Enclav is an engineering firm in Amman. We build software, secure it and run it in production. Take one practice, or all three.
Most software is built by one team, attacked by another and run by a third. The gaps between them are where breaches happen. Enclav works across all three.
Each practice works on its own. Combined, they close the gaps between the people who build, defend and run your software.
Select practices to combine them
Your engagement
One team designs, builds, secures and runs your product. Two walls, one core, nothing left between teams.
Customer-facing products, portals and internal tools, built on a secure development lifecycle.
iOS and Android apps with secure storage, pinned transport and an auditable release pipeline.
Assistants, retrieval and workflow automation with data boundaries and prompt-injection controls.
Documented APIs with authentication, authorisation and rate limits designed in.
Web, API and mobile testing against OWASP ASVS and MASVS, with a retest after fixes.
Line-level review of authentication, authorisation, input handling and secrets.
A fixed-scope review before a launch, a fundraise or an enterprise questionnaire.
Chatbots, RAG pipelines and agents tested for injection, data leakage and unsafe tool use.
Automated build, test and deploy with signed artefacts and security checks in the pipeline.
AWS, GCP and Kubernetes platforms with infrastructure as code and GitOps delivery.
Least-privilege access, network segmentation and CIS baselines for cloud and servers.
Logging, metrics and alerting so problems are seen before customers see them.
Most products pass through four hands before they reach customers. With Enclav they pass through one, so nothing is lost between them.
Move your pointer over each drawing
Every finding is reproducible, with the request, the response and the impact written down.
You know what is covered and what it costs before we start.
The people who scope the work are the people who do it.