Four of the apps Zone51 built from a single request during its own security testing. Each one has people signing in and a database behind it.
Team appA CRM for an agency
Clients, phone numbers, call notes and deals, shared by three teammates who each sign in. Zone51 added the customer-data protections by itself: access checks on every record, an audit log, and ways to export or delete someone's data.
SaaSA project manager for many companies
Companies sign up, invite admins and members, and run projects, tasks, files and comments. Every table is kept separate per company. In our own attack tests, all 16 attempts to reach another company's data were refused.
AI + uploadsAn invoice reader
Upload a PDF invoice or receipt and AI pulls out the vendor, amount, due date and bank details. Uploads are checked before they're stored, and bank numbers are encrypted and shown as the last four digits.
Sensitive dataPatient intake for a clinic
Names, birth dates, insurance IDs and medical history. Zone51 marked the app high-risk, encrypted the most sensitive fields, prepared 2-step sign-in, and said plainly that health-privacy rules may apply.