in-house · web platform
The SpidyOps platform
The site you are on: a production Next.js build with a full security stack. We run on what we sell.
Web developmentSecurityDesign & Brand
The build
A Next.js App Router application in strict TypeScript, server-rendered by default, with a bespoke design system in OKLCH colour and self-hosted variable fonts. Dark and light themes reach full parity.
Security stack
A strict content security policy with per-request nonces, multi-factor authentication, a tamper-evident hash-chained audit log, rate limiting on every public endpoint, and modern security headers. The same discipline we bring to a client pentest, applied to our own surface.
Quality bar
Accessibility to WCAG 2.2 AA, Core Web Vitals in the green, and a test and CI pipeline gating every change. The platform is the standing demonstration of how we build.