Security review
An audit of your cloud, code paths and access, with a prioritised list of fixes.
Cybersecurity · Nitish Arora
Cybersecurity for products that handle money and health data
Lending platforms, investment apps and health products are targets, and regulators expect you to get security right from the start. I design it into the architecture: who can access what, how data is encrypted and logged, and how users sign in, so it doesn't have to be bolted on later.
- 10+
- years
- 8
- products shipped
- 200+
- people led
- 21
- press features
What you get
What I'll do for you
Access control
IAM with least-privilege roles, so people and services can only reach what they need.
Encryption
Data encrypted in transit and at rest, with secrets kept out of the code.
Sign-in and sessions
Authentication, roles and session handling for users, admins and partners.
Audit trails
A record of who did what and when, for regulated money and health data.
Compliance-ready flows
KYC and e-agreements for lending, and HIPAA-compliant video and chat for health.
Proof
Products I've built that show it
My roleTechnical Lead
India's first digital platform for loans against mutual funds.
- 10,000+ loans
- 8 NBFC and bank partners
- Money in under 15 minutes
Featured in ThePrint · PR Newswire · Cafemutual
dhanlap.com ↗The complete borrower journey: fetching mutual funds and shares, eligibility, Aadhaar KYC, penny drop, e-mandate, lien marking, sanction letter, NESL loan agreement and disbursal, plus revoke and invoke for lenders and VCIP.
- Elixir
- Phoenix
- PostgreSQL
- AWS
- React Native
- Flutter
My roleTechnical Lead
Your whole financial life in one place.
- 6 asset types unified
- Credit insights
- Goal tracking
Credit report with loan payoff insights, every investment via Account Aggregator and MFCentral, buying funds, gold, bonds and insurance, buy and sell suggestions, and goal-based SIPs tracked against target.
- Elixir
- Phoenix
- PostgreSQL
- AWS
- React Native Web
My roleTech consultant, built end to end
On-demand coaching for parents from certified experts.
- 5,000+ families
- 36+ specialties
- HIPAA-compliant
Featured in Forbes · Entrepreneur · Parents · Motherly · EBN · Women Impact Tech
misspoppins.io ↗The iOS and Android apps, website, backend and cloud architecture: booking, HIPAA-compliant chat and video, Stripe payments and coach payouts, email and SMS, and a coach dashboard.
- React Native
- Fastify
- PostgreSQL
- AWS
- Stripe
In the press
Featured in 21 outlets
- ForbesMissPoppins
- EntrepreneurMissPoppins on Elevator Pitch
- The Times of IndiaSleepDoc+
- ThePrintDhanLAP launch
- PR NewswireDhanLAP launch
- NDTV EducationSleepDoc+
- Accenture NewsroomSleepDoc+ grand prize
- Kitces AdvisorTech MapCherishBuckets
- ParentsMissPoppins
- MotherlyMissPoppins
- The TribuneSleepDoc+
- CafemutualDhanLAP
FAQ
Common questions
Can you audit our existing product?
Yes. I review your cloud setup, access, data handling and sign-in flows, then give you a prioritised list of fixes and can make them with your team.
Do you work with regulated industries?
Yes. I've built lending and investing platforms that handle KYC and money movement, and health apps with HIPAA-compliant video.
Is security expensive to add early?
Much cheaper than adding it later. Most of it is design decisions made before the first line of code.
Other services: