since 1999

Security for Custom Web Apps

We pride ourselves on patching dozens of client applications within a few hours of a known security risk in a world where other companies usually take months.

Let us show you how to optimize your custom code pipeline for rapid patching of supply chain vulnerabilities and to deploy reliable functional updates to your system like clockwork. Learn More

No. 1 Clipboard with audit items and one checked off.

Existing Code Security Review

Beyond automated scans, Rietta conducts a security-oriented code review to assess the security posture, recommend fundamental improvements, and prioritize into your existing development practices fixes for these issues.

No. 2 Docker is used for containers

Containerized CI/CD

To patch production 290% faster than your competitors, fundamental build and deploy process improvements must be put in place. Containerize your entire build process so that the same process runs on your developer systems, in your continuous testing, and continuous deployment process.

No. 3 User illustration with security shield.

Continuous Blue Team

We partner with your developers to be a blue team, working to systematically improve your security and maintainability of your custom software.

We provide tailored appsec solutions for clients who:

  • Operate SaaS businesses with data-breachable PII
  • Are healthcare organizations who are regulated HIPAA Covered Entities
  • Are Government agencies with custom web applications exposed to the public
  • Have existing software teams who are not themselves security experts
AppSec Solutions by Industry
Preview of PDF entitled Recipe Card for Strong Appsec Program by Frank Rietta

Recipe for a Strong Application Security Program (PDF)

We have prepared a recipe card for the 10 steps for a Strong Application Security Program for your organization written by Frank S. Rietta, MSIS. It's yours free without strings attached!

This is a great resource to hand out to your team.

Download PDF Blog


How to win the race with hackers when new vulnerabilities are publicly disclosed!

Keeping deployed web applications up-to-date is imperative to prevent data breaches. Here's how to use automated testing of custom web application software to patch quickly after a support chain vulnerability is publicly disclosed. …

Read More » Blog


Case Study: Migration of Public Service On-Prem to AWS Cloud

How Rietta planned and implemented a multi-step process to fully migrate a monolithic on-prem Rails application to the the AWS cloud using Docker, AWS Elastic Container Service, the AWS Secrets Manager, and more. …

Read More »