Software engineering from Colombia
We design, build, run and secure software: digital product, artificial intelligence, data and cloud. One team, from the first assessment to day-to-day operation.
We also make Pitangus, open source application security. Meet the product
We design.We build.We run.We secure.
Move your cursor over the ring, or click.
Each front covers part of the cycle. Hire them separately or together: making them fit is our job, not yours.
Digital product end to end: sites, apps and stores that handle real traffic and stay easy to maintain.
Models and assistants wired into the systems your company already uses, with business rules you can audit.
From raw data to decisions: pipelines, dashboards and CRM on a single information model.
Hardened infrastructure, continuous delivery and costs under control, with security built into the process instead of bolted on at the end.
Besides client projects, we build and maintain our own software. We use it in our work and publish it so other teams can use it too.
Critical SQL injection · CWE-89
New scan of the branch
SQL injection · CWE-89 Fixed and verified
Evidence kept: finding, change and scan
It flags the line that puts user input straight into the query: SQL injection.
Meet Pitangus ["It flags the line that puts user input straight into the query: SQL injection.","The change moves to a parameterized query; Pitangus shows what it introduces and what it fixes.","A new scan confirms the finding is gone and keeps the evidence for the audit."]Self-hosted, open source application security for small teams. It scans your code, dependencies and secrets, tells you what each change introduces and what it fixes, and keeps the evidence an auditor can check.
Open source, AGPL-3.0 license
This is how a project moves forward with us. Each stage ends with something concrete you can review.
We review your stack, your risks and your goals. It ends in a document, not a promise.
You get: a document with risks, priorities and scope.
We design the solution, split it into phases and agree on how to measure success before writing code.
You get: the design, the phases and how success is measured.
Short cycles with a working demo at the end of each one. You see progress, not a report about progress.
You get: a working demo at the end of every cycle.
Monitoring, security and evolution of what we ship. The circle closes and starts again.
You get: monitoring, maintenance and continuous improvement.
We design, build, run and secure software for companies across four fronts: web, mobile and e-commerce; artificial intelligence and automation; data, analytics and Salesforce; and cloud, DevOps and cybersecurity.
In Colombia. We are a small team: you talk directly to the people who design and build your project. We work in Spanish and English.
Yes. Each front can be hired on its own or together with the others; for example, penetration testing, code review or DevSecOps on a system you already run.
Our application security product, self-hosted and open source (AGPL-3.0). It scans code, dependencies, secrets, IaC and container images, shows what each change introduces and fixes, and keeps the evidence for audits. Learn more at pitangus.dev.
With an assessment of your stack, your risks and your goals, which ends in a document. Then come architecture, building in short cycles with demos, and operation. Write to info@arodium.com or use the contact form.
Three details and you are done. A person from the team replies, no strings attached.