Apriorit Inc.

Situation

Our client is Plenty, a decentralized yield farm for creating liquidity and trading FA 1.2 and FA 2 tokens on the Tezos blockchain. They wanted to receive an unbiased evaluation of their smart contract security and discover possible vulnerabilities. Plenty approached the Apriorit team with the request to perform a security audit for their DeFi and swap smart contracts.

Solution

To help our client ensure the security of their product, we formed a team of blockchain developers with experience auditing smart contracts. For both DeFi and swap smart contracts, we outlined three main activities:

1. Checking smart contract security

2. Reviewing smart contract code

3. Analyzing test coverage

To check the security of smart contracts, we used the following methods:

• Behavioral analysis of their source code

• Checks against our database of vulnerabilities and manual attacks

• Symbolic analysis of potentially vulnerable areas

• Manual code review and evaluation of code quality

• Unit test coverage analysis

• Gas usage analysis

After performing a smart contracts security audit, we discovered 15 vulnerabilities and offered our recommendations on how to address each of them. 

Impact

Thanks to Apriorit’s quick feedback, our client was able to quickly and efficiently fix the most critical issues and significantly increase their smart contract test coverage. Also, they received and applied helpful and relevant recommendations on code quality and security practices.

SITUATION

Our client is a company that delivers an automatic drone battery charging and data management system for aerial photography. They were looking for an experienced engineering team to develop software for it. 

The key requirements were:

• Display and control the battery charging process from mobile apps

• Upload data from a drone’s SD card to AWS instances

• Allow for interaction with the charging kit via Wi-Fi, BLE, and LTE

SOLUTION

To deliver this project, we planned to:

1. Create Linux software and firmware for Pine ROCK64

2. Develop cloud-based infrastructure

3. Deliver Android and iOS apps that allow drone pilots to control the system

After discussing the project with the client, we planned four key stages:

1. Project discovery. Before the development, we reverse engineered Pine ROCK64 to study how it manages batteries and communicates with mobile apps and other hardware.

2. Proof of concept. We implemented basic functionalities like drone battery management, communication with AWS, and data management. We tested these features on a Linux virtual machine (VM) to avoid waiting for a real device. Also, we delivered the iOS application with basic unit management features.

3. Demo alpha version. We added possibilities for OTA updates and automated battery management. We also ensured that the iOS app can communicate with the device via Bluetooth, Wi-Fi, and LTE.

4. Minimum viable product (MVP). To deliver the MVP, we needed to port our software from the VM to the physical target device. At this stage, we discovered a lot of issues with the hardware and worked with the manufacturer, client’s engineers, and third-party experts to solve them.

IMPACT

Our client got a stable MVP that includes software and firmware for Pine ROCK64, iOS and Android applications, and AWS-based cloud infrastructure. The client can try out with drone pilots and gather feedback on how to improve the device. 

SITUATION

Our client is Cryptonomic, a US-based company providing tools and services for blockchain-based financial products. They needed to audit the security of their recently updated Tezos wallet and a decentralized application (dApp) that consisted of smart contracts, a bot application, and a frontend library.

SOLUTION

Apriorit formed a team of experienced blockchain developers who thoroughly audited the client’s Tezos wallet and dApp. For both the wallet and dApp, we outlined four main auditing activities:

1. Automated static analysis

2. Manual code review

3. Unit test coverage analysis

4. Testing for unexpected behavior

After the audit, we prepared a detailed report covering all discovered vulnerabilities and easy-to-implement recommendations on how to fix them. Once the client eliminated all critical vulnerabilities, we once more audited the reworked parts of the code and prepared a final report.

IMPACT

Thanks to timely updates from the Apriorit team, our client was able to eliminate most vulnerabilities shortly after they were discovered. Fixing a logical error discovered by Apriorit specialists in the bot application can also help our client reduce the cost of smart contract operations.

Finally, successfully passing this audit will help our client build a positive brand image and gain the well-deserved trust of end customers.

More details: https://www.apriorit.com/business-case-studies-list/738-blockchain-tezos-wallet-and-dapp-audit  

SITUATION

Our customer is a US-based company that develops solutions for storing, sharing, and transferring data for content-critical businesses. They planned on working on a new cloud-based platform and needed an experienced team of backend software developers to:

• Reduce the number of escalated tickets from end users

• Develop custom features requested by end users

• Improve software supportability

SOLUTION

Our team worked hand in hand with the customer’s development and support specialists distributed across several countries. We performed three types of activities in this project:

1. Modernizing legacy system. We refactored the legacy code, revamped the existing documentation, and added security patches to make the software work smoothly.

2. Resolving escalated tickets. We fulfilled end users requests to fix existing functionality and develop new functionalities like SNMP integration and deselected folder management.

