Stack, practices and security

Proven tools, chosen for your problem.

We're not tied to one framework. We pick what fits your users, your team and your budget, and we explain why in plain English.

Explore the stack Book a free tech audit
tools in production
40+
products shipped
120+
years on our core stack
9

01How we choose

Four questions before we pick a tool.

New frameworks are fun. Your product has to run for years. These questions keep us honest.

  1. 01

    Does it fit the problem?

    We start from your users, data and scale, then choose tools. Not the other way round.

  2. 02

    Will it still be here in five years?

    Mature, well-supported technology with long-term releases, so you're not rewriting soon.

  3. 03

    Can you hire for it?

    Popular stacks mean you can grow an in-house team around the code when you're ready.

  4. 04

    What does it really cost?

    We count hosting, licences and maintenance, not only the time it takes to build.

02Our stack

The tools we ship with.

Forty tools we run in production. Pick a category, then drag, swipe or use the arrows to browse.

Showing all 40 tools

03Engineering practices

Quality is built in, not bolted on.

The habits below run on every project, whatever the size or budget. They're why our code is easy to hand over.

  • Code review on every change

    Nothing reaches the main branch until a second senior engineer has read it.

    You get

    Fewer bugs and shared knowledge

  • Automated testing

    Unit, integration and end-to-end tests run on every commit.

    You get

    Confidence to change things quickly

  • CI/CD pipelines

    Every merge is built, tested and deployed automatically, with one-click rollback.

    You get

    Safe releases, several times a week

  • Monitoring from day one

    Logs, metrics, uptime alerts and error tracking are set up before launch, not after.

    You get

    Problems found before users report them

  • Documentation as we go

    Architecture notes, API docs and runbooks are written during the build.

    You get

    Code your own team can take over

  • Performance budgets

    Page speed and Core Web Vitals are checked before every release.

    You get

    Fast products, even on slow networks

Average deploy time
4 min
Lighthouse target
95+
Merged without review
0

04Security

Security is a habit, not a phase.

We design for least privilege and plan for things going wrong, so a bad day stays small.

Working in a regulated industry?

We'll follow your security policies, sign a data processing agreement and join your audits.

  • OWASP Top 10 reviews

    Every release is checked against the most common web risks.

  • Encryption everywhere

    Data is encrypted in transit and at rest.

  • Role-based access

    People see only what their role allows, with audit logs.

  • Least-privilege cloud access

    MFA and scoped keys for every engineer and service.

  • Backups you can restore

    Daily backups, and we test the restore, not just the backup.

  • Dependency scanning

    Automated alerts when a package we rely on has a known flaw.

  • GDPR-ready processes

    Data minimisation, consent and deletion designed in.

  • NDA and IP assignment

    Signed before you share any project details.

05Architecture

What a typical SaaS build looks like.

Every project is different, but most of our SaaS platforms start from this shape. It scales from the first customer to the hundred-thousandth.

Clients

Web appNext.js
Mobile appFlutter
Admin panelReact

Edge

CDN and firewallCloudFront · WAF
API gatewayRate limits · auth

Services

Auth and rolesJWT · SSO
Core APINestJS
BillingStripe
Background jobsQueues · cron

Data

PostgreSQLPrimary data
RedisCache · queues
Object storageFiles · S3

Around it all

CI/CDGitHub Actions
MonitoringSentry · Grafana
Infrastructure as codeTerraform
A starting shape, not a template: we remove anything your product doesn't need.

Certifications our engineers hold

  • AWS Solutions Architect
  • Google Cloud Professional
  • Google Ads
  • HubSpot Marketing

Need a second opinion on your stack?

Book a free 45-minute tech audit call. We'll look at your architecture, code health and hosting costs, then send a short written summary you can keep.

Book a tech audit [email protected]

What the audit covers

  • Architecture and how far it will scale
  • Code quality and test coverage
  • Security basics and quick wins
  • Hosting and licence costs
  • A prioritised list of what to fix first

No obligation. The summary is yours, whoever does the work.