Loopingz: security, cloud and AI engineering
“Some people want it to happen, some wish it would happen, and others make it happen.” — Michael Jordan
What we do
- Security: IT security, SOC and compliance programs, built into the software lifecycle instead of bolted on.
- Cloud: infrastructure as code, serverless and Kubernetes, on AWS and beyond.
- AI: agentic workflows wired to your systems through MCP, with every agent running in a sandbox you control.
- Agile: project management with lean and Kanban, aware of the business issues behind every release.
Security program
Our periodic table of security organizes a security program in 18 elements across three
pillars: auditability, prevention and preparedness.
Who are we?
Anita Cattiau is an authentic leader with 15 years of experience building high-performing organizations in technology companies. She's on a mission to remove the pain and frustration from technology product development and delivery. Anita has a proven track record of structuring organizations that achieve their business goals by bridging the gap between strategy and execution. She is an American and French citizen and grew up in a cross-cultural family which makes her thrive in international environments. Bringing that heritage home, she created Little Frenchies Club, a French story time program where toddlers in Orange County explore French through play.
Rémi Cattiau is a security leader who never stopped coding. He wrote his first programs at 13 and spent more than a decade as a developer, project engineer and SaaS product manager before turning to security. As CISO, first at Nuxeo and now at Arize AI, he built security and compliance programs from the ground up, automating controls so security keeps pace with engineering, and went through two successful exits along the way. An AWS Certified Solutions Architect Professional, he still ships open source, from the Webda serverless framework to AWS security tooling.
Open source
- Webda.io: serverless framework inspired by Spring (
npm create @webda my-app).
- IvoryShield: keeps AWS accounts secure and compliant by scanning CloudTrail events.
- SMTP Relay: receive email over SMTP and forward it to SES, SQS, S3, GCS or Pub/Sub.
- IAM Policy Optimizer: keeps AWS IAM policies under the 6,144 character limit.