What have you done?
Some of the work. Where a client is confidential, the name is left out and the facts stay.
2025DevSecOps from zero in twelve months
Four measured phases. Security moved from a manual check before go-live into every commit and every build.
2026Security posture programme
Five phases and nine pillars. A programme that shows leadership where to act first, and proves the progress.
2021 to nowData protection and PDPA readiness
Each country's rules mapped for PDPA compliance, and a data-centred approach that opened new markets.
2019 to 2021Telecom security in Indonesia and Japan
NIST compliance up by more than 30% in six months, a SOC roadmap, and custom tools joined to the SIEM.
2022 to 2023Government portal and secure SDLC
A nationwide portal that works on slow connections in remote places, then security built into how the ministry writes software.
2011 to nowSports event registration platform
Registration, payments, race packs and timing, built for peaks above a million requests per second.
One thread runs through all of it. Security works when it is part of how a team already builds and runs things, when the numbers are ones that management can read, and when each step is small enough that delivery never stops.