Secure engineering · AI · Cloud
Software with the security built in, not bolted on.
Pontelon builds secure, scalable systems and the AI that runs inside them — then trains your team to own what we hand over. We put the control in with the feature, not in a later pass.
- 5products built and run in-house
- 2reachable on the public internet today
- 12technologies across those products
- 3,466automated tests in Clepora alone
- Secure engineering
- AI & automation
- Cloud & DevOps
- Security reviews
- Architecture
- Cost reviews
- Pre-audit
- Training
- Social media
- Automation
- Astro
- Cloudflare Workers
- D1
- FastAPI
- Flutter
- MapLibre
- Next.js
- Playwright
- Postgres
- Prisma
- Pydantic
- Python standard library
- Redis
- SQLAlchemy
- sqlite3
- Workers AI
What we do
Three capabilities we can prove today, not five we could describe.
Secure Software Engineering
Software whose security controls go in with the feature, so a review starts from a system built to pass it.
Read moreAI & Automation
AI systems that are honest about what they don't know, cheap enough to run, and safe to put in front of the public.
Read moreCloud & DevOps
Systems whose running cost is a design decision, not a monthly surprise.
Read moreProducts
Software we built ourselves, and will walk you through.
These are Pontelon's own products, not client work. That makes them better evidence, not worse — you can ask us to demonstrate a claim instead of taking a redacted case study on trust.
Clepora
Create once. Reach everywhere.
clepora.comRead moreClepora Jobs
A tailored application in ninety seconds, without inventing anything.
Read more
Whinchat
Chat, call and buy — even on weak networks.
whinchat.appRead moreNewsroom
World news, mapped where it happened, read aloud on a schedule.
Read moreKickoff
Live football across 65 competitions, on a dashboard you compose.
Read moreAlso
Two other ways we work with you.
Training
Hands-on courses with labs and certification prep in cloud, DevOps, security, databases, programming, AI and desktop support — and programs for engineering teams, taught against your own stack.
See the programsConsulting
Architecture review, cloud-cost review, security assessment, and pre-audit readiness. Fixed scope, written findings, prioritized.
See the engagementsHow we build
Every feature passes the same gates before it counts as done.
Security goes in with the feature, not in a later pass. These are the rules from How we work, in the order code meets them.
- 01Validate inputat the trust boundary
- 02Parameterize queriesnever SQL from strings
- 03Scope authorizationto the signed-in user
- 04Fail closedwith rate limits on
- 05Test the refusalsand every bug fix
- 06Hand overcode, tests and docs
Tell us what you are building.
We will say plainly whether we are the right people for it. If we are not, we will usually know who is.