Status: Available from 28 September
Harpy Division

HARPY DIVISION

BACKEND FULL-STACK DEVSECOPS PENTEST

We design, build and harden systems that survive heavy load and keep attackers out.

Scroll

Harpy Division

SECURITY-FIRST Engineering | Your Full-Stack SQUAD

A brief introduction to who we are and what we do best.

INITIATING SQUAD... WHO ARE WE ??

WHO ARE WE ??

Callsign
HRPY//DIV
Team
Harpy Division
Profile
Development ; Security
Stack
Go · Python · JavaScript · Elixir
Mode
Remote, worldwide

uname -a

Kernel
6.9.0-harpy-generic
Hostname
nest-01
Architecture
x86_64 / arm64

Hello, we are Harpy Division

A compact team of engineers building reliable backends, web services and infrastructure — and then trying to break them ourselves. We ship Go, Python, JavaScript and Elixir, deploy to Kubernetes and bake security in from the very first commit.

What we do

Development

  • Backend APIs
  • Microservices
  • Realtime systems
  • Web apps
  • Integrations
  • Bots & scrapers
  • Highload
  • Refactoring

Security

  • Web pentest
  • Code audit
  • Threat modeling
  • OWASP ASVS
  • Traffic analysis
  • Hardening
  • SIEM & alerting
  • Incident review

Infrastructure

  • Kubernetes
  • CI/CD
  • NGINX Ingress
  • Observability
  • IaC
  • DB migrations
  • Backups & DR
  • Load testing

Programming Languages

  • Go
  • Python
  • JavaScript
  • Elixir

Developer Tools

  • GitLab
  • Docker
  • JetBrains IDE
  • Neovim

6.9.0-harpy-generic

// SKILLS

Our Core Skills

Hands-on practice, not theory: we build fast APIs and realtime services, find vulnerabilities before attackers do and watch threats in real time. For analysis and monitoring we rely on Wireshark, Burp Suite, Metasploit and Splunk.

See it in action
  • 40+

    projects shipped

  • 7

    years in the field

  • 24/7

    monitoring & support

Security Tools

  • Wireshark
  • Metasploit
  • Splunk
  • Burp Suite

Programming Languages

  • Go
  • Python
  • JavaScript
  • Elixir

Web Tech

  • FastAPI
  • Django
  • PostgreSQL
  • Redis
  • Kubernetes
  • NGINX Ingress
  • React
  • Node.js
  • MongoDB
// ARCHIVE

Projects

Check out some of our recent work

API gateway / Highload

Raven Gate

A high-throughput API gateway with rate limiting, JWT auth and hot route reloading.

Go, Redis, PostgreSQL, Kubernetes

Threat monitoring / SIEM

Talon Watch

A security event collection and correlation platform with Splunk integration and smart alert filtering.

Python, FastAPI, PostgreSQL, Redis

Realtime / Messenger

Nest Messenger

A corporate messenger on Elixir and Phoenix: hundreds of thousands of concurrent connections and lossless delivery.

Elixir, Phoenix, PostgreSQL, Redis

Perimeter control / AppSec

Claw Shield

A continuous external-perimeter control platform: service inventory, vulnerability tracking and reports for the security team.

Go, Python, Burp Suite, PostgreSQL

CRM / Logistics

Plume CRM

A Django CRM for a logistics company: deals, carrier requests, billing and analytics in a single window.

Python, Django, PostgreSQL, Redis

E-commerce

Feather Market

An electronics marketplace with a Node.js + MongoDB catalog and a FastAPI recommendation service.

JavaScript, React, Node.js, MongoDB

// WORKLOAD STATUS

Availability

Plan ahead: see when the squad has free hands for your project.

STATUS MATRIX

September 2026

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
  14. 14
  15. 15
  16. 16
  17. 17
  18. 18
  19. 19
  20. 20
  21. 21
  22. 22
  23. 23
  24. 24
  25. 25
  26. 26
  27. 27Today
  28. 28
  29. 29
  30. 30

Days this month: 30

  • Free8
  • Partially busy7
  • Busy7
  • Not specified8
// PROTOCOL

How we work

  1. 01

    Brief & estimate

    We break down the task, risks and constraints, then lock scope, timeline and budget.

    1–3 days
  2. 02

    Architecture

    We design the system, the threat model and the infrastructure before the first line of code.

    1–2 weeks
  3. 03

    Development

    Short sprints, a demo every week, code review and automated tests in CI.

    sprints
  4. 04

    Launch & defense

    Kubernetes deploy, monitoring, a pre-release pentest and ongoing support.

    24/7
// COMMS

Get in Touch

Have questions or a project in mind? Message us on any channel — we are here to help.

  • Telegram

    Quick questions and project talk

    @harpyroot

    Open
  • Jabber

    Secure messaging over XMPP

    root_harpy@xmpp.jp

    Open
  • Matrix

    Decentralized chat with end-to-end encryption

    @harpy_root:matrix.org

    Open
secure-channel — zsh

harpy@nest:~$ whoami --team

Harpy Division // HRPY//DIV

harpy@nest:~$ cat contacts.txt

telegram → @harpyroot

jabber → root_harpy@xmpp.jp

matrix → @harpy_root:matrix.org

# Pick any channel — the whole squad reads all three daily.

harpy@nest:~$