About
A small firm that ships
Pontelon builds secure, scalable software and the AI that runs inside it, and trains teams to own what we hand over.
- Latin
- pons, pontem
- Older root
- *pent-
- Meaning
- To find a way through
- Three spans
- Build · advise · teach
Origin
The name
Pontelon comes from the Latin pons, pontem: a bridge. Its older root, Proto-Indo-European *pent-, means to go, to find a way through. The same root gives Greek patos, a path, and the English verb find.
That is the work: finding a way through the problem that is stopping you. We do it in the three ways described below.
The mark draws that older meaning: two sides of a gap, and a road winding up between them. It is not a bridge built over the problem but a way through it, laid where the ground already allows.
And like a bridge, the work is judged on one thing: whether it carries the load.
Purpose
What we are for
The work we take on has the same shape. There is technology on one side and, on the other, the people who have to build on it, run it, fund it, or be answerable for it when something goes wrong. The gap between those two is where projects fail — not in the code, and almost never in the roadmap.
We cross that gap three ways.
We build. Software and the AI inside it, made secure in the geometry rather than in a later pass.
We advise. Review, architecture and threat modelling for teams who need a second set of eyes that has actually shipped.
We teach. Hands-on courses and certification prep, and training against your codebase, not a sample one, so the people who inherit the system can carry it without us.
Those are not three businesses. They are three spans over the same gap, and the third is the one that decides whether the first two were worth anything:
A bridge you still need us to stand under is not finished.
It is an uncomfortable thing for a consultancy to commit to, because it means the work is designed to end. We would rather commit to it than bill for standing there.
Practice
How we work
Security is part of "done." Not a phase, not a later pass, not a report someone reads after launch. Input validation at the trust boundary, parameterized queries, authorization scoped to the authenticated user, fail-closed defaults, and rate limits on anything a stranger can reach — those go in with the feature.
Every change ships with tests. New behavior gets tests that exercise it, including the paths where it should refuse. Every bug fix gets a regression test that failed before the fix. We run the suite before saying something is done, and if it is red we say so.
We would rather say no. Some things we have deliberately not built: auto-submitting job applications, because it violates platform terms and gets users banned. A photorealistic AI news anchor, because that is the exact format used for disinformation. Both decisions cost us a feature and were still correct.
The step-by-step version, from a first email to handover, is on How we work.
Honesty
What we will not claim
Pontelon is a new firm and this site is written accordingly. We hold no SOC 2, ISO 27001, FedRAMP or CMMC certification, and we do not imply otherwise — what we say is that we build against OWASP ASVS and NIST SP 800-53 control families, which is true and which you can check.
We have no client case studies, so we publish none. The products on this site are our own: built, operated, and demonstrable on request. Every number on a product page traces back to a command we record and will run for you — a test count, a migration count, a measured before-and-after. That is a deliberately higher bar than an anonymized case study, and it is the one we would want from a vendor.
Pontelon LLC operates pontelon.com. Our products carry their own brands where they have their own audiences — Clepora most of all — but the engineering, the standards and the accountability are the same.
Talk to us
The fastest way to find out whether we are useful to you is to describe what you are building. Get in touch — we will tell you plainly, and if we are not the right people we will usually know who is.
Who you would be working with is on the team page.