Boulder, Colorado · New Cairo · Operating since 2011

We build the systems.Then we break them.

TechTroll engineers the software institutions run on — road networks, fleets, trading floors, hospitals, campuses — and runs the offensive security practice that proves it holds. One team for both halves of the problem.

Startup, enterprise and government engagements converging on a single delivery practice.STARTUPENTERPRISEGOVERNMENTDELIVERY
Engagements arrive at three scales and route through one practice. The clearance, the architects and the on-call rotation do not change with contract size.
2011
Delivering continuously since
5 markets
United States · United Kingdom · Germany · UAE · Egypt
Cleared
Egyptian military security service, for government work

Delivered for

  • World Health Organization — EMRO
  • The American University in Cairo
  • ElWatania Roads
  • Abou Ghaly Motors
  • Softec International
  • CastingStars
  • London Cab Egypt
  • Freemium GmbH

Government clearanceCertified by the Egyptian military security service (جهاز الأمن الحربي) to work with government, military departments and related companies in Egypt.

Odoo partnerCertified Odoo Partner delivering ERP across CRM, e-commerce, accounting, inventory and operations management.

Four practices, one delivery team

We are not a marketplace of specialists booked by the hour. The architect who designs the cloud topology is in the same room as the engineer writing the device driver and the tester trying to get past both of them.

Cybersecurity

Offensive testing and the governance layer that gives its findings somewhere to land. We run the assessment and we write the remediation programme.

  • Penetration testing and red teaming
  • Phishing simulation and awareness programmes
  • Security strategy and regulatory compliance
  • Threat detection and vulnerability prioritisation
  • Identity, access and network architecture

In practiceCybral Storm — automated offensive security at scale

Systems Engineering

Software that runs infrastructure rather than describing it. Toll gates, fleets, warehouses, point of sale — systems where a failed write has a physical consequence.

  • Industrial and government control systems
  • Real-time telemetry and device integration
  • Microservice architecture on .NET and SQL Server
  • Encrypted transport over constrained networks
  • Multi-warehouse and multi-branch synchronisation

In practiceElWatania — national road and toll gate management

Cloud & Platform

Containerised workloads across Azure, Google Cloud and Linux, built so a platform can move between public and private cloud without being rewritten.

  • Cloud architecture and migration
  • Containerisation and orchestration
  • DevOps pipelines and release automation
  • Multi-cloud and private-cloud deployment
  • Performance and page-speed engineering

In practiceALTAIR — GPS fleet telemetry scaled to thousands of devices

Product Engineering

Web, desktop and native mobile, delivered by one team. Bilingual by default — Arabic, English and German platforms shipped for regulated markets.

  • Web applications and commerce platforms
  • Native iOS, Android and cross-platform mobile
  • Cross-platform desktop and Windows utilities
  • Odoo ERP — certified partner implementation
  • Localisation and regional payment integration

In practiceLondon Cab Egypt — rider, driver and dispatch in one release

Security is a programme, not a report

A penetration test that ends in a PDF has changed nothing. We work from the governance layer down, so every finding lands on a control that somebody owns and a date somebody agreed to.

Engagements are scoped in writing, run under agreed rules of engagement, and close with a remediation plan and a retest — not a severity count. Where the work touches Egyptian government or military systems, it runs under our security-service clearance.

Governance

Security strategy, policy and regulatory compliance support — the programme that turns a finding into a decision with an owner and a date.

Identity

Access architecture across cloud and on-premise estates. Who can reach what, under which conditions, and how that is proven after the fact.

Infrastructure

Network, host and cloud hardening. Encrypted transport over constrained links — AES on WiMAX for road infrastructure, TLS everywhere else.

Offensive

Penetration testing, red teaming and phishing simulation, with intelligent asset discovery and vulnerability prioritisation behind them.

Three that show the range

An offensive security platform, a national road network and a regional fleet estate. Different industries, the same requirement: it has to be correct while nobody is watching it.

