What does Block Consulting do?

Block Consulting Ltd is a UK firm that builds and secures AI, blockchain, and software products, and produces licensed-market technical evidence (EU AI Act, DORA, MiCA, NIS2, UK operational resilience, GDPR security of processing, VARA, and US overlays such as SOC 2 / PCI / HIPAA). Contact contact@blockconsulting.co.uk.

Do you offer smart contract audits and blockchain development?

Yes. We develop public and private chain products, write and review Solidity smart contracts, and run Web3 security reviews covering access control, oracles, liquidation paths, upgrades, wallets, DeFi, and RWA tokenisation.

Do you offer penetration testing and cybersecurity?

Yes. Web, REST/GraphQL API, and mobile pentests; cloud hardening; OAuth/OIDC reviews; supply-chain/dependency risk; vulnerability management; and phishing resilience — with reports and retest, not scanner-only PDFs.

Can you help with EU AI Act, DORA or MiCA compliance?

We produce the technical evidence, architecture hardening, classification intake, and assurance artefacts those programmes need. Licensed counsel interprets the law and files. We are not a law firm and do not claim any client is fully compliant after a conversation.

What AI products have you built?

Representative builds include an ML trading system for crypto and stocks, a RAG legal research assistant, a multi-channel e-commerce chatbot, document intelligence search, an AI recruitment screener, plus DeFi lending, crypto payroll, RWA tokenisation, and a blockchain CRM. We also design new agentic workflows and copilots under your governance.

Where are you based and who do you work with?

Block Consulting Ltd (Companies House 15613115) is headquartered in Rotherham, United Kingdom. We deliver for clients and partners in the United Kingdom, United States, United Arab Emirates (Dubai, Abu Dhabi, ADGM, DIFC, VARA-facing programmes), and the EU. Founder & CTO: Joseph Dakwa. Remote and on-site as scoped.

Do you build AI SaaS and other SaaS products?

Yes. We engineer multi-tenant SaaS and AI SaaS — copilots, agents, RAG search, scoring, support, recruitment, and workflow products — plus generic B2B SaaS (CRM, payroll-style back office, portals, billing-ready MVPs). US buyers typically need SOC 2 / HIPAA / PCI evidence language; we produce engineering evidence, not certificates.

Do you build custom software and mobile apps (not only blockchain)?

Yes. Web applications, websites, iOS and Android apps, APIs, internal tools, and full software builds for fintech, enterprise, and consumer — with optional AI features and a security review. Blockchain is one practice, not the only one.

Do you work with United States and UAE companies?

Yes. US work often includes SOC 2 control evidence, HIPAA technical safeguards, or PCI-scoped architecture. UAE work often includes VARA / ADGM / DIFC digital-asset or enterprise builds. We are a UK company serving those markets; we do not claim a US or UAE law licence.

Cybersecurity, AI & blockchain development services

Cybersecurity, AI and blockchain development services — smart contract audits, penetration testing, custom AI products, software builds, and licensed-market technical evidence in one team.

Cybersecurity, penetration testing & application security

Block Consulting delivers scoped security assessments and hardening — web, API, mobile, cloud, identity, and Web3 — with reports, retest windows, and developer handover.

Web application penetration testing

OWASP-aligned pentests of SPAs and server-rendered apps: authentication, session handling, access control, injection, and business-logic flaws.

Also searched as: web pentest; application security testing; OWASP assessment; AppSec review

API penetration testing (REST & GraphQL)

Authorised testing of REST and GraphQL APIs for IDOR, broken object-level authorisation, SSRF, injection, and mass-assignment style defects.

Also searched as: API pentest; GraphQL security test; BOLA / IDOR testing

Mobile application security (iOS & Android)

Reviews of storage, transport, deep links, jailbreak/root limits, and API trust boundaries on iOS and Android.

Also searched as: mobile pentest; iOS security review; Android security review

Cloud & configuration hardening

Misconfiguration review for common cloud stacks — least privilege, secrets, logging, and blast-radius reduction.

