Case Studies

Client identities are anonymized unless the client has agreed to be named. The environments, findings, and results are drawn from real Hat Boy Software engagements.

Healthcare Bringing an orthopedic group's SIEM to audit-readiness 33 of 83 Sentinel detections were running against no data. We restored 23 of them. Read the case study → Healthcare A HIPAA landing zone built entirely as code Zero public data-plane exposure, delivered as a 42-module Terraform registry. Read the case study → Logistics & Payments Re-engineering a hauling marketplace's payments and platform A payments layer that "should be treated as breached" — redesigned so every critical risk is closed by architecture. Read the case study → SaaS & AI Platforms Baseline: making an AI intelligence platform's economics visible LLM spend went from ~0% recorded to fully attributed per tenant — and a lakehouse bill dropped ~75%. Read the case study → Financial Services Auditing and hardening a $45K/month SaaS estate 52 findings, 25 resolved in about two weeks — and a $470K–$540K three-year savings case. Read the case study → SaaS & AI Platforms Rescuing the intellectual property of an AI platform A stalled commercial launch turned out to be one expired credential away from live. Read the case study → Information Services Building confidential video calls into an intelligence platform From no calling at all to three-way video in production in two days, with no third party able to read the media and no change to the security policy. Read the case study →

Not sure where to start? Start with an assessment.

A senior review of your app, cloud estate, or AI platform. Scoped and quoted before work starts. It ends in a prioritized plan, so you decide what to fix and when.

Talk to an engineer