The engineering firm that builds its own security product.
TheMarkups has delivered software since 2023 — and we're the parent company of CATAAM, a GRC, attack-surface and breach-simulation platform. That combination is the whole point: we don't just talk about secure, reliable engineering. We ship a product that depends on it.
Why we exist
We started in 2023 — right as the old model started breaking.
For a decade, IT services meant one thing: rent people by the hour. Staff augmentation, contract-to-hire, bodies on a bench. We did that work — and delivered for teams in security and logistics where a mistake isn't an inconvenience, it's a breach or a stalled supply chain.
Then AI changed the math. When a small senior team paired with AI can out-ship a floor of contractors, paying for headcount stops making sense. What a business actually needs isn't more hands — it's someone to own the outcome, move fast, and not create a security or compliance mess doing it.
So we built the firm around that: outcome pods instead of timesheets, security and compliance built in instead of bolted on. And we put our money where our mouth is by building CATAAM — a real security and compliance platform — as our own product. It's why “secure” and “audit-ready” aren't marketing words for us. They're how we stay in business.
Leadership
Avinash has spent nearly two decades building and scaling enterprise software — as an engineering leader at Amazon, Avaya, Kronos and Pitney Bowes, across retail, contact-center, workforce and insurance platforms.
As Engineering Head and CTO of Koorier, he architected the backend data-infrastructure pivot that scaled a last-mile logistics platform from roughly 3,000 to over 100,000 package deliveries a day. He founded TheMarkups in 2023 and built CATAAM to end the three-week evidence scramble before every audit.
2× US patent holder · M.S. Computer Science, BITS Pilani.
What we believe
Four principles we don't bend on.
Outcomes, not headcount
We don’t rent you engineers by the hour. We take on a defined outcome under a pod and an SLA, and we’re measured by what ships and works — not by hours logged.
Secure by default
Security and compliance aren’t a phase we bolt on at the end. We build a security product; secure-by-design is how we write everything.
Senior-only, no pyramid
Small teams of senior engineers who own the decision and the result — not a junior-heavy pyramid you end up managing.
What we build is yours
Your code, your IP, your evidence. No proprietary platform to lock you in, no tax to keep paying us to run what we built.
Where we are
Registered in Canada. Engineered across two continents.
A Canadian company with a delivery and engineering team in Pune, India — so work moves forward across time zones, and clients get North-American accountability with global engineering depth.
Canada — HQ
40-5160 Explorer DriveMississauga, ON L4W 4T7
Canada
India — Engineering
904, Clover Hills PlazaNIBM, Pune 411012
Maharashtra, India
Parent company of CATAAM — GRC, attack-surface management and breach simulation in one platform.
Work with a team that owns the outcome.
Tell us what you need to build, secure or modernize. We'll come back with the pod, the plan and the accountability model — in 30 minutes.