Roari
Sheet 01 · Capability Edition 2026.1 Corrected to 07 Sep 2026
10 20 50 MONITORED ESTATE N E S W WEB PORTALS ref 1 CYBER SECURITY ref 2 · Fl(3) 15s CONSULTATIONS ref 3 TRAINING ref 4 SMART HOME ref 5
Roari Solutions Software & security Est. 2016
Roari Solutions

One team holds the whole estate.

We build your portals, secure what you already run, wire your buildings, and train the people who operate them. One survey, one accountability line — and no gaps where three suppliers hand off to each other.

Note

Names, figures and references on this sheet are authored placeholders, marked the way a chart marks unsurveyed ground, pending Roari's own material.

Index of the sheet

Five stations, one survey. Point at a line here and it lights on the chart above. Every line is staffed by the same team — the reason nothing falls between them.

  1. 1

    Web portals

    Public-facing and internal portals, and the systems behind them. Citizen services, licensing, case management, staff intranets. We take the deployment pipeline as well as the repository — software your team cannot ship safely is not finished software.

    Typical scope
    Portal, admin, integrations, pipeline
    Accessibility
    WCAG 2.2 AA, tested with users
    Handover
    Your repositories from day one
  2. 2

    Cyber security

    Securing what we build and what you already run. Assessment, hardening, and continuous watch over the estate inside the limit. The people who find the weakness are the people who write the fix, which is why our findings arrive as changes rather than as a list.

    Assessment
    Web, API, cloud, internal network
    Retest
    Included; closed only when it fails to reproduce
    Watch
    Continuous, characteristic Fl(3) 15s
  3. 3

    Consultations

    Fixing your position before you spend. What you have, what it is worth keeping, what it would cost to replace, and what to do first. We will tell you when the answer is to do nothing yet, and we have no licences to sell you either way.

    Format
    Two to six weeks, named lead
    Output
    Board summary and a costed technical annex
    Independence
    No vendor commission, ever
  4. 4

    Training

    Teaching your staff to run and defend what they own. Role-based, on your own systems rather than a generic lab, with the awkward internal cases included. A supplier who leaves and takes the understanding with them has not finished the job.

    Audience
    Developers, operators, and all-staff
    Delivery
    On site or remote, your systems
    Materials
    Yours to keep and re-run
  5. 5

    Smart home & building

    The physical end of the same practice. Access control, lighting, climate, cameras and the network they sit on — specified, installed and secured by the team that secures your software. A connected building is an attack surface with a front door.

    Scope
    Residential and commercial estates
    Network
    Segmented from day one, not retrofitted
    Support
    Maintained under the same contract

Notes on this sheet

Charts carry their warnings in the margin, where nobody has to go looking. These are ours.

Caution

A connected building is part of your attack surface. Access control, cameras and climate systems routinely sit on the same flat network as finance and HR, installed by a contractor who has since moved on and commissioned with the credentials still at their defaults.

We will not install a building system we are not also allowed to secure, and we will not sign off an estate where the physical and digital sides are held by suppliers who do not talk to each other. This costs us work. We have decided it is the right price.

Source and method

Every engagement runs in the same four stages, in this order, because skipping one is how findings get missed.

  1. Survey. Written scope and authorisation, inventory, escalation contacts. Nothing is pointed at a system before this is signed.
  2. Plot. The work itself, with a written daily update to a named contact. Anything critical is reported within the hour, not held for the report.
  3. Publish. Two documents: a board summary in plain language, and a technical annex with reproduction steps and a named owner per item.
  4. Correct. Retest against the deployed fix. It closes only when the original reproduction stops working.

Authority and limits

Roari is one team, not a network of subcontractors. The people you meet at the scoping call are the people who do the work, and the same names appear on the closing report.

We do not resell hardware or software licences and take no commission from any vendor we recommend. Where a piece of work is better done by someone else, we say so at the scoping call and tell you who.

Certifications, registrations and insurance details are held for this section and will be published once supplied.

Soundings

Depths already taken. Everything in this table is authored placeholder content, shown dotted the way a chart shows ground nobody has surveyed yet — replace it with Roari's own record before this sheet is published.

Table A — selected engagements (unsurveyed)
SectorStationWorkResultDepth
Municipal authority 13 Licensing portal replacement, with the case-management system behind it Counter visits down by two thirds; the same three staff now clear the queue by Wednesday 14 mo
Private hospital group 24 Estate assessment, then continuous watch and all-staff training Two critical findings closed before go-live; phishing click-through fell from 31% to 4% Ongoing
Logistics operator 2 Incident response and containment during an attempted ransomware deployment Contained during lateral movement; nothing encrypted, nothing left the estate 6 min
Developer, mixed-use estate 52 Access control, lighting and climate across 240 units, on a segmented network One network, three isolated segments; building systems cannot reach tenant data 9 mo

Symbols & abbreviations

Every chart ships with the key that teaches you to read it. So does every system we hand over — and teaching your people to read their own estate is a service we sell, not a favour we do at the end.

Used on this sheet

Watch station
A point under continuous monitoring. Its light characteristic gives the pattern: Fl(3) 15s is three flashes every fifteen seconds.
Fixed point
A position established by survey rather than estimate. On an estate, the handful of things you can actually prove about it.
Limit
The boundary of the area under watch. Drawn in Roari's gold, which on this sheet is reserved for anything carrying a consequence — and used nowhere else.
Contour, dotted
A depth line drawn from incomplete data. Anything on this sheet marked this way is an authored placeholder awaiting Roari's real material.

What we teach

Reading your own estate
For managers and boards. What you own, what is exposed, and which questions to ask a supplier who is being vague at you.
Secure development
For your developers, in your languages, against your own codebase. Threat modelling, review practice, and the classes of bug your stack actually produces.
Operating the watch
For the people holding the pager. Triage, escalation, evidence handling, and running the first hour of an incident without making it worse.
All-staff awareness
For everyone else. Short, specific to your sector, and built around the messages your staff are genuinely receiving rather than a stock phishing deck.

Notices

Charts are corrected by a published notice, never quietly. Ours is where we write down what changed, what we got wrong, and what we would do differently.

All notices

Who signs the sheet

A chart carries the name of the authority that published it. These entries are placeholders held for Roari's own people — the section is built and waiting for the real names.

Request a survey

Forty minutes with the person who would run the work, not an account manager. We will tell you what we would look at first and roughly what it costs, on the call. If we are the wrong firm for it, we will say so and tell you who is right.

New work
hello@roari.example
Live incident
incident@roari.example
Telephone
held
Registered office
held