Security · AI automation · Software Engineering

The future moves faster than your organization.

Cybersecurity, AI automation, mobile apps, API integrations and Company Branding, from one team.

Our Craft

What you can hire us for.

Six ways to work with us. Pick one, or combine them.

Security

Security reviews

For: Apps about to launch, including AI-built ones

You get

Architecture and design review and penetration testing, with findings by severity and fixes

Security

Workspace hardening

For: Organisations on Google Workspace

You get

A hardened configuration, a review of contractor and freelancer access, and controls mapped to ISO/IEC 27001

AI

AI automation

For: Teams with repetitive, manual work

You get

AI workflows that remove manual steps, including private AI on Google Vertex

Engineering

Mobile apps and device integrations

For: Products that talk to hardware

You get

Mobile applications with API integrations to devices and IoT hardware

Engineering

APIs and bot deployments

For: Teams connecting systems

You get

API integrations and Docker-based bot deployments

Design

Landing pages

For: Companies that need a presence

You get

Landing pages of almost any kind, with the brand design to match, built from the ground up

Projects

What we've built, and what we're building.

Sites we've designed and built, and the engagements under way now. Confidential clients aren't named, and their work is shown as illustrations.

14 projects · 6 in progress

Security · Workspace hardening

HDT Systems

Google Workspace hardening, a review of freelancers' access, and controls working toward ISO/IEC 27001.

Client
HDT Systems, Germany
Since
May 2026
Status
In progress
Stack
Google Workspace · ISO/IEC 27001 controls

Security · Security review

Launch-readiness audits

Architecture and design reviews of AI-built apps, so they're ready to launch.

Client
Withheld
Since
June 2026
Status
Ongoing
Stack
Architecture and design review

Engineering · Mobile app, IoT

Mobile app for connected devices

A mobile app that works with IoT hardware through device APIs.

Client
Withheld
Since
July 2026
Status
Ongoing
Stack
Mobile · device APIs · IoT

AI · AI automation

AI workflow automation

AI workflows that take manual steps out of a team's daily work.

Client
Withheld
Since
July 2026
Status
In progress
Stack
Python · TensorFlow · Hugging Face

More work

Asaan Nikah (opens in a new tab)

A landing page and an application system for a free matrimony service that runs on WhatsApp.

Engineering · Web app and landing page · 2025

Secure AI environment

A private AI setup on Google Vertex AI.

AI · AI platform · July 2026

Penetration testing

Security analysis and penetration testing.

Security · Penetration test · July 2026

Hously (opens in a new tab)

A landing page for an architecture and interiors studio.

Design · Landing page · 2026

Engagement

How an engagement runs.

What happens between your first message and the handover.

  1. Assess

    We map where your organization stands, technically, operationally and culturally, against where you intend to go.

    You receiveA current-state map

  2. Align

    Strategy and business case, built together with the executives who'll be accountable for the outcome.

    You receiveScope and business case

  3. Design

    The architecture and delivery plan, including how it will be secured and run.

    You receiveArchitecture and security plan

  4. Deploy

    Forward-deployed engineers and strategists work inside your teams, shipping the thing rather than presenting it.

    You receiveA working system, built with your team

  5. Sustain

    We instrument, measure, and hand off a system your teams can run and evolve long after the engagement ends.

    You receiveRunbook, measures and handover

Standards

The rules we work by.

What you can hold us to, and the frameworks we work to.

Each one is something you can check.

  • Access ends at handover

    Least-privilege accounts for the engagement only, revoked on the last day.

  • Every finding ships with a fix

    Each issue carries a severity and a remediation, never a bare list.

  • Your findings stay yours

    Nothing is published without your written permission.

  • Security is part of the design

    The security plan is written with the architecture, before anything is built.

Frameworks and platforms

  • ISO/IEC 27001
  • Google Workspace
  • Google Vertex AI
  • Docker
The name

cykoaisee-ko-ya

cy·

From cybersecurity. The part of the work that comes first.

ko·

The koi, which moves with the current, and the sequoia, which outlasts it.

ai

Applied intelligence: models put to work on real operations.

Cykoai creates clarity.

Get in touch

Let’s shape what’s next.

Tell us where your organization is headed, and where it feels stuck. We typically respond within one business day.

info@cykoai.comFor press and partnerships, same address.