Bonakodo
Contact us

Security consulting

Security reviews.
Practical fixes.

Bonakodo is a security consultancy focused on product security reviews, cryptography, and defense in depth. We examine designs, read code, and work with your engineers to find weaknesses and fix their causes.

Our services - Security, from design to code.

A useful review explains how a weakness arises, what it puts at risk, and how to fix it. We give your team detailed findings, clear priorities, and practical support with the changes.

  • Product security reviews. We model threats, read source code, and trace how your product handles identity, sensitive data, and untrusted input. We test security assumptions and explain our findings with evidence your team can reproduce.
  • Cryptography. We review protocols, key management, encryption, and signature handling. We check the design assumptions as well as the code, including how it uses randomness, stores secrets, and handles errors.
  • Defense in depth. We assess authentication, authorization, isolation, and data flows together. We look for independent checks that limit what an attacker can reach when one control fails.
  • Fixes and verification. We help turn findings into focused code changes, then review and test those changes. We check the reported issue and related failure cases so your team can see what each fix addresses.

Products we build and maintain - Security engineering in practice.

We also build and maintain our own products. Working with sensitive business and health records informs how we review access controls, data flows, and the changes engineering teams need to make.

Kvitanco

Business documents & accounting

Protecting access to business records.

Kvitanco reads receipts and invoices, extracts their details, and connects them with accounting tools. Building and maintaining it means working through authentication, document access, private file storage, and the integrity of business records.

Visit Kvitanco
Shyori

Personal health records

Keeping patients in control of their records.

Shyori brings medical documents from different clinics, countries, and languages into a record patients control. Its access checks, passkey sign-in, and controlled sharing put security decisions into daily product work.

Visit Shyori

Why Bonakodo

Bona kodo means “good code” in Esperanto.

For us, good code includes security: clear trust boundaries, sound use of cryptography, and defenses that work together. We read the code, question the design, and work through the details of a fix with your engineers.

Explore our services

Let’s discuss your product’s security.

Tell us what you are building, what you want us to review, and which risks concern you. We can help define the scope, assess the product, and work with your team on the fixes.

Discuss a security review

Tell us about your product

Address

Shibuya Dogenzaka Tokyu Building, 2F-C
1-10-8 Dogenzaka, Shibuya-ku
Tokyo 150-0043, Japan