Products — Platforms
Security is not a layer
we add afterwards.
Corxor builds platforms as well as the system that defends them. In each one, the client's critical data is treated as the primary asset from the first design decision — not protected by something added at the end.
The same standard that produces a defensible security decision produces a defensible platform.
FastLocated
Location and mappingA shipping consumer platform where the sensitive asset is not an account but a position. Built so that knowing where something is never becomes a byproduct of running the service.
FactuurKompas
Financial operations, NetherlandsA platform for small and medium enterprises handling their own books. Tenant isolation is not a configuration option in it — it is an architectural invariant, enforced at the data layer and tested as a security property.
Delivered under contract
Not namedFurther platforms are in production for institutions that have not agreed to be named, and will not be listed here. Their architecture is held to the same standard: the data is treated as the thing an adversary would actually come for, from the first commit. References are given privately, with the client's consent, where an engagement reaches that stage.
How the real work is done
The security-critical platforms
are not products.
What is listed above ships publicly. The platforms that carry an institution's most sensitive operations are not built that way: they are developed for a single client, under contract, to that client's threat model and jurisdiction.
They are not listed, not demonstrated, and not described to anyone else. That is a condition of the work rather than a marketing posture.