Also searched as: cloud security review; CSPM-style hardening; AWS / Azure / GCP posture

OAuth, OIDC & session security

Token lifetimes, redirect handling, PKCE, and cross-domain identity flows that break in real deployments.

Also searched as: SSO security review; OIDC assessment; session management review

Supply chain & dependency risk

SBOM-aware triage, upgrade planning, and CI checks so third-party and OSS dependencies are not silent breach paths.

Also searched as: software supply chain review; dependency risk; SBOM triage

Vulnerability management support

Prioritised remediation from scanner output and bug-bounty noise — fix what actually reduces risk first.

Also searched as: vuln management; remediation support; retest

Phishing resilience & awareness

Targeted exercises and playbooks for AiTM-style and SaaS-centric attack chains.

Also searched as: phishing simulation; security awareness

Website, web app and mobile development (secure build)

Modern websites, landing pages, and cross-platform iOS/Android apps — with optional AI features and paired security review.

Also searched as: web development; mobile app development; secure software delivery

Open Cybersecurity, penetration testing & application security →

Blockchain development, smart contracts & Web3 security

We design, build, and review on-chain systems — protocols, wallets, DeFi, tokenisation, and custody-sensitive flows — with security-first engineering.

Blockchain development

Public and private network design, integrations, and product delivery for organisational blockchain programmes.

Also searched as: blockchain software development; Web3 development; distributed ledger development

Smart contract development

Solidity and protocol engineering for tokens, vaults, markets, bridges, staking, and governance — with test discipline from the start.

Also searched as: Solidity development; smart contract engineering; on-chain development

Smart contract audits & Web3 security reviews

Solidity-focused reviews covering access control, oracle trust, liquidation paths, upgrade patterns, and economic safety — paired with product delivery.

Also searched as: smart contract audit; Solidity audit; DeFi security review; Web3 audit

DeFi, wallets, exchanges and custody-facing builds

Lending, yield, swaps, bridges, staking, wallet and exchange modules with custody, key, and segregation concepts designed in.

Also searched as: DeFi development; wallet development; crypto exchange development; custody architecture

Tokenisation, stablecoins & real-world assets (RWA)

Settlement flows, issuer integrations, and on-chain representations of real estate or receivables — legal and custody boundaries agreed up front.

Also searched as: RWA tokenisation; stablecoin integration; asset tokenisation platform

Scaling, NFT, identity and enterprise chain programmes

State channels, rollups, sidechains, NFT projects, decentralised identity, supply-chain and voting systems, plus tokenomics consulting.

Also searched as: L2 integration; NFT development; DID; tokenomics consulting

Open Blockchain development, smart contracts & Web3 security →

AI products, agents & digital transformation

We design and ship domain-specific AI systems — agents, copilots, RAG, and automation — with logging, oversight, and security testing so they can be sold into licensed markets.

AI SaaS and AI software development

Multi-tenant AI SaaS and B2B SaaS products — copilots, agents, RAG search, scoring, and workflow automation — with billing, tenants, auth, and audit logs. Built for UK, US, UAE and EU buyers.

Also searched as: AI SaaS; AI SaaS development; build an AI SaaS; AI software as a service; B2B AI SaaS; SaaS AI platform; AI product development; AI development company; LLM SaaS

Custom AI product engineering

Bespoke AI applications for operations, customer support, research, trading support, and recruitment — built on your data and governance, not a generic chat wrapper.

Also searched as: AI development; custom LLM application; AI software house; hire AI developers; artificial intelligence development

Agentic workflows & AI agents

Task-specific agents with tool use, retrieval, and human approval gates — aligned to data residency and audit requirements.

Also searched as: AI agent development; agentic AI; autonomous workflow

RAG, document intelligence & legal research assistants

Retrieval-augmented systems over your documents — including legal research chatbots and natural-language document search.

Also searched as: RAG development; document intelligence; legal AI assistant

Customer and operations copilots

E-commerce and multi-channel support agents, recruitment screeners with resume parsing, and industry copilots under your policies.

