Custom software isn't a luxury: it's the difference between bending the company to the tool and bending the tool to the company. A generic management system forces you into its workflows; one built on your data follows them instead.
margin note: processes first, then codeSEC. 01Print proof · manifesto of custom consulting
Why custom
Six points, numbered like in a workshop. Made to measure like at a tailor's: first you take the measurements, then you cut. No inflated promises: what follows is how I actually work.
My work starts from data and logic, not from effect. First the schema, the rules, the edge cases; the interface comes once the model holds up.
ref. card 01 · server-side developmentNo magic ^ software that works and that can be checked: versioned, tested, documented, measurable. If it can't be verified, to me it isn't finished.
reviewer's correction: magic doesn't pass inspectionI integrate LLM and RAG locally, on-premise: data stays in-house and the result is verifiable. And with the same honesty: AI should be used only where it's truly needed, not wherever it looks impressive.
ref. card 03 · Ollama, Whisper, MCPI think like an attacker while I design. OWASP methodology, real penetration tests and test cases written for every feature: every line is written knowing how someone will try to break it, and any regression is caught in the workshop, not by the client.
ref. card 04 · application securityModernizing a legacy system without stopping the service is possible: side-by-side migration, the old and the new run together until the new one has proven it holds up.
ref. card 05 · real case: from Django 1.7 to the current stackSEC. 02Job cards · case archive
The work
The main ones, not all of them: each service is a workshop card, with case number, specifications and testing. Real content, not slogans.
Custom server-side development
Web management systems, multi-tenant SaaS, REST APIs and automations built on your process, not on a template.
| Language | Python |
| Framework | Django |
| Database | PostgreSQL |
| Delivery | code versioned, tested, documented |
Tested
Systems integration
Making heterogeneous systems that don't talk to each other talk: the invisible work that holds everything up, from the department's software to the group's ERP.
| Enterprise | SAP, TeamSystem, the main ERP and CRM systems |
| Channels | REST API, OAuth2, SSO |
| Asynchronous | Celery + Redis |
| Payments | Stripe, Nexi, Satispay |
| Tax | FatturaPA / SDI |
Tested
AI and BI on-premise
LLM, RAG and business intelligence installed on-site: data doesn't leave, the result can be checked. Honest approach: AI only where it's truly needed.
| Models | Local LLMs via Ollama |
| Search | RAG and semantic search over company documents |
| BI | executive dashboards and real-time KPIs |
| Automation | agents on repetitive tasks, voice transcription |
| Data | stay in-house, always |
Verifiable
Application security
Web penetration testing with OWASP methodology, security code review, reverse engineering, security assessment.
| Pentest | web app, OWASP methodology, 60+ checks |
| Reverse | APKs, proprietary protocols, encryption |
| Review | security-oriented code review |
| Test | automated test cases for every feature |
As an attacker
Legacy modernization
Dated systems brought to the current stack without stopping production: side-by-side migration, the service never goes dark.
| Real case | from Django 1.7 and Python 2.7 to the current stack |
| Method | side-by-side migration, old and new in parallel |
| Constraint | zero production stoppages |
No downtime
WebGIS and geospatial data
Interactive mapping and territorial data on the web: from the spatial database to the map you can query.
| Database | PostGIS |
| Maps | Leaflet, interactive mapping |
| Standard | WMS / WFS |
Tested
Your project
The archive doesn't end here: automations, data clean-up, reporting, odd protocols, systems no one wants to touch anymore. If the problem is real, a case gets opened.
| Requirement | a real process that needs sorting out |
| First step | low-commitment audit |
| Quote | honest estimate, in writing |
SEC. 03Production belt · from the '80s to today
The timeline
The trade started early: at 7, in BASIC. Ten stations hung on the belt: it runs on its own, drag it to move back and forth in time.
'80
At 7, the first programs in BASIC, on a ZX Spectrum and an Olivetti M24. The trade begins as a game taken seriously.
'90
Home-made automation on the parallel port: software meets hardware. Then C, Pascal and Assembler.
1998
The first website goes live. Since then, the web has never left the toolbox.
2008
Bachelor's degree in 2005 with a thesis on satellite image analysis; master's degree in Telecommunications Engineering in 2008 with a thesis on semi-supervised regression (Support Vector Regression): machine learning before it became a trend.
2009
First institutional web projects and WebGIS in Trentino: the territory enters the database.
2010
ARWA is founded as a sole proprietorship in Mori (TN). Focus on web application security from the start.
2015
Since 2015, enterprise work with Autostrada del Brennero: work-order and warehouse management on Oracle 19c, with a data warehouse.
2018
R&D begins on ENOGIS, a multi-tenant SaaS platform for the agrifood supply chain: field records, traceability and, today, 14+ external integrations.
2025
Integration of on-premise LLM and RAG into projects: data stays in-house, results are verifiable.
TODAY
End-to-end custom consulting: from the initial audit to final verification, a single technical point of contact.
SEC. 04Testing · numbers measured, not promised
Data plate
A few numbers, all honest: they come from real projects in production, not from a brochure.
0+
years in activity: ARWA dates from 2010, the first projects from 2009
0+
active external integrations on a single SaaS platform in production
~0
automated tests on the most tested project: thousands of tests written in total
0
concurrent data sources (including a read-only data warehouse) in a single enterprise management system
0+
checks run in a complete OWASP penetration test
SEC. 05Workshop process · four phases, none skipped
The method
We start with a low-commitment audit and an honest estimate of what's certain and what needs checking.
Low-commitment audit
A few hours, not a project: I look at data, code and processes to understand where you actually stand. No binding commitment, no blind quote.
IncomingHonest estimate
In writing: what's certain, what needs checking, what I don't know yet. If something is risky I say so upfront, not halfway through the job.
ApprovedDevelopment
Short iterations on a shared repository: you see the work as it takes shape, not once it's delivered. Code versioned and tested from day one.
In progressVerification
Automated tests, joint testing, documented delivery. The work is done when it can be checked, not when I declare it done.
TestedSEC. 06Test tags · some clients, not all
Put to the test
Here are a few: many others stay in the archive, for confidentiality or simple discretion.
ENOGIS
Multi-tenant SaaS platform for the agrifood supply chain, in production with dedicated instances per client and 14+ active external integrations.
Autostrada del Brennero (A22)
Enterprise management system for work orders and warehouse on Oracle 19c, with a dedicated data warehouse.
Istituto Superiore di Sanità
Collaboration with Italy's leading technical-scientific institute for public health.
Autonomous Provinces of Trento and Bolzano
Projects for the two Autonomous Provinces, including the European VERKKO / CEF context.
Mynet
GIS platform for the fibre-optic network: the infrastructure is visible on the map and managed from there.
real, verifiable references: no inflated numbers, no invented clients.
SEC. 07Opening a case · no form, just an email
LET'STitle block · contact detailsARWA / TN
- Owner
- Ing. Alessandro Regolini
- info@arwa.it
- Address
- Via Lutteri 21A, 38065 Mori (TN), Trentino, Italy
- Web
- www.arwa.it
- in/alessandro-regolini
- Education
- Master's degree in Telecommunications Engineering, University of Trento
The first step costs nothing irreversible: a low-commitment audit and an honest estimate of what's certain and what needs checking.
Open the case >>
Software of Italian origin
since 2010 · Mori (TN)