From ransomware protection to a quoting platform
Optima Windows & Doors sells and installs windows and doors. They came to us for security consulting. Ransomware was in the news, and they wanted to know how exposed the business was and what it would take to harden it. That engagement grew into a digital transformation of how the company works, with a custom quoting tool at the centre of it.
Where they started
We began with a security health check. The website was scanned for malware. Mail was landing in spam because the domain's email records were wrong, so we fixed those and locked them down. The website went behind Cloudflare with a firewall and bot protection in front of it. The office files and the job management data were backed up to cloud storage that keeps old versions and cannot be overwritten, which is the part that beats ransomware. Then we drove to the office. Bigger disks, more memory, a proper network split into segments with a guest side, intrusion detection on the firewall and the printer back on the wire. We put the servers on our patching and monitoring platform and added a daily health report that reads its own findings and flags anything urgent.
The digital transformation
Once the business was protected, the owners wanted to see every lead from first call to installed window. We sat in the office, wrote down how the work flowed and turned those notes into a documented blueprint. We compared the CRM options and built the chosen one around that flow. Leads from the website and from their ad partners now land in a database and appear on the board on their own, with the city filled in from the postal code and the sales team notified. When someone updates a customer on the board, the database follows. The job management system is synced into a database the business owns, every minute, with a daily digest email of what changed. Nothing is retyped.
The quoting tool
Quotes were done by hand. Someone sat with a measurement sheet and a price list and worked through each opening, one option at a time. It was slow and mistakes crept in. If the person who started a quote was out that day, no one else could easily pick it up. We looked at the products on the market, listed what their reviews said was missing and built Optima their own. It runs in a browser, on a desktop in the showroom and on a tablet at the customer's kitchen table. A salesperson enters a window by typing a short code, picking a template or saying it out loud. The voice assistant understands measurements spoken in fractions and several changes in one breath and checks what it heard against a private library of the company's own product rules, so it never proposes something that cannot be made. The system draws the window, checks the size against what the factory can make, prices it from rules that live on the server and never reach the browser and lays it out on a PDF with the drawings, the energy ratings and the colours inside and out. Combination windows, arches, bays and sliding patio doors are all handled, and a door quote from the door division's own software can be dropped in as a PDF and read automatically. The customer signs on screen, the salesperson countersigns and the quote locks. Versions are kept and can be reopened. Signed quotes flow straight into the project board, and installers get a work order with their own corrections built in.
What they never see
Every change to a quote is recorded. Staff sign in with their own accounts and a hardware key. Releases are tested end to end before they ship, scanned for known vulnerabilities and rolled out to a test copy before the real one. The databases are backed up every hour and the backups are verified. We watch all of it. Access is tightly controlled and the whole stack is hardened and kept patched.
Today
The sales team quotes faster and with fewer mistakes, and customers approve from a drawing instead of a spec sheet. New products, options, prices and financing programs get added from an admin page without interrupting anyone. The business that started by asking about ransomware now runs its sales process on software it owns, and when the printer stops or an email looks suspicious, the office still calls the same number.
Stack
Next.js, React, TypeScript, Node.js, PostgreSQL, Docker, Playwright, Prometheus and Grafana