Skip to content
SpySec

Meeting privacy research · Ankara, Türkiye

Secret meetings. Unrecordable rooms.

The idea we are researching: environments where a confidential conversation cannot be quietly recorded. The hardware is a concept, not a product. We also build software with security designed in from the first line.

Claude and other tools help us work carefully. A person reviews every change that matters.

How a change ships

Today
  1. A change is proposed

    Small, reviewable and described.

  2. Claude reviews it

    Injection, broken access control, leaked secrets.

  3. Tests cover abuse cases

    Not just the happy path.

  4. A person approves

    Nothing is merged or deployed without it.

Our working process today. Automating the review step in pull requests is next.

Research

Research areas

Our first phase is R&D. The lead idea is secret meetings in rooms that resist quiet recording. Nothing below is a shipping product yet. Each area is labelled with its current stage.

Concept visualisation of a compact meeting-privacy device and its components
Concept render · AI-generated
Concept stage

Unrecordable rooms

A portable device concept for secret, in-person meetings. It is meant to help protect the room from covert audio recording, so what is said there stays in the room.

Early concept visualisation (AI-generated illustration, not a photo of a finished product).

In development

Secure-by-design software

Web applications and services where authentication, authorization, input handling and secrets management are designed in from day one, not bolted on later.

In development

Secure development workflow

A repeatable process for small teams: AI-assisted code review, threat modeling and security tests, combined with conventional static analysis and hardened deployment baselines.

AI, with care

How we use Claude and other tools

We are building our own security technology and want it secure from the start. Claude is one of several AI and engineering tools we use along the way, and we plan to rely on it more as our tooling matures. AI helps us do the work. It is not the product.

Every suggestion is reviewed by a person before it is merged or deployed.

Today

  • Reviewing our own code changes for common security issues such as injection, broken access control and leaked secrets.
  • Drafting threat-modeling notes from architecture descriptions, which we then check and refine by hand.
  • Helping write unit and integration tests, including abuse cases, not just the happy path.
  • Every suggestion is reviewed by a person before it is merged or deployed.

Next

  • An internal review agent that flags likely vulnerabilities in pull requests before merge.
  • Agent workflows run in sandboxes with least-privilege access to code and servers.
  • Simple evaluations to measure how often findings are real versus false positives.
  • Applying the same secure process to firmware and companion software for our hardware research.

How we test

We try to break our own products before anyone else does. That means adversarial and abuse-case testing, fuzzing, stress and load tests, failure injection, red-team style reviews and long-running endurance tests. Claude and other tools help us generate test cases, review code and widen coverage. A person reviews and signs off every change.

Where we are

Status

We prefer to be precise about where we are.

Stage
Early-stage, research & development
Funding
Bootstrapped
Based in
Ankara, Türkiye
Company
Incorporation in Türkiye in progress
Products
In development; not yet publicly available

Team

Founder-led

SpySec is led by its founder, with a background in software development and security.

Emre Erdoğan

Founder & CEO

Contact

A meeting that has to stay in the room? Let’s talk.

We are happy to hear from people working on secure software and privacy, potential partners and early users.

contact@spysec.eu