Also searched as: AI chatbot development; customer support agent; AI recruitment screener

AI trading and decision-support systems

ML trading systems for crypto and stocks, plus other scoring or decision-support products with evaluation harnesses.

Also searched as: AI trading bot; ML trading system; decision-support AI

Model, prompt & AI security governance

Safety patterns, logging, red-team prompts, and evaluation so teams know when a model is out of distribution.

Also searched as: AI governance; prompt injection testing; LLM security; AI red team

Digital transformation roadmaps

Practical sequencing: legacy integration, identity, observability, and change management so automation sticks.

Also searched as: digital transformation consultancy; automation roadmap; digital transformation US; digital transformation UAE

Open AI products, agents & digital transformation →

Custom software, AI SaaS, web apps & mobile apps

We are a software studio as well as a security firm. We design, build, and harden web applications, mobile apps, APIs, and SaaS products — generic business software and specialised AI / fintech / crypto products — for clients in the UK, United States, UAE, and EU.

Custom software development

Bespoke web applications, internal tools, CRMs, portals, dashboards, and workflow systems. Greenfield or brownfield. UK, US, UAE, and EU delivery.

Also searched as: software development company; custom software development; bespoke software; web application development; hire software developers; software build

SaaS product engineering (including AI SaaS)

Multi-tenant SaaS: subscriptions, roles, billing hooks, admin consoles, APIs, and observability. AI SaaS when the product is an agent, copilot, or RAG platform you sell.

Also searched as: SaaS development; SaaS development company; build a SaaS; AI SaaS development; B2B SaaS development; multi-tenant SaaS; SaaS MVP

iOS and Android mobile app development

Cross-platform and native-quality mobile apps for fintech, crypto, enterprise, and consumer — with optional on-device or API-backed AI features and a paired mobile security review.

Also searched as: mobile app development; iOS app development; Android app development; React Native app; fintech mobile app; hire mobile developers

Websites, landing pages and marketing sites

Conversion-focused websites and product marketing sites, including for SaaS and regulated offers.

Also searched as: website development; web design and development; landing page development

APIs, integrations and internal platforms

REST/GraphQL APIs, payments, identity, ERP/CRM connectors (including Salesforce / Microsoft / Odoo-class stacks), and back-office platforms.

Also searched as: API development; systems integration; internal tools development; enterprise software development

Open Custom software, AI SaaS, web apps & mobile apps →

Licensed-market technical evidence (EU AI Act, DORA, MiCA & related)

Block produces the technical evidence, architecture hardening, and assurance artefacts that counsel and CISOs need. We are not a law firm. Legal interpretation and filings stay with licensed counsel.

EU AI Act technical overlay

Classification intake, gap analysis, logging / oversight / cybersecurity evidence, and AI Launch Review for agents, RAG, scoring, KYC/biometrics, and GPAI-facing products.

Also searched as: EU AI Act compliance; AI Act evidence pack; high-risk AI documentation

DORA ICT third-party & operational resilience evidence

ICT risk, third-party register support, incident pathways, testing artefacts, and continuity evidence for EU financial and CASP clients who treat you as an ICT supplier.

Also searched as: DORA compliance; DORA ICT third party; digital operational resilience

MiCA technical overlay for CASP and token products

Custody and wallet security design, operational resilience, market-integrity surfaces, and smart-contract security annexes counsel can attach to licence packs.

Also searched as: MiCA compliance; CASP technical evidence; crypto licence technical annex

NIS2, UK FCA/PRA resilience, GDPR security of processing

Supply-chain and ICT control evidence, UK operational-resilience artefacts, and technical notes that support DPIA / subprocessor work.

Also searched as: NIS2 compliance; FCA operational resilience; UK GDPR security of processing

VARA / UAE VASP technical controls

VASP-oriented technical control mapping and security testing for UAE digital-asset programmes.

Also searched as: VARA compliance; UAE VASP security; ADGM technical controls

SOC 2, ISO 27001, PCI and HIPAA engineering evidence

Control design and engineering evidence for US enterprise, payments, and health export deals — not a certificate mill.

