COMPANY
A small senior team. One build at a time.
Keelpost exists because design, engineering, maintenance and security usually live in four different companies. We keep them in one team, take one active build at a time, and put every decision in writing.
Working agreement
What you can hold us to.
Each one is checkable. If we miss it, quote this section back to us.
Every call ends with a written decision
What changed, what it costs, who owns it. If it is not in the note, it was not agreed.
A summary every week, including the quiet ones
Friday, one page: what shipped, what is blocked, what happens next. No status meeting required.
Scope changes need a change order
Nothing is absorbed silently, and nothing is billed without a number agreed before the work starts.
Access is time-boxed and revoked
Credentials sit in a dedicated vault, are used for one engagement, and are removed within 30 days of close. You get confirmation in writing.
We answer or decline within one business day
A no is a valid answer. Silence is not, which is why the first call includes the question we are likely to fail.
You keep everything
Code, design files, report, evidence and runbook. No hostage data, no export fee, no access revoked because a retainer ended.
Who you work with
Roles, not headshots.
No names, no photographs, no invented bios. The role is the part that matters to your project, and it is the part we can describe precisely.
Principal, Design
Product and interface design, from flows to a component set.
- Flows: user journeys, states, edge cases
- Interface: layout, typography, components
- Prototype: clickable, testable, reviewable
- Handover: Figma files and a design system
Principal, Development
Application code, integrations, CI/CD and handover.
- Application code: features, auth flows, data handling
- Integrations: payments, email, CRM, webhooks
- CI/CD: build, deploy, rollback, secrets
- Handover: repository notes, runbook, walkthrough
Principal, Security
Assessment, hardening and incident triage during support hours.
- Assessment: scope, testing, findings, retest
- Hardening: TLS, headers, sessions, dependencies
- Incident triage: what happened and what to do next
- Evidence: reports written for a customer, not a scanner
You work directly with the people doing the work. No account manager sits between you and the engineer who writes the report.
How we work
Async-first, with calls where a call helps.
Delivery is based in GMT+8. Most of the work happens in writing, so your team can read it on their own schedule and keep it afterward.
- Scheduled calls in UK mornings (17:00–20:00 GMT+8) and US East early mornings (20:00–22:00 GMT+8), by appointment
- A written decision after every call: what changed, what it costs, who owns it
- A weekly summary every week, including the quiet ones
- No 24/7 SOC. Support runs 09:00–18:00 GMT+8, Monday to Friday
First response covers new inquiries. Care plans set their own limits and response times, as listed on the pricing page.
Scope limits
What we are not.
If you need one of these, we will say so on the first call and point you toward the right kind of firm.
- Not a full-service agency. No brand identity, paid media or content retainers. We design products, build them and run them.
- Not a body shop. No rotating pool of contractors billed by the hour.
- Not a compliance auditor. We test and fix. We do not issue certifications or attestations.
- Not a 24/7 SOC. Support runs 09:00–18:00 GMT+8, Monday to Friday.
- Not the cheapest option. Fixed scope and senior review cost more than a template and a scanner subscription.
Current status
One new build for December 2026.
Build capacity
Accepting one new build for December 2026. The next slot opens when the current build ships, not before.
Care clients
A limited number of care clients. Plans are capped by assets and hours, so the limit is real and we will tell you where it sits.
Next step
A short call. A written answer.
Tell us what you are building and when it ships. You will get a written reply within one business day, and a no if we are not the right fit.