&for=Client name to the URL to address the cover page
Credentials pack
Selected client work
HulkPage delivers software, platform modernisation, cloud, cybersecurity and capability programmes for organisations in the UK, Canada and Africa. The engagements in this pack were selected for their relevance; references are available on request for every one.
- CS-05Modernising a four-site heritage ecosystem from Drupal 5 to Drupal 11, behind a hardened security layer
- CS-01Operating system for SMB finance
- CS-02Clinical records for multi-site care
- CS-03Secure assessment delivery at scale
- CS-04Cloud and security modernisation
CS-05 · Public & non-profit · 2026
Modernising a four-site heritage ecosystem from Drupal 5 to Drupal 11, behind a hardened security layer
Redeveloped ismaili.net, library.ismaili.net, heritage.ismaili.net and forum.ismaili.net from legacy Drupal 5 to Drupal 11, and protected the estate with a proof-of-work anti-DDoS and anti-scraper defence — with zero-downtime cutovers.
The challenge
Four production sites serving a global community were running on Drupal 5, more than a decade past end-of-life: unpatched, hard to maintain and increasingly targeted by abusive automated traffic, including AI-training scrapers. The estate also carried legacy credentials and backend access paths that bypassed the public gateway. The sites had to be upgraded and secured without interrupting service, losing search rankings or breaking the mobile applications that depend on their APIs.
What we delivered
- Redeveloped and migrated the full ecosystem — ismaili.net, library.ismaili.net, heritage.ismaili.net and forum.ismaili.net — from Drupal 5 to the latest Drupal 11, preserving content, URLs and search equity.
- Architected and deployed a proof-of-work anti-DDoS and anti-scraper defence layer across all four production sites via a hardened Apache reverse-proxy chain.
- Tuned bot-mitigation policies to balance robust security with business continuity: search-engine crawlers and the live mobile-app API integrations were preserved while abusive automated AI-training scrapers were blocked.
- Hardened SSH and identity management across the estate — enforced Ed25519 key authentication, least-privilege sudo and revocation of legacy credentials — eliminating backend gateway-bypass exposure.
- Executed zero-downtime production cutovers using full pre-change backups, health-checked deployments and automated rollbacks.
- Delivered complete architecture and runbook documentation for the client’s ongoing operation of the platform.
Outcomes
- Platform
- Drupal 5 → Drupal 11
- Sites secured
- 4 production sites
- Downtime at cutover
- Zero
- Gateway-bypass exposure
- Eliminated
- SEO & mobile APIs
- Preserved
- Handover
- Architecture + runbooks
Technologies
Team
Lead architect, platform engineer, security engineer, migration engineer
Delivered sites
ismaili.net · library.ismaili.net · heritage.ismaili.net · forum.ismaili.net
CS-01 · Financial services · 2025
Operating system for SMB finance
Co-founded a fintech-flavoured operating platform for small businesses from investment memo to commercial product, including payments, invoicing and reporting.
The challenge
Small businesses ran finance across messaging threads, spreadsheets and verbal hand-offs, with no dependable record of money in and out.
What we delivered
- Venture framing and investment memo
- Product design and engineering of payments, invoicing and reporting modules
- Operating team embedded with the founders through first customers
Outcomes
- Memo to product
- 9 months
- Model
- Studio co-build
Technologies
Team
Product lead, two engineers, operating partner
CS-02 · Healthcare · 2025
Clinical records for multi-site care
Designed and built records, scheduling and diagnostics integration for a growing care network, replacing paper workflows across sites.
The challenge
Care providers operated with fragmented patient records, paper workflows and limited visibility across sites.
What we delivered
- Records, scheduling and diagnostics integration built around the way clinics run
- Multi-site rollout with staff onboarding
- Reporting for operators and clinical leads
Outcomes
- Scope
- Multi-site rollout
- Model
- Co-built with operators
Technologies
Team
Product lead, engineers, clinical operations partner
CS-03 · Education & assessment · 2024
Secure assessment delivery at scale
Built assessment authoring, identity verification and proctoring for an institution running high-stakes exams, alongside a Hedgre capability programme for its staff.
The challenge
High-stakes examinations needed to run remotely and in centres with verified identity and evidence-backed integrity decisions.
What we delivered
- Assessment authoring, identity verification and proctoring platform
- Remote and centre-based delivery
- Hedgre capability programme for institutional staff
Outcomes
- Delivery
- Remote & centre-based
- Capability
- Staff programme delivered
Technologies
Team
Platform team, security engineer, Hedgre programme lead
CS-04 · Enterprise · 2024
Cloud and security modernisation
Cloud architecture, DevOps and secure-by-design delivery for an organisation replacing fragmented internal systems with an integrated platform.
The challenge
Fragmented internal systems with inconsistent security posture and no shared deployment practice.
What we delivered
- Target cloud architecture and migration
- CI/CD and DevOps practice
- Secure-by-design delivery standards and review
Outcomes
- Scope
- Architecture to operation
- Model
- Technology services
Technologies
Team
Cloud architect, DevOps engineers, security lead