# Loopingz

> Loopingz builds security programs, cloud platforms and AI agents: security and compliance, AWS and Kubernetes, agentic workflows with MCP, and the open source tools behind them. Founded by Anita and Rémi Cattiau.

## What we do

- Security: IT security, SOC and compliance programs, built into the software lifecycle instead of bolted on (sdlc, soc, compliance).
- Cloud: infrastructure as code, serverless and Kubernetes, on AWS and beyond (aws, iac, serverless, kubernetes).
- AI: agentic workflows wired to your systems through MCP, with every agent running in a sandbox you control (agentic, mcp, sandbox).
- Agile: project management with lean and Kanban, aware of the business issues behind every release (lean, scrum, kanban).

## Security program

- [The periodic table of security](https://www.loopingz.com/security): a security program in 18 elements across three pillars. A company should always be able to answer the 5W questions: what, who, why, where, when. Controls are automated as much as possible.
- Auditability: Asset Management (Am), Identity Management (Iam), Change Management (Cm), Threat Management (Tm), Configuration Management (Cfg).
- Prevention: Patch Management (Pm), Network Security (Ns), Endpoint Security (Es), Penetration Testing (Pt), Vulnerability Management (Vm), Application Security (As), Security Operations Center (Soc), Detection and Response (Dr).
- Preparedness: Governance (Go), Risk Management (Rm), Privacy Regulations (Pr), 3rd Party Risk Management (Trm), Compliance (Co).

## Team

- [Anita Cattiau](https://www.loopingz.com/who/acattiau): Anita Cattiau is an authentic leader with 15 years of experience building high-performing organizations in technology companies. She's on a mission to remove the pain and frustration from technology product development and delivery. Anita has a proven track record of structuring organizations that achieve their business goals by bridging the gap between strategy and execution. She is an American and French citizen and grew up in a cross-cultural family which makes her thrive in international environments. Bringing that heritage home, she created [Little Frenchies Club](https://littlefrenchiesclub.com), a French story time program where toddlers in Orange County explore French through play.
- [Rémi Cattiau](https://www.loopingz.com/who/rcattiau): Rémi Cattiau is a security leader who never stopped coding. He wrote his first programs at 13 and spent more than a decade as a developer, project engineer and SaaS product manager before turning to security. As CISO, first at Nuxeo and now at Arize AI, he built security and compliance programs from the ground up, automating controls so security keeps pace with engineering, and went through two successful exits along the way. An AWS Certified Solutions Architect Professional, he still ships open source, from the Webda serverless framework to AWS security tooling.

## Open source

- [Webda.io](https://webda.io): serverless framework inspired by Spring, with abstractions for NoSQL, queues and binary storage; deploys to AWS Lambda, Fargate, Docker or standalone. Start with `npm create @webda my-app`. Source: https://github.com/loopingz/webda.io
- [IvoryShield](https://ivoryshield.io): keeps AWS accounts secure and compliant by scanning every CloudTrail event and running periodic checks. Source: https://github.com/loopingz/ivoryshield
- [SMTP Relay](https://github.com/loopingz/smtp-relay): receives email over SMTP and forwards it to AWS SES, SQS, S3, a GCS bucket, Google Pub/Sub or other services.
- [IAM Policy Optimizer](https://github.com/loopingz/iam-policy-optimizer): optimizes AWS IAM policies to keep them under the 6,144 character limit.

## Contact

- GitHub: https://github.com/loopingz
- Twitter: https://twitter.com/loopingz