1 week
Product definition
Ideas with unresolved scope or technical risk
- Decision brief and product promise
- Primary journey and failure states
- First-release scope and exclusions
Cardiff · product design + engineering
Product design and engineering, without the handoff.
Focused web products, taken from first decision to production by the same two people.
Team experience
One of the UK's biggest banks · one of the UK's biggest insurers · NAGRA · Capgemini · Spindogs · QZee
Selected work
Built, then shipped.
/work/qzee
QZee
How a booking product became a shared operating system for customers, venues and events.
Customers + owners + eventsSix maintained repositoriesQZee One
Read the case study →/work/runite
Runite.Club
A two-sided running platform joining discovery, communities, events and club operations.
Community discoveryEvents + mapsStripe Connect
/work/coast-competitions
Coast Competitions
A complete competition lifecycle with operator control, payments and inspectable results.
Operator CMSDNA PaymentsInspectable results
Design and engineering. Together.
Design
Product UX, brand and design systems built for production.
- Product UI/UX
- Brand systems
- Marketing sites
Engineering
Web apps, PHP development, integrations and infrastructure.
- PHP
- Laravel
- Next.js
- TypeScript
- Postgres
- Integrations
Design and engineering come together by default. Need marketing? We'll introduce a specialist.
Choose the right starting point.
6-12 weeks
Product build
A new product or major release with a clear first outcome
- Product UX and responsive interface
- Production app, backend and integrations
- Implemented design system
2-4 weeks
Product reset
A live product with one costly problem
- Focused product and code diagnosis
- Redesigned high-impact journey
- Production implementation in the existing stack
Technical expertise
Keep the product moving. Fix what is holding it back.
PHP development, cybersecurity improvements and migration work for existing websites and applications.
Security
PHP2Shell assessment & patching
Assess PHP2Shell exposure and patch affected PHP runtimes. QDev helps with host coordination, safe deployment and verification for both October 2026 CVEs.
You leave with: An exposure record, patch evidence and verified application checks
Explore php2shell assessment & patchingMigration
PHP upgrades & migration
Move legacy PHP applications to a supported runtime. QDev plans compatibility fixes, dependency updates, staging tests and a controlled production migration.
You leave with: A supported target runtime, tested compatibility fixes and release notes
Explore php upgrades & migrationSecurity
Web application security review
Find and fix practical web application security risks with QDev. Scoped PHP code, access-control and configuration reviews with prioritised remediation.
You leave with: Prioritised findings, remediation scope and agreed retest evidence
Explore web application security reviewClear scope. Fixed price. Direct access.
Product definition
One paid week ends with a recommendation and, when ready, a fixed price.
Fixed price
You pay for the project, not a trail of hours.
Direct access
You work with the people designing and building your product.
Have a product to ship?
Tell us what you're building. If it fits, we'll define the next step.
Discuss a project