This is not a faceless agency. Every engagement is led personally by one of the two founders — and the wider bench in Dubai and Colombo works to the standard they set.
Five-plus years designing digital products end to end. Currently leads design for HrRiver, an AI-integrated HRMS, and Sublime, a luxury travel platform, and heads a design team in Sri Lanka. Based in Jumeirah, Dubai. His work is deliberately commercial — research and craft in service of a measurable business outcome, not decoration.
A career information-security engineer with hands-on experience defending regulated, high-assurance environments — the kind where a control failure has a regulator attached to it. Eradh leads Zentrya One’s testing, GRC and advisory practice, translating technical risk into decisions a board can actually make. Bio to confirm with Eradh
Designers, engineers and security analysts across Dubai and Colombo. Replace names & roles
Design and security run in parallel rather than in sequence. That is the whole point of the alliance — findings surface while they are still cheap to fix.
A free 30-minute call, then a short discovery. We map the growth blocker and the risk exposure in the same conversation.
Research-led product and brand work — wireframes, interface design, identity and a design system your engineers can build from.
Testing, cloud review and compliance run alongside the build, not after it. Findings arrive as tickets, not as a PDF at the end.
Handover with source files and an evidence pack, then optional retainers — quarterly testing, vCISO cover, or always-on creative.
Two founders, no account-manager layer, fixed scopes and a number you can call. This is what working with us actually looks like.
Design and security under a single scope with a single named owner. No “that’s the other vendor’s job” — the handover problem simply does not exist.
Your project is run by the person whose name is on the company, not handed to a junior after the pitch. You get their mobile number on day one.
A written number before any work starts. No open hourly billing, change requests priced up front, monthly or milestone terms.
Reports written for a board, not just for engineers — a security questionnaire pack, audit-ready artefacts and a free verification re-test.
UAE-based leadership with a Sri Lanka delivery team and Gulf-hours overlap, so senior time stays affordable.
For very large, multi-year programmes an in-house team is usually the better answer — and we will tell you so on the call.
An honest comparison. There are good reasons to pick each of these — here is where we actually win, and where we do not.
| Zentrya One × Nimo | In-house team | Two separate agencies | Freelancers | |
|---|---|---|---|---|
| Both disciplines | Security + creative, one scope | Rarely both | Yes, but uncoordinated | One skill each |
| Time to start | 1–3 weeks | 2–4 months to hire | 4–8 weeks | Days |
| Who does the work | The founders, directly | Your own people | Whoever is free | The person you hired |
| Cost profile | Fixed scope, fixed price | Salaries + tools + overhead | Two retainers | Lowest day rate |
| Audit & evidence | Produced as you build | If you have a GRC hire | Extra scope | Not typically offered |
| Scales past 20 people | To a point — then hire in-house | Best long-term | Large benches | Hard to coordinate |
We are a two-founder alliance, not a 200-person agency. For very large, multi-year programmes an in-house team is usually the better answer — and we will tell you so on the call.
Thirty minutes, no pitch deck. Bring the problem — a stalled launch, a failed security questionnaire, a site that gets traffic and no enquiries — and we will tell you what we would do about it.
Jumeirah 01, Dubai, UAE · Serving the UAE, Sri Lanka and global markets · NDA on request