We engineer the software your business runs on.

The Virtual Class builds web applications end to end, sets up cloud infrastructure that scales, and audits all of it for security. One team, from first commit to production.

Requests served
0
Threats blocked
0
Uptime
100%

Three disciplines, one accountable team.

Most failures happen at the seams between the people who build an app, the people who host it and the people who check it. We do all three, so there are no seams.

Web applications

Frontend and backend, built as one system.

We design the interface, the API and the data model together, so the product is fast for users and simple to change for the engineers who inherit it.

  • React, Next.js and TypeScript interfaces
  • APIs in Node.js, Python or Go
  • PostgreSQL data models and migrations
  • Automated tests and CI/CD pipelines
  • Accessibility to WCAG 2.2 AA

Cloud setup

Infrastructure you can rebuild from one repository.

Every environment is defined in code, reviewed like code and deployed by pipeline. Nothing depends on someone remembering which console button they clicked.

  • AWS, Azure, Google Cloud and Cloudflare foundations
  • Terraform infrastructure as code
  • Containers, Kubernetes or serverless
  • Monitoring, logging and alerting
  • Backups, disaster recovery and cost controls

Security audits

Find the weak points before someone else does.

We test your application and cloud configuration against published standards, then hand you findings ranked by real-world risk, with the fix for each one.

  • Application testing against OWASP ASVS
  • Cloud configuration review against CIS Benchmarks
  • Dependency, container and secrets scanning
  • Prioritised report with remediation steps
  • Free retest once fixes are in

How a project runs.

Five stages, each ending in something you can see and approve. You always know what we are doing this week and why.

  1. 1

    Discover

    We map your users, your constraints and your existing systems, then agree on what success means in numbers.

  2. 2

    Architect

    A written design covering data, services, hosting and threat model, reviewed with your team before any code is written.

  3. 3

    Build

    Two-week cycles with a working release at the end of each. Every change is tested, reviewed and deployed by pipeline.

  4. 4

    Harden

    Load testing, a full security review and recovery drills, so launch day is uneventful.

  5. 5

    Hand over

    Documentation, runbooks and training for your engineers. You own all of the code and all of the accounts.

Built to published standards, not house opinions.

When we say something is secure, accessible or production-ready, we can point to the standard we measured it against.

OWASP ASVS
The verification standard behind every application audit and every authentication flow we build.
CIS Benchmarks
Hardening baselines for cloud accounts, containers and operating systems.
WCAG 2.2 AA
Accessibility requirements checked with automated tools and by hand with screen readers.
Twelve-Factor App
Configuration, logging and deployment practices that keep services portable between clouds.
SOC 2 and ISO 27001 readiness
Controls, evidence and logging set up so your certification audit has what it needs.
POPIA and GDPR
Personal data mapped, minimised and encrypted, with retention rules enforced in code.

Ways to work with us.

Product build

A dedicated team designs, builds and launches your application and the infrastructure under it.

Best for new products and full rebuilds.

Engineering partnership

A monthly retainer for ongoing features, platform upkeep and on-call support alongside your own developers.

Best for teams that need senior capacity.

Fixed-scope audit

A security review of your application or cloud account with a set price, a set timeline and a written report.

Best before a launch, funding round or certification.

Tell us what you're building.

We reply within one working day with next steps, usually a 30-minute call with an engineer, not a salesperson.

Prefer email? [email protected]

What do you need?