The server can never read a vault
Every entry is encrypted in the browser with AES-256-GCM under a key derived from the master passphrase. The server stores only ciphertext and a wrapped key, so not even metadata like company names is visible to it.
A cybersecurity company's website plus two security products: an attack-surface scanner and a zero-knowledge vault
The company website for Defense Net Solutions, plus two security products now run under their brand: a security posture scanner and a zero-knowledge credential vault with a Chrome extension.
UAE & IndiaVisit Defense Net Solutions
The challenge
What needed solving.
Defense Net Solutions needed a credible web presence for enterprise infrastructure and security services, and products that demonstrate that expertise. In security, the products themselves have to meet the standard they sell: non-destructive and authorised-only scanning, and credential storage the provider can never read.
What we built- Company website presenting Defense Net's infrastructure, threat-protection, and IT security services
- Security posture scanner: DNS, subdomain enumeration with takeover detection, WHOIS, SPF/DKIM/DMARC, TLS, HTTP security headers, port and service scan, technology fingerprinting, and threat-intelligence checks
- Severity-ranked scan reports with an overall risk score, an explicit authorisation step before every scan, and optional forwarding of findings to a SIEM
- Zero-knowledge credential vault: a web app and a Chrome extension sharing one encrypted vault, with one-click autofill
- Vault features: TOTP/2FA codes, password-health scoring, Test/Real credential segregation by company, encrypted backups, passkey unlock, and read-only sharing
A scanner that stores nothing
Scan jobs live only in memory on the server. Each user's history, saved targets, and API keys stay in their own browser, so the service keeps no data on the domains it assesses.
The result
Defense Net Solutions runs its website and both security products under its own brand. The scanner and vault give its team working tools to demonstrate and deliver its security services.
Related work
Similar projects.
QuickCart
A full-stack Next.js storefront with customer accounts, catalogue management, and product feeds that put the catalogue into Google Shopping and local-inventory listings.
Read the case studyNational tourism & transport co-operative federation (India)
A rebuilt federation website with structured SEO, membership information, news publishing, and enquiry handling at the edge.
Read the case studyUAE premium smartphone retailer
A luxury storefront for new and certified-used iPhones with storage and colour variants, AED pricing, a trade-in estimator, and a protected inventory manager.
Read the case study