Security automation

Our founder, Christian Lerrahn, co-founded Detexian, a SaaS security posture management (SSPM) platform, and led the software engineering behind it. Underneath, SSPM is a data problem: connect to SaaS applications through their APIs, pull out configuration, users and activity, normalise it all, and turn it into the handful of findings someone should actually act on. What that work showed is that most of the security work in a small business is the same problem at a smaller scale, and that most of it can be automated.

So this is wider than a secure pipeline. The questions that matter are usually ones like who still has access to the finance system, which apps hold customer data, whether multi-factor authentication is really on everywhere, and what changed last week. The answers are spread across your identity provider, your SaaS tools, your cloud accounts, your HR system and your ticketing. We connect those sources, correlate what they say, and turn it into insights and alerts that reach the right person. Where it helps, AI triages and summarises the findings, so people read the few that matter instead of wading through hundreds.

The same approach automates the processes around it. On- and offboarding is usually the first candidate: access that starts on someone’s first day and ends on their last, across every system, without a checklist that somebody forgets. Access reviews, evidence collection for audits and answers to customer security questionnaires can all run on a schedule rather than in a panicked week.

It still covers the delivery side too: dependency, secret and container scanning, hardened build and deploy pipelines, and infrastructure baselines as code, so the software built in the earlier steps ships safely. When you need a formal assessment of your security posture, our trusted cybersecurity partners carry it out, and we then automate what they find.