3. Improving the platform update process. We ported the software to the new OS, implemented an automated testing process, and added several update channels. It helped us to simplify software maintenance and roll out new patches in a fast manner.

IMPACT

We helped the customer keep end users satisfied with the legacy software by fixing issues reported by end users and developing custom features. As a result, we reduced the number of escalated tickets and reached the fewest user complaints ever for this project.

Our support for this software allowed the customer to focus on building a new cloud-based platform, since their developers didn’t have to spend time on bug fixes and legacy software. The customer rolled out a new product and ensured smooth migration to it. Since they were satisfied with our services, we continued our partnership after the release.

More details: https://www.apriorit.com/business-case-studies-list/737-supporting-and-improving-legacy-data-management

SITUATION

Our customer is a European wine company that wanted to launch a new winery startup powered by blockchain technology. They planned to use blockchain to prove the origin of each wine bottle by tracking its path through each stage of production and delivery. Also, our customer planned to raise ICO funding for this technology.

They were looking for a company with vast experience in blockchain development and penetration testing to build this unique network and ensure its security. When they contacted us, we helped them to detail their idea, create an implementation plan, and developed custom smart contracts.

SOLUTION

Before the development of smart contracts, we created a scheme for the accrual of dividends. Originally, the customer wanted to secure each token with real crates of wine, but such a scheme had limitations with exchange operation and production logistics. Instead, we suggested creating a custom cryptocurrency — a wine coin.

We selected the Ethereum platform for this project and started building ICO tokens and coins. At this stage, we implemented and tested two smart contracts, one for a token targeting private ICO investors and another for public wine coins.

At the second stage, we implemented a custom smart contract for bottle authenticity identification. We also developed a desktop application for the vendor to enter the transaction information into the system, and Android and iOS apps for buyers to let customers visualize information about a bottle right in the wine shop. 

IMPACT

With our smart contract implementation, the customer successfully raised ICO funding and started building a new winery for their startup.

Situation

Our client is a leading software manufacturer and service provider in the area of business process digitization. They worked on a blockchain-based solution that helps users securely store all their data and documents and directly contact all their business partners openly and transparently. To raise funds for this project, our client designed smart contracts on the Ethereum network to mint and sell a new cryptocurrency.

The client approached us with the request to perform a security audit of the smart contracts and provide recommendations on code optimization and improvements. Their goal was to avoid any possible security issues in their source code.

Solution

To help our client evaluate the security of the smart contracts, we gathered a team of qualified experts and chose the most suitable tests, analyses, and tools.

The agreed security analysis strategy included:

• Behavioral consistency analysis

• Test coverage analyses

• Penetration testing

• Static analysis

• Code review

• Analysis of GAS usage and evaluation of code quality

• Analysis of smart contracts in regards to the host network

Impact

The Apriorit team conducted the full security audit of the client’s smart contracts. We didn’t detect any critical issues, but recommended our client make some optimizations and improvements to the contract code. The client’s team analyzed and implemented all of our recommendations and are now fully ready to deploy their smart contracts to the Ethereum network.

SITUATION

Our client is a manufacturer of virtual reality (VR) equipment used for industrial purposes. Their devices are used around the world to perform scientific experiments, train doctors, aircraft pilots, etc. They needed a skilled development team that could create drivers for their new device. 

The client had high requirements for the drivers, such as low latency and high bandwidth for data transfer between the device and the application, data transmission speed up to 10 Gbps, and stable performance under heavy loads.

SOLUTION

Apriorit formed a team of business analyst (BA), project manager (PM), driver developers, and QA specialists. BA and PM assured that the driver development team works in sync with the client’s hardware development team. The developers delivered the following:

• A high-speed data transmission protocol for a PCI Express device

• A Windows device driver for a PCI Express device

• An API for the Windows device driver

To avoid waiting for the construction of the physical VR headset, the Apriorit team used QEMU to create a virtual copy of it and develop and test the first iteration of the drivers. After several iterations, the Apriorit team adjusted drivers to the device, improved their performance, and tested them according to Windows Hardware Quality Labs requirements.

IMPACT

The client got the drivers that allow their device to operate with 3–10 ms of latency and ~11 Gbps data transmission speed. The drivers also successfully passed WHQL certification.

Thanks to the swift and skilled driver development, the client released their product in time with their estimations and received positive feedback on it from their customers.

More details: https://www.apriorit.com/business-case-studies-list/726-driver-development-for-vr-headset

Situation

Our client is a US-based healthcare institution that specializes in infertility testing and treatment. Their therapists regularly face the challenge of detecting follicles by constantly pausing ultrasound videos and manually measuring detected follicles.

Since these processes are extremely time-consuming, our client asked us to develop a solution that can automate follicle detection, segmentation, and measurements using artificial intelligence (AI).

