector and region only. The full archive lives at /work.
Software development·2025
A regional wholesale distributor, US Midwest
A single operations platform that replaced nine spreadsheets and a brittle vendor portal — order to invoice, on one source of truth.
Systems of record consolidated
9 → 1
Order-to-invoice cycle
3 days → 40 min
Ongoing vendor-portal license cost
0
The distributor ran on a decade of accreted tooling: order intake in one spreadsheet, inventory in another, pricing in a third, and a legacy vendor portal nobody could change without a support ticket and a wait. Every quarter-end was a reconciliation marathon, and a single fat-fingered cell could ship the wrong price to a wholesale account. The engagement was a custom operations platform — built from a blank repository — that unifies intake, inventory, pricing, and invoicing behind one typed data model the team owns outright.
Methodology
01
Model the operation, then the screens
We mapped the real order-to-cash flow with the people who run it before writing a line of UI, so the schema matched the business instead of the previous tool's limitations. Every record carries an audit trail from day one.
02
Migrate without a freeze
The nine spreadsheets and the vendor export were imported behind a reconciliation harness that flagged every mismatch for a human, so the cutover happened alongside live operations rather than over a risky weekend blackout.
03
Integrations, not lock-in
Accounting and shipping connect through typed, documented APIs the distributor controls — no proprietary portal, no per-seat tax, no waiting on a vendor's roadmap to add a field.
04
Handed over, not held hostage
The platform shipped with the repository, the data, and the documentation in the client's hands. The managed-care retainer is a choice, not a dependency.
One platform the business owns — built to outlast us.
Source notes redacted · Client identification withheld by agreement
Timeline
A predictable cadence.
Every engagement runs on the same four-stage rhythm, regardless of size.
Discovery
Week 0
Working session, written scope, clear success criteria.
Design & architecture
Week 1
System design, milestones, fixed or weekly pricing.
Build
Weeks 2+
Weekly releases, live portal, direct access to engineers.
Launch & handoff
Final week
Production hardening, observability, written handoff.
FAQ
Common questions.
How do you price engagements?
Fixed-price for well-scoped work, weekly retainer for open-ended or exploratory engagements. Pricing is always in the proposal brief before any contract.
Do you work with existing teams?
Yes. We regularly embed with in-house engineers, or augment a small team with specific capabilities — AI integration, infrastructure, design — for a defined period.
What happens after launch?
Either a written handoff so your team owns everything, or an ongoing retainer for maintenance, features, and on-call support. Your choice, stated up-front.