Frontend Development
for NÚKIB
# Web Portal
NÚKIB
2026
We won an open tender to develop the frontend for the portal and website of the National Cyber and Information Security Agency. We build the frontend in React and TypeScript, with a strong focus on security, code quality, and automated testing.
Open tender
Won an open public tender
ISO 27001
Certified security development standard
React + TS
Type-safe frontend with automated testing
Open tender
for the cyber agency
The National Cyber and Information Security Agency is a key Czech government institution responsible for the cybersecurity of critical infrastructure. It issues regulations and manages incident response. Our ISO 27001 certification and track record in secure development met their stringent requirements.
React and TypeScript
for a reliable frontend
The portal frontend is built in React with TypeScript. Type safety isn't a luxury, it's a necessity. When developing for an institution responsible for the nation's cybersecurity, every line of code must be verified and predictable.
TypeScript catches an entire category of errors before the code even runs. Strict typing of API contracts means the frontend and backend can't fall out of sync, even when separate teams are working on them.
React's component-based architecture allows us to break the portal down into isolated, testable units. Each component has clearly defined inputs and outputs, making both development and security code audits easier.
Automated testing
as the foundation of quality
Portal quality is ensured by a comprehensive, multi-layered testing strategy. Unit tests cover individual functions and components, integration tests verify module interoperability, and end-to-end tests simulate real user scenarios.
Every pull request goes through an automated pipeline that runs the full test suite, checks code quality, and verifies that no regressions have been introduced. No change makes it to production without a successful pass.
This approach isn't just about catching bugs. Tests serve as living documentation of system behavior. A new developer can understand the portal's logic by reading the tests faster than by reading the source code.
Security
at the core
Development for NÚKIB follows strict security requirements. Our ISO 27001 certification wasn't just a formal tender requirement, it's the real foundation for a secure development process, from code management and access control to deployment.
Security is embedded in every phase of development. Third-party dependencies undergo automated vulnerability scanning, code goes through static analysis, and access rights are governed by the principle of least privilege.
We work with the awareness that the NÚKIB portal is a potential target for cyberattacks. That's why we design the architecture to minimize the attack surface and enable rapid response to newly discovered vulnerabilities.
