Scalable, AI-forward applications, secured by design.
CRW and Associates LLC designs applications for ServiceNow that hold up as customers grow and put AI to work safely. The company is led by Bobby Wagoner, a developer, security architect and engineer with a 30-year history in enterprise security.
Three commitments behind every application
These are the standards CRW and Associates designs to. They apply to every app we plan, review and submit.
Built for growth and upgrades
An application that works for one team can fail at ten thousand users. We design the data model and processing for load before the first line of code.
- Private scoped applications with a clean, minimal data model
- Heavy work handled asynchronously, with queries designed for large tables
- Compatibility testing planned for every platform family release
AI features with guardrails
AI agents act on customer data and workflows, so they need the same discipline as any privileged user. We design that in from the start.
- Clear data boundaries for what a model can read and write
- Authorization checks on actions an AI agent takes
- Prompt validation and output governance
Faster builds, reviewed by people
AI tooling speeds up development and testing. Every change still goes through human review and security analysis before it ships.
- Threat model written before build and updated as the app changes
- Static analysis and manual review on all code, however it was written
- Design document, test plan and installation guide kept current
Built to the Store's rules from day one
The Store certifies every app before it lists. CRW and Associates plans each build around that review so certification is a checkpoint and not a rewrite.
Certification-ready from the first design
Store review checks security, upgrade safety and documentation. CRW and Associates designs to those checks from day one, led by a founder with 30 years of security design review experience.
Compliance and security first- ScopePrivate application scope on a vendor instance, so the prefix matches the registered partner ID.
- SecurityAccess control lists on every table, no hardcoded credentials, and the Certification Self-Test Tool run before each submission.
- DocumentsDesign document, test plan and installation guide written alongside the code.
- ReleasesCompatibility testing and recertification planned for every platform family release.
Bobby Wagoner
Thirty years of leading IT strategy, infrastructure and security programs. At ServiceNow he spent five years in product security, rising from Product Security Engineer to Principal Product Security Architect, with a focus on secure AI/ML infrastructure, application security frameworks and unified identity governance and compliance.
- DeveloperWrote secure coding standards for Swift, Objective-C and Android across Wells Fargo's development groups.
- ArchitectThreat modeling, BSIMM maturity programs and architecture review for AI/ML, identity and cloud systems.
- EngineerDeployed Fortify, Checkmarx, HashiCorp Vault and hardware security modules in production environments.
Studied architecture at Cal Poly San Luis Obispo, which is where the habit of drawing the structure before building it comes from.
Previously at ServiceNow, CareCentrix, Wavestrong, Wells Fargo, Carnival Cruise Line, Apple, Blackhawk Network and The Gap.
Talk to CRW and Associates
For partner introductions, Store collaboration or application engagements, write to Bobby Wagoner.