Software
Web and software development
Websites, web apps, customer portals and e-commerce, from scoping to production.
- Next.js, React, TypeScript
- Custom WordPress and WooCommerce
- APIs, integrations, automation
Web, mobile and Odoo development agency in Tunisia We build your digital products. And we know how to secure them.
Websites, mobile apps, UI/UX design, Odoo ERP and WooCommerce stores: from Tunis, Shararah Consulting designs, builds and ships your tools, with security built in from the first line of code.
First conversation free of commitment, reply within 2 business days.
What we deliver
- Websites and web apps
- Client portals
- Mobile apps
- UI/UX design
- Brand identity
- Odoo ERP
- WooCommerce stores
- APIs and integrations
- OWASP audits
- Penetration tests
- Server hardening
You don't have to coordinate a developer, an ERP integrator and a security auditor. We carry the product from design to production, and beyond.
- Mobile
- Design
UI/UX design and branding
Research, interfaces, prototypes, design systems and brand identity, ready to be built.
- ERP
Odoo ERP
Audits, implementation, migration and Odoo modules that stay maintainable through every upgrade.
- Audit and takeover of an existing Odoo
- Custom modules for Odoo 17, 18 and 19
- E-commerce, banking and API integrations
- Security
Cybersecurity
Audits, penetration tests and hardening for your applications, your ERP and your servers.
- OWASP application audit
- Web and API penetration testing
- Odoo, WordPress and Linux hardening
Technologies we ship every day
- Next.js
- React
- TypeScript
- React Native
- Node.js
- Figma
- Odoo 17 · 18 · 19
- Python
- PostgreSQL
- WordPress
- WooCommerce
- PHP
- Docker
- Linux
- Cloudflare
- OWASP ASVS
Build and secure
Security is not a phase. It ships with every deliverable.
Everything we build comes with the security control that matches it. You receive both, documented.
What we build : Forms, accounts and customer areas
How we secure it : Server-side validation, protection against injection and brute force
What we build : APIs and integrations between your tools
How we secure it : Token authentication, least privilege, request logging
What we build : Odoo modules and access rights
How we secure it : Record rules reviewed, no unnecessary sudo access
What we build : Stores and checkout flows
How we secure it : Audited dependencies, security headers, payment handled by the provider
What we build : Servers and production releases
How we secure it : Hardened system, tested backups, scheduled updates
Cybersecurity
Audits, penetration tests and hardening for your applications, your ERP and your servers.
Explore the serviceWork
Products delivered and running in production.
A selection of recent projects. Some clients prefer to stay discreet: we then describe the project without naming them.
A similar project?
Web applicationWebsite and interface for a marketplace connecting buyers, sellers and shippers: interactive 3D globe, live trade activity feed, deal rooms and account verification.
Stack
- React
- TypeScript
- Three.js
- Tailwind
- i18next
Odoo ERPBusiness account sign-up with approval, per-customer prices and terms, and ordering from the Odoo portal, without modifying the standard core.
Stack
- Odoo 19
- Python
- OWL
- PostgreSQL
E-commerceA WooCommerce extension replacing the standard flow: product listings, licence pricing tables, personalisation, accessories and order summary, translated into French.
Stack
- WordPress
- WooCommerce
- PHP
- JavaScript
WebsiteShararah Odoo
Landing page in French, English and Arabic (true right-to-left layout), per-language SEO and a quote form with transactional emails.
Stack
- Next.js
- TypeScript
- Resend
- JSON-LD
Method
A short, readable and verifiable method.
Scoping
We learn your business, your constraints and what must exist at the end. You receive a clear scope and quote.
Design
User flows, architecture and threat model: risks are identified before the code is written.
Development
Short, demonstrable increments, systematic code review, automated tests.
Audit and acceptance
Security analysis, targeted penetration tests and acceptance testing with your team before go-live.
Production and care
Go-live, monitoring, fixes and improvements over time.
About
An engineering firm based in Tunis.
Shararah (شرارة, "the spark") brings development, ERP integration and cybersecurity together in one team. We work for Tunisian SMEs and international clients alike, in French, Arabic and English.
Our belief is simple: a digital product is only finished when it is reliable, maintainable and safe. That is why the person who designs your tool also speaks the language of the person who audits it.
- Based in
- Tunis, Tunisia
- Engagements
- On site and remote
- Working languages
- French, Arabic, English
FAQ
Frequently asked questions
What kind of projects do you take on?
Websites and web apps (Next.js, React), WooCommerce stores and sales funnels, Odoo ERP projects (implementation, modules, migration) and cybersecurity engagements: audits, penetration tests and hardening.
Can you take over a project built by another company?
Yes. We start with an audit of the code, hosting and security, then propose a takeover plan: what to keep, what to fix and what has to be rebuilt.
How do you build security into development?
From design, with a threat model. During development, with code review, static analysis and monitored dependencies. Before go-live, with an audit based on the OWASP ASVS. You receive a report of the controls performed.
Do you run security audits without building the project?
Yes. We audit existing web applications, APIs, Odoo instances and WordPress sites. Each finding names the affected asset, its severity and the recommended fix.
How much does a project cost?
The budget depends on the scope. After a first conversation, we send a detailed quote split into phases, stating what is included and what is not. The first conversation is free of commitment.
Do you only work in Tunisia?
No. We are based in Tunis and also work remotely for clients in Europe, the Middle East and Africa, in French, Arabic and English.
Do you provide maintenance after go-live?
Yes, under a maintenance agreement: security updates, verified backups, monitoring, fixes and small improvements.
Contact
Let's talk about your project.
A new product, an Odoo to take over or an application to audit: describe what you need and we come back with a first analysis.
- A reply from an engineer, not a salesperson
- First conversation and estimate free of commitment
- Your information stays confidential, NDA available
Direct contact
contact@shararahconsulting.com+216 25 163 280Tunis, TunisiaA well-built product, protected from day one.
Tell us about your project. You receive a first analysis and a clear quote, free of commitment.