Build it. Secure it.
Run it.
Independent product security, full-stack development, and cloud infrastructure for startups and SaaS teams. I build your product, secure it, and put it on infrastructure you can trust in production, with security in from the first commit. Fixed scope, fixed price, and one engineer from scope call to handover.
Yawo Siatitsefounder · software engineer, 6+ years at Microsoft
Problems I solve
services"A customer sent a security questionnaire. We're not sure we'd pass."
Threat modeling and data-flow reviews, DevSecOps built into your pipelines, identity on Entra ID and OAuth, engineering fixes for compliance gaps, and disaster recovery you've actually tested. You get prioritized findings, concrete fixes, and answers you can put in front of a buyer.
"We need it built right, without hiring a team."
Web apps, APIs, and complete products, from blank repo to production. React and TypeScript, .NET, Go, and Python APIs, PostgreSQL and NoSQL (MongoDB, Cosmos DB), with security in from the first commit and a repo you own from day one.
"Deploys are scary and the cloud bill keeps climbing."
Reproducible cloud infrastructure on Azure or Cloudflare: infrastructure as code, staged CI/CD with security checks built in (DevSecOps), containers, and observability, so releases are boring and costs stay predictable.
Who I work with
fit- Founders with a great idea and no technical team, who need someone to turn it into a real product, from first version to launch
- Startups and SaaS teams that need a product built, hardened, or put on solid infrastructure
- Teams moving upmarket and facing security reviews, questionnaires, pen-test findings, or compliance gaps to close
- Founders and small teams without a dedicated security or platform lead
- Engineering teams that need senior help with auth, cloud, or a hard build, alongside their own developers
- Open-ended hourly staff augmentation with no defined outcome
- Compliance assessments or certification. I engineer the fixes for the gaps your auditor finds.
- Projects where security is meant to be added "later"
Not sure? Book the scope call anyway. If I'm not the right fit, I'll point you to someone who is.
How an engagement works
processFree 30-minute scope call
You describe the problem, I ask the hard questions. If I'm not the right fit, I'll tell you straight and point you somewhere better.
Fixed proposal in 48 hours
A written plan with scope, milestones, timeline, and one price. No running day-rate meter, no surprise invoices.
Weekly working demos
Working software every week in a repo you own from day one. You always know exactly where the project stands.
Handover + 30-day support
Documentation, deployment, and a clean handoff to you or your team — with 30 days of post-launch support included.
Why teams hire Mawussi
guaranteesYou talk to the engineer
No account managers, no work quietly handed to juniors. The person on the scope call is the person writing your code — a software engineer with 6+ years at Microsoft shipping multi-tenant platforms.
Numbers, not vibes
Millions of events a day · 4× faster reviews · 20s→<3s load times. Every engagement is scoped around an outcome you can measure.
Secure by default
Threat modeling, least privilege, and audit trails are built in from the first commit — not bolted on before launch. You ship a product you won't have to rebuild after your first security review.
Selected work
case studiesShipped an isolated malware-investigation browser, secure from the threat model up
As dev owner: threat model and data-flow diagram, exfiltration guardrails, GDPR privacy review, and a BCDR plan validated with recovery drills, all inside a hardened, compliance-certified cloud environment.
From blank repo to a live multi-portal admissions platform
Designed and shipped UniAccess end to end: a pan-African university admissions portal, launching in Angola first, where students build one profile, apply to universities, and track decisions. One engineer, the whole product.
Working together
logisticsNDA and a written SOW
A mutual NDA before we get into details if you need one, and a written statement of work for every engagement, contracted through Mawussi Solutions.
Your repo, your IP
Work happens in your repository from day one. Code, docs, and infrastructure are fully yours at handover.
Pacific Time, remote
Based in Seattle. Full overlap with US and Canadian teams, plus early Pacific mornings for Europe. English and French.
Reply in one business day
Every inquiry is read and answered by me personally. There's no intake team and no auto-responder.