C_01
Sovereign Software
Distributed web & mobile platforms. Event-driven, API-first, containerized. Your repo, your IP, day zero.
React NativeNext.jsGoRust
CONTROL_PLANE · LIVE UPTIME_99.98% ISO_27001 · POPIA SLA · SUB-15MIN
Platform · engineering
Under the
hood.
A live tour of the control plane behind every THZ engagement - pipelines, topology, SOC posture, and the exact stack we operate.
thz-ops · zsh · production
● LIVEroot@thz-prod-01:~$kubectl rollout status deploy/api-gateway
→waiting for rollout to finish: 3 of 3 updated replicas...
→deployment "api-gateway" successfully rolled out
root@thz-prod-01:~$terraform apply -auto-approve -target=module.draas
→Apply complete. Resources: 24 added, 2 changed, 0 destroyed.
root@thz-prod-01:~$thz-soc scan --scope=perimeter --profile=iso27001
→0 critical · 0 high · 2 informational - POPIA/ISO27001 pass
root@thz-prod-01:~$gh workflow run track-my-tenders/production.yml
→queued · commit 3f9a4c1 · build #482
root@thz-prod-01:~$
NET_TOPOLOGY_v4
multi-region
Distributed by design.
Native presence across Azure South Africa North/West and AWS Africa (Cape Town).
AzureSouth Africa North
AzureSouth Africa West
AWSaf-south-1
REGIONS
6
CLUSTERS
18
RTO
< 4h
req/s
12.4K
p95
84ms
err rate
0.02%
nodes
142
regions
6
SOC alerts
0 crit
pipelines
37 grn
IP owned
100%
./capabilities --list
Six disciplines.
One control plane.
Every workstream ships through the same trunk-based repo, CI/CD, and security gates - no siloed hand-offs, no vendor lock-in.
C_02
Offensive Security
Continuous adversarial testing, SIEM tuning, and 24/7 SOC. Aligned to POPIA, ISO 27001 & NIST CSF.
Red TeamSOC-aaSSIEMMITRE ATT&CK
C_03
Cloud & DRaaS
Multi-region deployments with automated DR drills. RPO ≤ 15min, RTO ≤ 4h, immutable backups.
AzureAWSTerraformKubernetes
C_04
Data & Platform Eng.
Streaming pipelines, warehousing, and lakehouse patterns. From ingestion to boardroom BI.
PostgresKafkadbtAirflow
C_05
Consulting & Staffing
Senior engineers embedded with your team - architecture reviews, roadmaps, hiring rubrics.
ArchitectsStaff AugFractional CTO
C_06
Managed Support
24/7 NOC with sub-15-minute critical response. Chaos-tested runbooks, blameless post-mortems.
SLA 15′On-callRunbooksChaos
/pipeline · commit-to-prod
From commit to prod
in under 2 minutes.
A hardened GitOps pipeline shared by every engagement - signed commits to progressive delivery with automatic rollback on SLO regression.
STAGE_01
SOURCE
trunk · signed commits
STAGE_02
BUILD
sbom · reproducible
STAGE_03
SCAN
SAST · DAST · secrets
STAGE_04
STAGE
canary · ephemeral env
STAGE_05
SHIP
progressive · rollback
STAGE_06
OBSERVE
traces · SLO alerts
./security --posture
Zero-trust,
by default.
We assume breach on day one. Every service ships with mTLS, short-lived credentials, and continuous verification - audited against POPIA, ISO 27001, and NIST CSF.
mTLS everywhere
Signed artefacts
24/7 SOC
Continuous audit
soc.thz.io / posture
ALL_GREEN
CRITICAL
0
HIGH
0
MEDIUM
3
INFO
12
IAM · privilege drift
aws-prodresolved
TLS 1.2 endpoint deprecated
az-jhbauto-remediated
SBOM diff · 2 packages updated
api-gwreviewed
Runbook · DR drill scheduled
draasqueued
./stack --radar
The stack we actually run.
LANGUAGES
TypeScriptJavaC# / .NETGoPythonRustKotlinSwift
FRAMEWORKS
Spring BootASP.NETNode.jsNestJSFastAPIAngularReactNext.jsVueReact Native
AI / ML
OpenAIAnthropicLangChainLlamaIndexHugging FacepgvectorPyTorchOllama
MESSAGING
KafkaRabbitMQNATSgRPCJMS / TIBCO
PLATFORMS
KubernetesDockerTerraformHelmArgoCDGitHub ActionsAnsibleIstio
CLOUD
AzureAWSGCPCloudflareVercel
DATA
PostgresOracleMongoDBPerconaSupabaseRedisElasticClickHouseSnowflake
SECURITY
VaultSnykTrivyFalcoWazuhCrowdSecOWASP ZAP
OBSERVE
OpenTelemetryGrafanaPrometheusLokiJaegerSentryDatadog
./next-step
Ready to deploy?
Talk to an architect. We'll size the engagement, draft an SLA, and hand you a runbook - usually within one working day.
Init Contact