Skilliary · Web app & API
“We had an idea for a specific AI security project and wanted to move as quickly as possible with a website, API, and app. East of Oakwood built it out super fast. Having something to show people made it so much easier to get the product in front of potential customers, figure out which direction to take, and get validation as fast as possible.
“With East of Oakwood, the tech is the easy part. We can focus on the hard stuff, like marketing and finding customers, while they take care of building the app.”
Skilliary is an AI security system. We built the entire web application and API, from the user experience and data architecture to security modelling and production operations.
Web application
We built the interface, navigation, and workflows so users can manage skills and review security risks in one place.
API development
A custom API connects the web application to its services and data. The application uses TypeScript and Go across its frontend and backend.
Data architecture
We designed the PostgreSQL database around the data the product needs to store and how the app reads and updates it.
Security modelling
We identified threats and trust boundaries, designed access controls, and built protections for data in the application, API, and database.
Deployment
We built the production environment and release process, including application configuration, database migrations, and checks before each release.
Monitoring
We monitor the app in production to spot failures and performance problems. What we learn helps us decide what to improve next.
Management & updates
Development continues after launch, with ongoing maintenance, bug fixes, updates, and new features as the product evolves.
Technology
| Area | Technology in use |
|---|---|
| Web app | Next.js, React, and TypeScript, with TanStack Query and Zod. |
| Public website | HTML, CSS, Tailwind CSS, and Cloudflare Workers. |
| API | Go for the application’s backend services and API. |
| Data | PostgreSQL and S3-compatible object storage. |
| Identity & messages | Clerk for authentication, with transactional email and operational notifications. |
| Hosting & deployment | Docker, Cloudflare, Terraform, and Ansible. |
| API & monitoring | OpenAPI for the API contract; OpenTelemetry for monitoring. |
| Testing | Go and Node tests, Vitest, Playwright, and Testing Library. |
Inside the application
Let’s build it.
Have a project in mind, or want help figuring out where AI fits? Tell us a little about it.