Solution

To help our client build a robust healthcare solution, Apriorit gathered a team of qualified AI developers and chose the most suitable programming languages and software libraries.

The key processes of system development included:

• Researching and developing the concept of a future AI solution

• Creating a high-quality dataset

• Defining the way a solution would measure objects in ultrasound images

• Creating the part of the solution to detect follicles

• Implementing an image filtering algorithm to measure detected follicles

• Implementing additional modules to detect follicles in separate images, folders with images, and videos in different formats

Impact

The Apriorit team developed an efficient and complex AI-based system that tracks ovarian follicles across video frames, detects them in ultrasound images, and measures them. The delivered system shows astonishing accuracy: 90% precision and a 97% recall rate. Thus, it helps our client accelerate their doctors’ routine and provide high-quality services to their patients.

More details: https://www.apriorit.com/business-case-studies-list/725-ai-based-healthcare-solution-development

SITUATION

Our client is a US-based provider of data backup and recovery solutions for mobile devices, tablets, and computers. They needed to upgrade their current product on Windows and develop its versions for macOS, iOS, and Android.

SOLUTION

The Apriorit team consisted of developers, researchers, QA specialists, a development manager, and a project manager. We created macOS, iOS, and Android versions of our clients’ cross-platform USB solution for data backup and enhanced the existing Windows version in estimated deadlines. The team released each solution once it was ready to speed up the time to market and help our client receive revenue and gather valuable feedback at early project stages.

IMPACT

As a result, we’ve released the data backup product for four different platforms. The Apriorit team continues working with the client on both improving the existing solution and creating a new one. End users have well accepted all versions of the data backup and recovery software. Since we released them, the total number of users has doubled and keeps growing.

More details: https://www.apriorit.com/business-case-studies-list/691-cross-platform-data-backup-solution-development

SITUATION

Our client is a cybersecurity services provider offering SaaS solutions for detecting and protecting against known vulnerabilities and zero-day exploits. They wanted to create an Internet Content Adaptation Protocol (ICAP) server for sanitizing all files sent or downloaded with their proxy servers.

SOLUTION

Apriorit team included web developers, a quality assurance specialist, and a project manager. We developed a custom ICAP server capable of working with the HTTP and HTTPS protocols as well as POST and PUT requests.

The server can analyze uploaded files, as well as edit and replace them if a threat was detected. Written in .Net Core, this ICAP server is a unique and fully cross-platform solution that supports Windows, Linux, and macOS. 

IMPACT

The developed ICAP server was successfully integrated into our client’s solution, providing them with all the functionality needed for further traffic filtering and analysis. Enabling this method of service delivery allowed our client to attract new customers and increase revenue.

Satisfied with the quality of our cooperation, our client also introduced Apriorit to one of their affiliates — a company that selects and adjusts software solutions to the needs of corporate customers. Now, Apriorit is assisting this second company in further customization of the ICAP server solution.

More details: https://www.apriorit.com/business-case-studies-list/698-custom-icap-server-development

SITUATION

Our client is a US-based medical transportation company. They need to enhance security, improve user experience (UX), and add new features to the existing internal customer relationship management (CRM) system.

SOLUTION

The scope of the project was dynamically changing as the trust between Apriorit and the client grew. We started with a small team of a couple full-stack developers and one business analyst (BA), but over time added more devs, QAs, business analysts, test manager and manager, and a DevOps engineer. During the project, we:

• Implemented access control
• Redesigned the existing user interface (UI) and helped the client to migrate to the new UI
• Improved call handling and user notification systems
• Refactored legacy code
• Integrated the solution with a third-party CRM

IMPACT

Thanks to improvements made by the Apriorit team, our client achieved such results:

• Moved their business platform from a desktop application to a web portal 
• Improved data security and ensured compliance with industry requirements
• Reduced call handling times and started processing customer requests faster  
• Expanded their business to several new areas thanks to flexible and modern IT solutions

More details: https://www.apriorit.com/business-case-studies-list/693-developing-and-supporting-crm

SITUATION

Our client is a US-based company that provides cybersecurity solutions for IT companies. They already had a Linux driver for one of their products for analyzing traffic and detecting cybersecurity threats in WiFi networks. They wanted to develop a similar driver for Windows.

SOLUTION

Apriorit dedicated team consisted of professional developers, quality assurance specialists, a business analyst, and a project manager. We managed to successfully port the functionality of the Linux driver to a custom Windows driver. To get the most out of the existing driver, our team implemented part of the Linux kernel as a user mode library for Windows. Also, we created a high-level API in C# to allow our client’s solution to communicate with the Windows driver.

