// software engineering + cyber security · south africa
GuardNexus is an engineering and security company. We design and ship the platforms your business runs on, then test them the way an attacker would, so they hold up when it counts.
01 // build
export const engineering = [
{ name: "Web & mobile apps", does: "Portals, internal tools and field apps with live dashboards and offline mode" },
{ name: "SaaS platforms", does: "Multi-tenant products with roles, billing, audit trails and admin tooling" },
{ name: "AI & automation", does: "Agents, document processing and workflows that remove manual work" },
{ name: "Integrations & APIs", does: "Payments, messaging, accounting and the glue between your systems" },
{ name: "Cloud & DevOps", does: "AWS and Azure, CI/CD pipelines, monitoring and cost control" },
{ name: "Data & reporting", does: "Schema design, migrations and reports that drive decisions" },
];Short cycles with working demos, so you see progress every week instead of a big reveal at the end.
Every build goes through the same testing we sell. Access control, input handling and secrets are checked before go-live.
Clean repos, documentation and a proper handover. No lock-in, no mystery boxes.
02 // secure
Independent, non-destructive testing of web platforms, APIs and cloud setups. You get a plain-language report, help with fixes, a retest and a signed attestation for your clients, partners and investors.
Web app and API testing against the OWASP Top 10: auth, access control, injection, data exposure, business logic.
Full platform review, then a signed GuardNexus Letter of Attestation once findings are closed.
Vulnerabilities, leaked secrets and risky dependencies, with fixes your developers can apply.
Hosting, DNS, email security, storage and access rights. We close what was left open.
We confirm every fix, then keep scanning so new releases do not reopen old holes.
Any logged-in user could read another customer's orders by changing the ID in the request.
[HttpGet("orders/{id}")] public async Task<IActionResult> Get(int id) { - var order = await db.Orders.FindAsync(id); + var order = await db.Orders + .FirstOrDefaultAsync(o => o.Id == id && o.OwnerId == User.Id()); + if (order is null) return NotFound(); return Ok(order); }
$ ls ./deliverables
cert --list → Cisco Certified Ethical Hacker · Microsoft Certified Azure AI Engineer
03 // work
Multi-tenant operations platform for private security companies: guards, shifts, sites, incidents and reporting, plus a mobile app for officers in the field.
C# .NET · Vue · Flutter · PostgreSQL · Cloud
→ securityops.guardnexus.co.zaEngineering partner on Afterstars, a 3D colony-survival strategy game: macOS and iOS builds, 3D models for troops, ships and buildings, and the combat systems.
Three.js · Blender · macOS · iOS
Company website for a Bellville security provider, plus the move of all company email to Microsoft 365.
Web · Microsoft 365 · DNS & email security
Consumer tracking app live on the App Store, with a hosted cloud database and AI features that turn everyday logs into useful insights.
iOS · Cloud backend · AI
A fast storefront with catalogue, cart and checkout, built for customers shopping on their phones.
Next.js · Payments · Hosting
04 // process
stage 1
Goals, systems and timelines in writing. Security work starts only with signed permission.
stage 2
Short build cycles with demos, or testing against the agreed scope.
stage 3
Working software, or findings ranked by risk in plain language.
stage 4
We fix or guide your team, then test again until it holds.
stage 5
Handover, docs and, for security work, your signed attestation.
05 // contact
We reply within one business day.