Networks
Firewalls in pairs, two internet providers, redundant cores and switch stacks, site-to-site and remote-access VPN, and Wi-Fi that roams without dropping a call.
- Cisco
- HA firewalls
- IPsec · SSL VPN
- StackWise
- Wi-Fi 6 roaming
Network, systems & software builders
We build the infrastructure your business runs on.
From the first cable to the last line of code: redundant multi-site networks, clustered servers, and the web platforms and applications that sit on top. Designed, built and run by engineers, and tested by breaking it on purpose before we call it done.
Vientiane, Laos · remote, worldwide · English · Français · ລາວ
- 20 yrs
- building infrastructure
- 800+
- Cisco devices designed and deployed
- 10,000+
- workstations deployed
- > 99 %
- availability, measured by an external probe
- 73 → 92
- security score after our programme, zero downtime
What we build
Three layers. One team that answers for all of them.
Most outages happen at the seams: the network team blames the servers, the developers blame the network. We build every layer ourselves, so there is no seam to fall through.
Systems
Failover clusters on Storage Spaces Direct, directory and identity, Linux and Windows estates, monitoring from outside, and backups whose last link is a restore we have actually tested.
- Hyper-V cluster
- S2D
- Active Directory
- Linux
- Tested restores
Software
Websites that load in a blink, web applications, APIs and plugins. No trackers, no bloat, secured like the infrastructure under them, and handed over with the keys.
- Web platforms
- Python · PHP · JS
- APIs
- WordPress
- WCAG AA
Portfolio
Software we designed, built and shipped.
Our own products, running with real features. Screenshots below are the real applications, with fictitious data.
Product · Health records
Escale
Health-office software for schools. It runs without internet, keeps records encrypted on the device and still produces every document the office needs.
- Two-letter check-in: type, Enter, done
- Outbreak detection with ready-to-send letters
- Encrypted records, automatic lock, guided tour
- Offline-first
- AES-256-GCM
- WCAG 2.1 AA
- 17 docs
Product · Library management
Signet
A modern replacement for legacy library software: cataloguing, lending, periodicals, acquisitions, inventory and a public portal, in one web application.
- Records from the national library by ISBN
- One-field lending desk: scan the card, then the book
- Public portal with search, reservations and suggestions
- FastAPI
- SQLite FTS5
- 98 tests
- UNIMARC
Products · WordPress
Four production plugins
Image conversion to WebP and AVIF, menus, pop-ups and private spaces. One licence key for all four.
- Scan first, convert after: nothing written blindly
- Passes the official plugin check: 0 errors, 0 warnings
- Works on any host, with a fallback when the server cannot encode
- PHP
- 0 / 0 plugin-check
- WebP · AVIF
Concept studies
Banking and hospitality websites
Multilingual website concepts for a retail bank and a hotel group, in English, French and Lao. Shown privately on request.
Infrastructure
Built, shipped, still running.
Client names stay private: most of our clients would rather not advertise their infrastructure. The numbers are real, and references are available on request once we are talking.
International organisation · 3 sites
A multi-site estate, built from a blank page and run for a decade
Network, servers and Wi-Fi for a new site designed from scratch and delivered on schedule, then eleven years of continuous operation across three sites and around a thousand users.
- ~70 switches
- 40 access points
- 73 → 92 security score
- 700 k€+ saved over 10 years
Security · EU-funded training institute
Audit and hardening, delivered to the letter
Firewall upgraded across two major versions, dual-WAN routing, an encrypted backup chain with a tested restore, Wi-Fi review. Every item documented, formal acceptance signed by the client.
- 12 / 12 items delivered
- 2 major firewall versions
- ✓ signed acceptance
Incident response
A ransomware attack, contained
Isolation, investigation, rebuild and user training, handled end to end. The attack never left the first machine.
- 0 lateral spread
- 0 data lost
How we think
A backup you have never restored is a hope, not a backup.
Everything we build is judged by the same rule: it is not done until we have seen it fail safely. Firewalls are failed over on purpose. Uplinks are pulled. Backups are restored to a clean machine, and the restore is timed.
- Failover tested before handover, not after the first outage
- Monitoring from outside, so a dead server cannot report itself healthy
- Documentation your next engineer can follow without calling us
Method
Four steps. No surprises on the invoice.
- 01
Survey
We map what you have, on site or remotely: every link, every server, every licence, and what breaks first.
- 02
Design
A written plan with diagrams, a fixed scope and a fixed price. You know what you are buying before we start.
- 03
Build
We build in stages without stopping your business, and test each stage by breaking it on purpose.
- 04
Run
Handover with documentation, or we keep running it for you under a maintenance contract.
Start a project
Tell us what you need to build.
A network that has outgrown itself, a new site to open, an application to write, or an audit before the next incident. Write to us in English or French; we usually answer within one working day, Vientiane time (GMT+7).