Setting goals
We start from where money, time or visibility is leaking today — not from a feature list. You get a written scope with a number against it before anything is built.
4
Service lines — software, hosting, security, graduates
0
Client funds we ever hold — we reconcile, a licensed rail settles
100%
Of code reviewed before it reaches a client system
1
Product of our own, currently in development
How we work
Goals, then code, then somebody who owns it.
Building & testing
Working software early and often, in reviewed increments. Every change is reviewed before it merges, and every release is tested against a staging environment that mirrors production.
Deployment & care
We deploy it, monitor it, back it up and report on it monthly. Launch is the middle of the job. Most systems fail eighteen months later, when nobody owns the server any more.
Services
What we are hired to do.
Custom software development
Operational systems built around a problem that is costing you money, time or visibility — not a template bent to fit.
- Multi-tenant web applications with real role-based access
- Mobile apps for low-end Android and intermittent network
- Mobile-money aware: payment status, reconciliation, arrears
- Reporting that answers what management actually asks
Scoped and quoted per project
Hosting & managed care
Somebody has to own the server on Monday morning. Deployment, monitoring, backups, patching, and a report each month that says what happened.
- Deployment and environments, staging separate from production
- Uptime, domain-expiry and SSL-certificate monitoring
- Scheduled backups, with restores actually tested
- A written monthly report: uptime, backups, what changed
Monthly retainer
Security assessment
A passive review of what your organisation exposes to the public internet, delivered as evidence with risk ratings — not opinion.
- TLS/SSL configuration, protocol support, certificate review
- HTTP security headers and HTTPS enforcement
- Email security DNS records — SPF, DKIM, DMARC
- Public exposure review and a prioritised remediation plan
Fixed scope, fixed price
Graduate engineering programme
Fresh graduates working on real client systems that are going to production — under supervision, with every change reviewed before it ships.
- Structured curriculum across Spring Boot, Next.js and Flutter
- Production-bound tickets, not toy exercises
- Multi-tenant architecture, mobile money and data-protection practice
- Weekly demos, monthly review, and an honest reference at the end
By cohort · applications open
Selected work
Work we have delivered.
Better to show the work than describe it. This is the most recent engagement we are free to publish.
Security assessment
External security assessment for a Rwandan financial services company
A follow-up to an initial cybersecurity review that had flagged four areas as needing technical verification: email security, security headers, vulnerability management and banking cybersecurity controls.
We ran a passive, non-intrusive external assessment — SSL/TLS review, DNS email security checks, HTTP security header analysis, passive web application scanning, network reconnaissance and certificate transparency review — and delivered a written report with evidence, risk ratings, remediation steps and a prioritised plan.
- ScopePassive external assessment, agreed in writing
- FindingsNo critical or high-risk issues; configuration hardening gaps confirmed
- DeliveredEvidence-based report, risk ratings, prioritised remediation plan
- BoundaryNo exploitation, no authenticated testing, no internal access
The client is not named here. Engagement details are shared with prospective clients on request, with permission.
The team
You deal with the person who builds it.
No account managers, no handoff to a junior after the contract is signed, nothing outsourced. The engineer who designs your system is the one who writes it, deploys it and picks up the phone about it.
Moses Sebagabo
Founder & Engineering Lead
Architecture, backend, web, mobile, deployment and security. Builds payments infrastructure professionally in Kigali — which is where the reconciliation and mobile-money work in our systems comes from.
Every line that reaches a client system passes through one reviewer, and every system ships with a runbook that lets somebody else run it. Accountability you can name is worth more than a support queue you cannot.
- Builds
- Spring Boot · Next.js · Flutter · PostgreSQL
- Background
- Payments infrastructure, Kigali
- Certified
- Data Protection Officer
- Based in
- Kigali, Rwanda
Graduate programme
The gap between a computer science degree and a production system.
Rwanda graduates capable engineers every year who have never seen a system with real users, real money and real consequences in it. We close that gap by putting them on ours — supervised, reviewed, and paid attention to.
For graduates
- Real, production-bound feature work reviewed before it ships
- The full stack we run in production: Spring Boot, Next.js, Flutter
- Multi-tenant SaaS architecture, mobile-money reconciliation, data protection
- A clear picture of how an early-stage company actually operates
- An honest reference based on work you actually did
For clients
- More hands on your project without more risk
- Every change reviewed by the engineering lead before merge — no exceptions
- Supervised work is scoped to what a reviewer can genuinely check
- No unreviewed change ever reaches a production system
This is a real part of how we work, not corporate social responsibility. A supervised graduate multiplies what we can build — but only when the work is consistent, reviewed and secure, which is why the programme is structured rather than ad hoc.
Recognition
Standing and recommendations.
Standing
Registered company
Data Protection Officer certified
Licensed payment-rail partnership
Security assessment practice
What clients say
“A client quote goes here — one or two sentences about what changed for them after the work shipped.”
“The most useful quotes name a number: days saved, errors removed, a report that used to take a week.”
“Keep it short. A short, specific quote is worth more than a long, generous one.”
“Code shipping is not progress. Paying customers are progress.”
360devz operating principle
Our own product
EduCloud
The same discipline pointed at our own problem. EduCloud lets a Rwandan teacher record a whole day of attendance, marks and notes by speaking for about twenty seconds in Kinyarwanda — so every parent gets a real daily account of their child's education, instead of a report card three months late.
Next step
Submit a project and get a quote.
Tell us what currently goes wrong, how often, and what it costs when it does. If software is not the cheapest fix, we will say so — that conversation is free and usually short.