COERA

COERA is an engineering consultancy that designs, builds and operates software products for clients - and a meaningful slice of that work sits in identity. Since 2013 the firm has engineered Identity & Access Management solutions for client organizations, alongside cloud platforms built as part of modernization and continuous evolution of existing software. If you care about where the attack surface actually gets shaped, that combination is the interesting part: IAM is not a side project here, it's one of four stated product lines, delivered inside long-running client environments rather than as a one-off assessment.

The rest of the portfolio runs alongside it: scalable web applications built to grow with clients' digital solutions, and SEO-driven digital ecosystems delivered for international clients. The client base spans travel, banking and logistics, with named long-term partnerships including Rabobank, TUI, PostNL and Winnow. Working across regulated banking and high-velocity travel and logistics contexts means the threat models vary - authentication and authorization boundaries, cloud platform configuration, and the maintenance burden of software that has to keep operating after it ships. COERA's stated model is to work side by side with clients, close to the customer and close to each other.

Operating since 2013 with presence across multiple countries, the company runs on small teams with real ownership. Engineers design, build and operate the software products they work on - including the ones that carry access decisions. The stated values are curiosity, ownership, collaboration and continuous improvement; teams are encouraged to experiment and challenge ideas. For security-minded engineers, the draw is concrete: IAM and cloud platform work inside organizations where the software has to keep running, not a slide deck about it.