How JDR uncovered hidden security vulnerabilities for a nonprofit — without missing their deadline
What started as a routine support handoff revealed critical security risks in a portal handling sensitive child welfare data. JDR fixed the foundation, built the features, and launched on time.
Industry
Human Services Nonprofit
Location
Midwest
Services
Web App Dev · Security · Automation
Launched
December 2025
100+
Security Violations
Found and patched by JDR
100%
on time
Original deadline kept
100+
annual hours
Manual admin work eliminated
The client
A mission-driven organization with no internal dev team
A well-established Midwest nonprofit providing human services — including family support, child welfare, and behavioral health programs. Like many nonprofits, their staff were operators, not developers. They depended entirely on outside partners to keep their internal web application running.
They'd already been through two agencies. Neither worked out. Their most recent developer had built their internal portal but had become slow to respond and difficult to reach for ongoing support.
The Problem
The ask was simple. The reality wasn't.
The client came to JDR with a clear, limited request: better ongoing support, a few feature enhancements, and a development partner who would actually communicate. Nothing suggested a major project.
What discovery revealed: Before touching any feature work, JDR's team found significant security vulnerabilities left behind by the previous developer — inside a portal handling sensitive family, child welfare, and behavioral health records.
The exposure carried real consequences: potential data breaches, loss of stakeholder trust, and reduced donor confidence for an organization that runs on public and donor support. The client had no idea.
The solution
Fix the foundation first, then build
Rather than layer new features onto unstable code, JDR made a deliberate call: remediate before building. That decision changed the scope — but not the deadline.
1
Security remediation
Closed the inherited vulnerabilities before any other work began. Non-negotiable first step.
2
Code refactoring
Replaced problem areas instead of patching around bad code. Built something maintainable.
3
AI-assisted workflow automation
Identified and eliminated repetitive administrative tasks that were costing the team hours every week.
4
Feature enhancements
Delivered the portal improvements the client originally requested — now built on a solid, secure base.
Contract signed
May 2025
Development began
August 2025
Original estimate
~100 hours
Actual hours Due to Inherited Security Issues
~600 hours
Launched
December 2025 — on the original schedule
The results
A secure system, a lighter team, and an ongoing partnership
All inherited security vulnerabilities fully resolved
Hundreds of hours of manual admin work eliminated annually
Leadership overtime during peak season significantly reduced
Improved portal usability across all stakeholder departments
The most tangible day-to-day change: a department director who had routinely worked unpaid overtime during peak season no longer needed to — once the manual workflows she'd been absorbing were automated.
“
JDR Web has been an amazing partner to work with. Not only did they take the time to understand our system, they went above and beyond to understand the program behind it. Their attention to detail and proactive approach was exactly what we needed. I highly recommend their services!
Where things stand
From vendor to long-term partner
JDR still works with this client today. The engagement has grown from support and maintenance into ongoing strategic planning — including current discussions about rebuilding portions of the application to fully resolve the architectural limitations left behind by previous developers.
Sound like your organization?
Let's talk about what's really going on under the hood.