Cybral Storm

CybralMiami, United States

The problem

Automate offensive security operations at scale — asset discovery and vulnerability assessment across complex proxy networks and multiple cloud environments.

What we built

A reconnaissance and offensive-security engine with intelligent asset scanning, web vulnerability detection and proxy management, containerised for deployment across public and private cloud.

  • Cloud Architecture
  • Security Platform Engineering
  • Containerisation
  • Orchestration
  • ASP.NET
  • Azure
  • Google Cloud
  • Linux
Visit Cybral

National Road Management System

ElWatania RoadsCairo, Egypt

The problem

Give the governmental body responsible for Egypt’s road network real-time oversight of toll gates across thousands of kilometres of highway.

What we built

Toll-gate monitoring with LPR and CCTV integration, transmitting over a WiMAX network under AES encryption. Traffic counts, gate finances and vehicle classification resolve to a single headquarters dashboard without human intervention.

  • Toll Gate Systems
  • WiMAX
  • Microservices
  • AES Encryption
  • .NET
  • WPF
  • SQL Server
  • IP Cameras

Government · Critical Infrastructure

ALTAIR Fleet Management

Softec InternationalDubai, United Arab Emirates

The problem

Serve the MENA fleet market with GPS tracking and analytics that hold up as the device count grows into the thousands.

What we built

GPS tracking modules integrated with a fleet management interface — real-time vehicle monitoring, route optimisation, failsafe handling, and driver-device integration across multiple hardware vendors.

  • GPS Tracking
  • System Integration
  • Route Optimisation
  • Fleet Analytics

Systems Development · Telemetry

New Cairo closes as Boulder opens. Work changes hands on a daily handover instead of waiting in a queue overnight, and the gap holds year-round — both offices move their clocks together. Five markets have shipped from those two rooms.

TechTroll delivery line, west to eastOffices in Boulder, Colorado and New Cairo, Egypt, shown above a west-to-east delivery line. Markets delivered into — the United Kingdom, Germany and the United Arab Emirates — branch below it.BOULDER, COLORADOUNITED STATES · UTC−7NEW CAIROEGYPT · UTC+2UNITED KINGDOMGLASGOW · LONDONGERMANYBERLIN · FRANKFURT · DÜSSELDORFUNITED ARAB EMIRATESDUBAIWESTEAST
Ordering along the line is geographic, west to east. Spacing is diagrammatic, not to scale.

BoulderUTC−7

1942 Broadway, Boulder, CO 80302
United States

+1.719.666.6612

New CairoUTC+2

Zone 1, New Cairo, Cairo
Egypt

+20.114.481.1055

Most engagements run distributed. Delivery has covered clients in Miami, Seattle, Portland, California, Glasgow, London, Berlin, Frankfurt, Düsseldorf, Dubai and Cairo — with the same review process, the same repositories and the same on-call rotation regardless of which office holds the account.

What we actually work in

Every entry below is in production on delivered work — not a list of things we would be willing to learn on your budget.

Technology

Technologies in production across delivered TechTroll projects, grouped by layer.
PlatformASP.NET Core.NETJavaObjective-CWPFWordPressOdoo
CloudAzureGoogle CloudLinuxContainerisationOrchestrationDevOps
DataSQL ServerMicroservicesReal-time syncMulti-warehouse
SecurityAES encryptionPenetration testingRed teamingComplianceUser verification
EdgeWiMAXIP camerasLPRGPS trackingTicket printersPOS
CommerceWooCommerceStripePaymobFawryBank instalments

Sectors

  • Government & public infrastructure
  • Health & multilateral organisations
  • Higher education
  • Transport & mobility
  • Investment & financial services
  • Manufacturing & industrial
  • Retail & commerce
  • Media & entertainment

Start with the hard part

Send the constraint, not the wishlist — the regulation you have to satisfy, the network you cannot touch, the system nobody wants to be the one to break. We will tell you within a week whether we are the right team for it, and who to talk to if we are not.