Questions people ask us

We build secure, scalable software and the AI that runs inside it, review systems as consultants, and train the teams who inherit what we hand over. See What we do.

We reply, usually within two business days, and say plainly whether we are the right people for what you are building.

A scoping call, where we tell you what we would actually look at, at no charge. Then a written proposal with fixed scope, fixed fee, and what you get at the end of it. The whole path is on How we work.

Fixed-scope reviews have a fixed fee, quoted after a call in which we tell you what we would actually look at. Ongoing build work is monthly. See Consulting.

A security review is fixed scope and takes 1–3 weeks, an architecture review 1–2 weeks, and a cloud cost review 1 week. Pre-audit readiness is scoped after a call.

Social media, where most of our own products live, plus healthcare, financial services, the public sector, and startups & scale-ups. These are the domains our engineering is built for, not a list of clients we have shipped for. See Industries.

Two ways. Courses in DevOps, AWS, security, databases, programming, AI and Windows desktop support, built on labs, projects and practice tests, with certification prep. And programs for engineering teams, onsite or remote, in cohorts of up to twelve, against your own codebase rather than a sample app; course materials are yours to keep and re-run internally. See Training.

No. We prepare you with labs, projects and practice tests; when you are ready, you book and take the exam yourself with the official provider, such as AWS, CompTIA or ISC2. We are an independent training provider, not affiliated with, endorsed by, or an authorized training partner of any of them, and we do not sell exam vouchers. See Training.

No. We hold no SOC 2, ISO 27001, FedRAMP or CMMC certification, and we do not imply otherwise. We build against OWASP ASVS and NIST SP 800-53 control families. See Security.

We have no client case studies, so we publish none. The products on this site are our own: built, operated, and demonstrable on request. See Products.

Please do not. Keep credentials, confidential material and anything under an NDA out of a first message. Say you have something sensitive and we will arrange a proper channel first.

Email support@pontelon.com with "Security report" in the subject line. Leave working exploit code out of the first email; we will reply with a private way to send it. We do not run a paid bug bounty. The full policy is on Security.

Very little: no analytics, no advertising, no tracking pixels, no third-party scripts, and no cookies for visitors. If you use the contact form, we keep what you typed so we can reply. See Privacy.

It is an AI, and it can be wrong. Nothing it says is a quote, an offer or a commitment from us. We do not store your questions, the conversation or the answers. See Privacy.

Not yet. Our products are listed with their real status, and none is generally available today. Sign-in is for administrators, through Cloudflare Access, with no password to enter, and none stored on our side. See Sign in.

There is nothing open right now. When a role opens it is listed on Careers, and it is one we would rather leave unfilled than fill badly.