Fractional CTO · Security & accessibility
Technical leadership for secure, accessible websites.
Security, compliance and accessibility are design inputs, not afterthoughts. I build them in from the start, and review what you already have as part of your retainer.
What it is
I review your existing stack against OWASP standards, performance budgets and uptime expectations, and I’ve built production systems for regulated environments: food safety (R638), property management and healthcare.
As your Fractional CTO I build security and accessibility into what we make and check them in the regular architecture reviews. If you only want a standalone security review or accessibility audit, without a retainer, those are separate services (see below).
What I lead or deliver
Security and performance reviews
A systematic review of your stack against OWASP standards, performance budgets and uptime expectations, as part of the retainer.
Compliance evidence
Systems that collect evidence continuously (readings, sign-offs, corrective actions) so the record is complete when the auditor arrives.
Accessibility built in
I build to WCAG 2.2 AA and check it as we go. For a standalone audit of an existing site, see Accessibility+.
Fixes and monitoring
Inside the retainer I fix what turns up in the systems I look after and keep an eye on them. For standalone reviews, fixes and monitoring of other sites, see Security+ and Accessibility+.
Want a standalone review or audit?
Security+ covers web security reviews and monitoring. Accessibility+ covers accessibility audits and fixes.
A short example
I fixed my own site first
The rebuilt erzo.co.za has no automated accessibility violations and ships with security headers set and tested.
See the details on Accessibility+Tell me what you’re working on.
Every conversation starts with understanding your business. No pitch, no pressure.
1 hour · R650, credited if you go ahead within 60 days · remote or in person, same price
or email henry@erzo.co.za
South African time (SAST, UTC+2). I reply to every message myself, within 24 hours.