Skip to the content
IT&SOFT, a full-cycle digital agency

We build IT products faster, cheaper, smarter, sturdier

We build web services, Telegram bots and AI systems for business. First demo on day five to eight, then one every two or three days. The code and the rights are yours.

The stack we work with every day
Services

Ten areas of work
from a landing page to AI agents.

The list is closed. If a job would send us hunting for contractors, we turn it down.

All services in detail
Process

Four stages.
A demo at every one.

Every stage ends with something you can open and click.

brief.json
{
  "service": "ai-agents",
  "budget": "₽300–700K",
  "timeline": "2–3 months",
  "kpi": {
    "current": "900 requests/day",
    "target": "60% without an operator"
  }
}
Ready
Cases

What is already running
and what it produced in numbers.

01HoReCaClient project

A Telegram Mini App with pre-ordering and payment

The morning peak queue was running to 12 minutes. We moved ordering and payment into Telegram so the guest collects a cup that is already made.

−73%time spent handling an order
Telegram Mini AppsPythonaiogramPostgreSQL
02LogisticsClient project

Automating how requests are assigned to drivers

The dispatcher was sorting 200 requests a day by hand in a spreadsheet. We replaced route building with a script that checks the constraints.

6 hoursa day freed up for the dispatcher
PythonPostgreSQLRedisn8n
03EducationPilot

An AI agent on first-line support

Before a cohort started, support was taking 900 requests a day. The agent answers from the knowledge base with a link to the source.

68%of requests closed without an operator
ClaudeLangChainQdrantFastAPI
04RetailClient project

A security audit before card acquiring went live

The bank asked for a test report. We found access to other customers’ orders via a direct link, and a promo code that applied twice.

14findings, 3 critical
OWASP Top-10Burp SuiteSemgrepTrivy
05Business softwareClient project

Refactoring 40,000 lines of inherited code

The only developer had left and no documentation remained. We reconstructed a map of the system and made changes safe to ship.

40,000lines worked through in 3 weeks
PythonTypeScriptPostgreSQLDocker
06ResearchInternal project

A rig for testing how well AI agents hold up

We built a lab where our own and our clients’ agents are run through a catalogue of attacks, with a regression suite kept alongside it.

2400+attacks in the catalogue
PythonGarakPyRITClaude
07RetailClient project

An AI sales manager for Avito

A stream of enquiries across several Avito stores, managers unable to reply fast enough, and leads lost to the delay. We handed the first contact to an AI agent.

24/7first contact with no operator
LLMAvitoPythonPostgreSQL
08OperationsClient project

Monitoring and routing of incoming mail

Important letters, price lists, changed terms, urgent requests, got lost in the flow, and staff sorted mailboxes by hand. We set up automatic mail monitoring.

0manual mailbox sorting
PythonIMAPTelegram Bot API
09FinanceClient project

An internal payment accounting and control system

The company tracked invoices and payments in 1C. As volume grew, reconciling with accounting started eating hours of manual work. We built storage, search and automatic reconciliation against 1C.

Autopayment reconciliation with 1C
PythonSQLite1C
10OperationsConcept

Procurement automation and 1C synchronisation

Prices, stock and invoices live in separate systems and need manual merging for every purchasing decision. We worked through the concept of a single loop tied to 1C.

Concepta single procurement loop with 1C
1CPythonвнутренние API
Numbers

What we commit to
and stand behind.

Mon–Fri, 10:00–20:00--:--:-- MSK
10

service lines we handle in-house

2 h

average reply during working hours

6 mo

warranty on defect fixes

100%

of projects handed over with source code

Technology

Boring technology,
still maintainable in year three

We swap tools rarely. In three years someone has to be able to maintain your project, and that matters more than how fresh a framework is.

Security

We break it ourselves first
and only then hand it over.

Every project gets a vulnerability pass before we hand it over. If something of yours already runs and you need to know how bad it is, bring it to us on its own.

OWASPCWECVSSMITRE ATLAS152-FZGDPR

An audit against the OWASP Top 10

Manual testing of web applications and APIs. A scanner covers the first half hour, the rest is done by hand.

Pen testing bots and APIs

We test Telegram bots and mobile backends separately: they have their own threat model.

AI red teaming

Prompt injection, data leaks, bypassing limits, abuse of tools.

152-FZ and compliance

Consents, storage, data localisation, ad labelling. You get a report and a checklist for your lawyer.

Standards

The same in every project
whatever the budget.

Review, tests, CI and monitoring are in the price of any job. There is no separate line for them in the estimate.

