We think the security industry has been solving the wrong problem for 25 years.
The standard answer to cyber risk is to make systems reachable and then watch them closely enough to catch misuse in time. Everything follows from that: firewalls, VPNs, ZTNA gateways, EDR, SIEM, round-the-clock monitoring. Spending keeps climbing. Breaches keep happening.
We build the other thing. ZafePass Prevent & Protect makes systems unreachable to anyone who has not been verified first - no listening service to find, no standing connection to hijack, no password that works on its own. The device must be cryptographically bound to the user before identity is even checked. Access exists for the task and disappears with it.
When nothing answers strangers, scanning and lateral movement do not produce suspicious events to analyse. They produce no events.
Why this matters now: critical infrastructure runs on controllers with 20–30 year lifespans that cannot be patched and will not be replaced. You cannot demand patching of equipment that has no patches. You can make it unreachable ... today, without replacing anything. When hundreds of French supermarkets lost their refrigeration this month, the authorities’ advice was not better monitoring. It was to take the controllers off the internet.
WHO WE ARE
A small team with base in Denmark and the UK. A few years in the startup / buildup phase based on two decades of engineering lineage ... a mature product being re-platformed, not a prototype. We have no debts, no creditline - and 100% self financed - but keep operational cost efficient for 12 months operation without income. We sell exclusively through partners and indirect channels in 24 countries as of now, and deploy on the customer’s own infrastructure: no cloud control plane, no telemetry leaving the building.
We publish our own research with the commercial interest declared on page two, every number traced to a named public source, and a standing right of reply. We would rather be checked than believed.
WE ARE HIRING: DEVELOPERS
The speciality we are mostly interested in right now, is "Delphi with Linux Experience" our latest edition - but the programme isn't static ... native agent and gateway, SSH2 transport, certificate-free cryptography, policy engine, virtual and unified file systems, cross-distribution builds, and ARM for industrial and OT hardware. Real systems work, no framework shuffling, and your decisions visible in the product within weeks. Small teams, and you own a component end to end.
WE ARE HIRING: SALES
Not the job you are imagining. We do very little cold-call, we do not scan companies uninvited and sell them the fix, and we do not sell fear nor uncertainty and doubt (FUD) ... all three ruled out by a charter we published before anyone asked us to. Customers reach us through consultants, resellers and integrators, so the work is enabling partners and having technically honest conversations with people who know their own environment better than you do.
If you are tired of a pipeline built on urgency you had to manufacture, this will suit you. If that is how you hit quota, it will not.
WHAT WE ARE LIKE TO WORK WITH
Small enough that everyone knows what everyone is doing. Opinionated about the engineering, relaxed about the rest. We argue, we change our minds in public, and we would rather concede a point than win one badly. Danish and British, mostly English and Spanish in writing, remote-friendly within European hours. We begin having focus on DACH (German) - as well as France and Italy.
We do not need people who already agree with us. We need people who will check.