Cybersecurity for SMBs & SaaS · Edmonton, Alberta
Compliance readiness, security assessment and penetration testing for SMBs and SaaS — to meet the requirements of your clients, insurers and partners.
Our edge: we also build the systems we test.
01 — What we do
Know where you stand before someone else tells you. Gap analysis against one framework, control inventory, prioritized roadmap and policy templates.
SOC 2 · ISO 27001 · PIPA · PIPEDA (where applicable) · PCI-DSS (payments) · Client questionnaires
What an attacker sees of your organization from outside — exposure, services, configuration. No intrusive testing.
Internet exposure · DNS · TLS · Technologies · Configuration
Full application penetration test, seven-phase methodology. Written scope, firm price, actionable report.
OWASP Top 10 · REST / GraphQL API · Multi-tenant & IDOR · Business logic · CVSS 3.1
02 — Why Kemain
We build and we test. The remediation plan is delivered, not just the finding.
Seven phases, OWASP / PTES / NIST. A scope defined in writing, no improvisation.
Based in Edmonton, available by appointment. A single point of contact.
Bilingual service in French and English — rare in this market.
03 — Development
From client portal to full SaaS, with the cloud foundations that come with it. Secure by design — not audited afterwards. It's our edge, not our opening line.
B2B SaaS · Client portals · REST & GraphQL APIs · Multi-tenant · Next.js · Cloudflare · CI/CD
04 — Case studies
2025 · B2B SaaS · Real estate
Multi-module platform for a real-estate operator managing hundreds of parcels. Real-time dashboard, boundary management, road access, topographic records and a sales workflow — all unified in one interface.
2025–2026 · B2C SaaS · Education · Proprietary product
Our SaaS product for school-to-parent communication. Attendance, grades, messages — all delivered to parents' WhatsApp, in a format optimized for local constraints.
2025 · Web + audit · Entertainment
Institutional website and Android app for an online gaming platform. The engagement went beyond development: a full seven-phase security audit, followed by a prioritized remediation plan delivered to the client.
2025 · B2C SaaS · Genealogy
Family genealogy web platform — build, share and preserve your family tree. Stories, photos and dates pass from one generation to the next, each relative enriching the tree remotely, even on low-bandwidth connections. Design, development, then a security assessment following our methodology.
2026 · Web · In-home service · Edmonton, Alberta
Bilingual website for an Edmonton in-home childcare service with atypical hours — evening, overnight, weekend, school breaks. Presents the five service tiers, with an online request and waitlist; the site takes no payment and confirms no spot automatically.
05 — Our approach
Every project follows the same discipline: understand the business, model it correctly, build with rigor, audit before production, support after launch.
Structured discovery. We identify your real challenges before proposing any technical solution.
Architecture, data, security, scalability — designed together from the start, not bolted on.
Modern stack, secure coding, reviews, tests. The code we write is built to last.
Seven-phase methodology: reconnaissance, authentication and sessions, access control, OWASP Top 10, API, business logic, logging and detection.
Secure cloud infrastructure, CI/CD, active monitoring. You launch with confidence.
Maintenance, evolutions, security watch. We stay partners after the initial delivery.
Not every phase applies to every engagement. The scope — what is tested and what is not — is defined in writing before any work begins.
06 — Expertise & technology
07 — Contact
Whether you need a platform designed, a security audit on an existing application, or simply a structured opinion on a technical decision — we take the time to understand before proposing.