A platform agnostic company, accountable for what it ships

2011: it started as a hobby that paid.

Two self-taught hackers, one room, and security work that bigger firms would not touch. The founders are still on the security team, called researchers now, having been called worse.

2017: registered in Dhaka as Bluedot Technology Ltd.

Contracts between friends became a company with a payroll, an office and a name on the door.

The transformations.

Break-and-fix security grew into software engineering, then products we run ourselves, then private AI. Each step was learned the hard way, by operating what we had recommended.

Today: a US parent, the same team.

Bluedot Technology, LLC in the United States is the parent company. Engineering, the data centre and security operations are still in Dhaka, and most of the people who started this are still here.

Platform agnostic, on purpose.

Nothing is picked because it is popular this year, because it carries a famous price tag, or because one vendor shouts loudest.

Cost of ownership.

What it takes to run something for five years, patch it, monitor it and staff it matters more than the licence fee on the invoice.

Cost of leaving.

Before we commit to a platform we look at how hard it would be to walk away from it, and we say so when the answer is not good.

Who is on call.

Whoever picks up the pager at 3am should be able to read the code, the logs and the error. Anything that gets in the way of that loses.

Platforms we run ourselves.

A prescription platform for chambers and pharmacies, a hospital information system, an education suite, an ISP billing and bandwidth engine, an accounts ledger and a scanner that keeps every scan on the phone.

The domains.

CRM, ERP, e-commerce, data analytics, information security, and, as the field moved, big data, the internet of things, machine learning, computer vision, augmented reality and private AI.

A security practice, not a sideline.

An in-house audit team doing code review and penetration testing, with the reporting a regulator or a board will accept.

Tested for names you know.

Microsoft, Google, Facebook, Intel, Bitdefender, ESET, NASA, Sony, Tesla, Heroku, Intercom and Twitter, among others.

We use it, so we build on it.

Laravel, React, Linux, PostgreSQL, Redis and the rest of the stack on this page are other people's work before they are ours.

We contribute back.

Patches, documentation and bug reports upstream to the projects we depend on, as a matter of course rather than as a favour.

We maintain a few of our own.

Small tools written because we needed them, released because somebody else will.

We fund where we can.

Money to the maintainers whose work our business stands on.

Our mission.

To be the technology partner of choice for enterprises and government: solve the problem in front of us with software that fits, and leave our clients more capable than we found them.

Accuracy over optimism.

We say what will work and what will not, before the contract rather than after it.

Transparent, or discreet, as the work needs.

We would rather turn down a project than sell one that should not happen.

The list above is the scoreboard.

A company keeps clients for a decade by being worth keeping, and nothing else.