IMPACT

Thanks to our development strategy choice, we delivered a ready solution in four months instead of the eight months that it usually takes to develop a new Windows driver from scratch. The new driver has significantly enhanced the ability of our client’s product to perform WiFi site surveys, check network security and efficiency, and analyze and redesign WiFi infrastructures.

More details: https://www.apriorit.com/business-case-studies-list/695-usb-wifi-driver-development

SITUATION

Our client is a software provider that has been offering internet protection and parental control solutions for desktop browsers. They wanted to build an Android version of one of their existing web products.

SOLUTION

Apriorit dedicated team consisted of experienced mobile developers, quality assurance specialists, and a project manager. Upon the request of the client, we prepared an SDK with the functional part of the parental control application and a mobile device management (MDM) solution for controlling third-party applications installed on managed devices.

Key project tasks included:

• Developing a VPN service for traffic interception and analysis
• Protecting the VPN service from any user interventions
• Building a custom Market service to replace the Google Play Store on the monitored devices
• Recompiling third-party apps with our client’s certificate to add them to the custom Market service

IMPACT

Apriorit developers created an internet protection application for Android that our client was completely satisfied with. The final version of the parental control application will be released to Google Play. The Apriorit team continues working on the improvements to the developed MDM solution, adding new applications to the custom Market service.

More details: https://www.apriorit.com/business-case-studies-list/683-parental-control-app-development 

SITUATION

PDR Group is a US-based company with headquarters in Utah that delivers a SaaS platform for HR administrative task management.

A company needed to develop a completely new solution version with new features, subscription types, and other improvements.

SOLUTION

Our team consisted of 3 developers, 1 QA specialist, and 1 business analyst and was managed by a part-time project manager.

Effective communication with project owner allowed the team to fully understand the task at hand.

IMPACT

Outsourcing SaaS platform development allowed PDR Group to save costs and development time in the long run. Apriorit dedicated development team was able to deliver a complete product on time and within budget, leaving the client satisfied with our work.

SITUATION

Our client is a financial services provider launching an international remittance payments project based on blockchain. They weren’t satisfied with the existing Ethereum-based solution and needed a faster, more flexible, and secure network. 

SOLUTION

Apriorit team included PM, blockchain developers, business analysts, QA specialists, and a DevOps engineer. We designed a smart economy and PoC to define application workflow and discuss it with the client. After that, we developed: 

• MVP
• new Ontology-based network
• web wallet with extensive modifications
• DApp
• Android application

We also improved smart-contract security and stability.

IMPACT

Our client acquired a complex remittance blockchain platform that meets their needs in terms of flexibility, functionality, operating speed, and transaction cost. Constant monitoring and support guaranteed that it’s robust and secure. Today, our solutions have:

• 11 000 active users
• 200 transactions per day
• capacity for 3 000 transactions per second
• transaction cost less than $0,0001

SITUATION

A US-based business management solution vendor is delivering a specialized CRM-like SaaS solution for telecommunication providers. The company decided to make engineering processes more transparent and standardized.

SOLUTION

Apriorit has managed to provide a dedicated SaaS application development team consisting of 7 developers, 2 QA specialists, 1 business analyst, and 1 project manager. The team started to work 3 weeks after the signing of the initial agreement.

IMPACT

As a result, the Client continues to outsource SaaS application development to Apriorit. Now our .NET dedicated team covers approximately 70% of all development efforts by the Client, including 100% of new feature development.

Apriorit business analyst and project manager helped to significantly reduce the load on the client management and make development more effective.

SITUATION

Electronics and Telecommunications Research Institute (ETRI) is Korea’s largest government-funded research center, needed to implement the ability to switch between 2 instances of Android OS running independently on the same device. 

SOLUTION

In the work on project ViMo, Apriorit needed to apply a number of skills:

• Linux kernel development
• Vast knowledge of ACPI and ARM architecture
• Development in Assembler
• Thorough understanding of Android OS internals
• Reverse Engineering (mainly for hardware drivers)

IMPACT

Quick project development allowed ETRI to be the first to market and enjoy the benefits of this exclusive product. ETRI is currently in contact with top manufacturers such as Samsung, LG, etc. to commercialize this groundbreaking technology.

SITUATION

VisionWorks Solutions had a backup solution that had got a good market response. The client wanted to Integrate new features like database and locked file processing, VSS, various data type restoration into a successful backup system applying plugin architecture.

SOLUTION

One of the important product improvements was VSS technology integration.

Each developed plugin had its specific technical aspects and set some interesting tasks for the development team. For example, there were developed backup and restore tools of 2 levels for MS Exchange database:

• Database level (using MS Exchange tools);
• Brick level (by separate emails).

IMPACT

Initially chosen plugin strategy allowed the team to build work around small and big releases, thus making the process more predictable.