Always included
  • A person reviews every line before merge
  • Automated tests on anything that costs money when it breaks
  • CI/CD and a one-minute rollback
  • Documentation sits next to the code
  • Monitoring and alerts from the first day in production
  • A month of free fixes
What we will not do
  • Not one line of code we could not explain to you on a call
  • No prices without a task-by-task breakdown
  • Sources and credentials leave our side at handover
  • Work we have no experience in goes to people who do
  • Trackers and counters go up only with your written consent
  • No logo appears in our cases without the right to use it

Nothing ties you to us once the work is accepted. The code, the credentials and the documentation sit with you. Carry on with us, move support to your own team, or give it to another contractor. Nothing in the contract holds you here.

Pricing

Pricing starts here
the exact figure follows the brief.

After the brief you get a line-by-line estimate: hours on the front-end, hours on integrations, hours on tests and hours on everything else.

01

Start

A landing page, a simple bot, an automation script

from₽60,000

5–10 working days

  • One product: a landing page, a bot or a script
  • Design from scratch or adaptation of your mockup
  • Responsive from 320 px and a dark theme
  • Enquiry form with a Telegram notification
  • Analytics and goal tracking
  • Deployment, domain, SSL
  • One month of free fixes
Discuss the project
Popular
02

Business

A web app, a Mini App, integrations

from₽250,000

3–6 weeks

  • Everything in “Start”
  • Up to 15 screens or a catalogue with filters
  • Admin panel for content
  • Two integrations: payments and CRM
  • Roles and a user account area
  • Automated tests for the critical paths
  • Load check before launch
  • One month of support after launch
Discuss the project
03

Enterprise

A system built for load, several teams, an SLA

On request

from 6 weeks

  • Everything in “Business”
  • Architecture designed for load
  • Queues, caching, horizontal scaling
  • SSO and granular permissions
  • Deployment inside your own perimeter
  • Security audit before launch
  • SLA and on-call incident cover
  • Code walkthrough for your team
Request an estimate

The audit, the AI rollout and the subscription are priced separately. Compare every feature

Questions

What people ask
before the work starts.

Here we answer the way we would answer on a call.

01Why are you faster than a traditional studio?

Three reasons, and none of them is “we work nights”. Two or three senior engineers sit on the project, and the engineer makes the technical call directly, the same day. The standard blocks, authentication, payments, roles, an admin panel, CRM integrations, sit in our library and are never written twice. And a demo every 2–3 days: any gap between the build and your expectations turns up in week two, while reworking is still cheap.

02How long does a typical project take?

A landing page or a simple bot: 5–10 working days. A web app or a Mini App with payments: 3–6 weeks. An AI agent: 3–8 weeks, half of it spent on the knowledge base. The first demo lands on day five to eight either way.

03What if the result isn't what we wanted?

It rarely gets that far: you see a demo every 2–3 days, and any gap turns up in week two while it is cheap to fix. If the prototype makes it clear that we are a poor fit for each other, you pay for the work actually done and take everything that has been built.

04How do you calculate the cost?

By the hour, broken down by task. After the brief you get an estimate showing how many hours go into the front-end, how many into the CRM integration, how many into tests. Before the brief we name no figure: naming one means guessing the scope, and guessing inside someone else's budget is a bad habit.

05How is AI red teaming different from an ordinary penetration test?

A penetration test looks for mistakes in code: injections, authorisation bypasses, leaky permissions. AI red teaming looks for mistakes in the model's behaviour, where the vulnerability looks like text that talks the agent into doing something forbidden. A patch will not close it; only architecture will, through tool permissions, data isolation and checks on the answers. These are different skill sets, and we do both.

06Who owns the code after the project is handed over?

You do, entirely. The sources go into your repository together with exclusive rights, and this is written into the contract. You will never buy a licence for your own product, and there are no closed modules that only run on our side.

07Do you work under a contract and do you sign an NDA?

Yes to both. We sign an NDA before the brief if the task is sensitive: nobody is obliged to discuss details on a promise. We ask for access to your systems at the minimum level and one system at a time, instead of “give us admin rights to everything”.

08What is included in support after launch?

A month of free fixes is always included. After that it is optional: a subscription starts at ₽30,000 a month, monitoring with alerts and a response within the working day. The tier with 20 development hours, dependency updates and a two-hour incident response starts at ₽80,000. Unused hours roll over, and you can cancel at any point.

Ready to discuss
your task?

In working hours we reply within a couple of hours. The first call and a rough estimate cost nothing.

No payment for an estimate · NDA on request

0 / 20

We reply within two hours during working hours. For a detailed estimate, fill in the brief: it takes ten minutes.