Also searched as: SOC 2 readiness evidence; ISO 27001 technical controls; PCI architecture review; HIPAA technical safeguards

Open Licensed-market technical evidence (EU AI Act, DORA, MiCA & related) →

Training & learning

Vendor-neutral workshops and programmes in AI, cyber security, and blockchain for corporate, public sector, and student audiences.

AI, cyber and blockchain training

Executive briefings, half-day workshops, and multi-week cohorts — responsible LLM use, secure development, and digital-asset fundamentals.

Also searched as: cyber security training; AI literacy workshop; blockchain training

Open Training & learning →

Practice succession & client continuity

Phased handover for founder-led cyber and AI consultancies — royalty-based succession, not a cliff-edge sale to a consolidator.

Practice succession for boutique consultancies

Founder-endorsed client continuity for firms in cyber, AI, digital, and secure engineering — especially government, education, and regulated sectors.

Also searched as: consultancy succession; client continuity; practice continuation

Open Practice succession & client continuity →

Frequently asked questions

What does Block Consulting do?: Block Consulting Ltd is a UK firm that builds and secures AI, blockchain, and software products, and produces licensed-market technical evidence (EU AI Act, DORA, MiCA, NIS2, UK operational resilience, GDPR security of processing, VARA, and US overlays such as SOC 2 / PCI / HIPAA). Contact contact@blockconsulting.co.uk.
Do you offer smart contract audits and blockchain development?: Yes. We develop public and private chain products, write and review Solidity smart contracts, and run Web3 security reviews covering access control, oracles, liquidation paths, upgrades, wallets, DeFi, and RWA tokenisation.
Do you offer penetration testing and cybersecurity?: Yes. Web, REST/GraphQL API, and mobile pentests; cloud hardening; OAuth/OIDC reviews; supply-chain/dependency risk; vulnerability management; and phishing resilience — with reports and retest, not scanner-only PDFs.
Can you help with EU AI Act, DORA or MiCA compliance?: We produce the technical evidence, architecture hardening, classification intake, and assurance artefacts those programmes need. Licensed counsel interprets the law and files. We are not a law firm and do not claim any client is fully compliant after a conversation.
What AI products have you built?: Representative builds include an ML trading system for crypto and stocks, a RAG legal research assistant, a multi-channel e-commerce chatbot, document intelligence search, an AI recruitment screener, plus DeFi lending, crypto payroll, RWA tokenisation, and a blockchain CRM. We also design new agentic workflows and copilots under your governance.
Where are you based and who do you work with?: Block Consulting Ltd (Companies House 15613115) is headquartered in Rotherham, United Kingdom. We deliver for clients and partners in the United Kingdom, United States, United Arab Emirates (Dubai, Abu Dhabi, ADGM, DIFC, VARA-facing programmes), and the EU. Founder & CTO: Joseph Dakwa. Remote and on-site as scoped.
Do you build AI SaaS and other SaaS products?: Yes. We engineer multi-tenant SaaS and AI SaaS — copilots, agents, RAG search, scoring, support, recruitment, and workflow products — plus generic B2B SaaS (CRM, payroll-style back office, portals, billing-ready MVPs). US buyers typically need SOC 2 / HIPAA / PCI evidence language; we produce engineering evidence, not certificates.
Do you build custom software and mobile apps (not only blockchain)?: Yes. Web applications, websites, iOS and Android apps, APIs, internal tools, and full software builds for fintech, enterprise, and consumer — with optional AI features and a security review. Blockchain is one practice, not the only one.
Do you work with United States and UAE companies?: Yes. US work often includes SOC 2 control evidence, HIPAA technical safeguards, or PCI-scoped architecture. UAE work often includes VARA / ADGM / DIFC digital-asset or enterprise builds. We are a UK company serving those markets; we do not claim a US or UAE law licence.

Scope a piece of work

Email contact@blockconsulting.co.uk or use the contact form — pentest, smart-contract review, AI build, or regulatory evidence pack.