SoftWe automate business processes with AI and build web applications in Java
Our AI agents take over the repetitive work in your business processes — and with AIBPA2, AI even writes the automation for you. We also build fast, maintainable web applications in Java, such as HedgeSEC, our vulnerability management platform. Pick a project below to explore real examples and their code.
What we build
AIBPA2
Business process automation made easy. The next step of AIBPA (AI business process automation): SamurAI runs business workflows described in XML — so let AI write the XML. Describe the process in plain language and get a ready-to-run SamurAI application, with zero code written by you. Real example: importing recipes into the Yummi app from any web page or document.
- Zero code
- AI-generated XML
- Free LLM tiers
- Real example
SamurAI
Automate business processes with AI agents: triage tickets, process documents, route requests and generate reports, with human approval where it matters. Plain Java, zero dependencies, 31 LLM provider types and free tiers used first to keep costs low.
- Business automation
- Human approvals
- 31 LLM providers
- XML workflows
FoxyUI
Build interactive web applications entirely in Java. The UI lives on the server; the browser receives only the HTML fragments that changed. No Node.js, no bundler, one WAR file.
- Java 21
- Jakarta EE / Tomcat
- HTML over the wire
- Interactive demos
HedgeSEC
Security without the noise. HedgeSEC finds vulnerabilities and tells you what to fix first — and how. It combines the CVSS score with the real-world probability of exploitation (EPSS) and vulnerabilities already exploited in attacks (CISA KEV) into one HedgeScore. It scans computers with or without installation (a single read-only command, or a desktop client with scheduled scans), discovers the devices on your network, checks the security policies in force, the BIOS/UEFI settings and the history of USB devices, and keeps a searchable CVE repository with security news. Built on FoxyUI.
- Vulnerability scanning
- HedgeScore prioritization
- Device discovery
- Policy, BIOS & USB audit
- CVE repository
- NIS2 compliance
AI automation and Java engineering, end to end
The concepts behind our projects — each one shown working in a real example.
Agentic AI & AI agents
Autonomous AI agents that read, decide and act inside your business processes, orchestrated in plain Java.
SamurAI →LLM orchestration
31 LLM provider types behind one API, free tiers and local models first, automatic fallback and a cost ledger.
SamurAI features →Intelligent document processing
Extract structured data from web pages, PDF and Word documents — see recipes imported into a real app.
AIBPA2 example →No-code automation with AI
Describe the process in words; AI generates the workflow. Zero code written by a person.
AIBPA2 →Model Context Protocol (MCP)
Expose business workflows as tools for Claude Code, Cursor and other AI assistants.
MCP server →Human-in-the-loop AI
Approval gates, audit logs and cost caps keep people in control of sensitive decisions.
Approvals →Java 21 & Jakarta EE
Modern Java web development on Tomcat 10/11 and Jetty 12, with virtual threads for high concurrency.
FoxyUI features →Server-driven UI & HTMX
The interface lives on the server; the browser receives only changed HTML fragments. No JavaScript build.
FoxyUI →Vulnerability management
Prioritize what to fix with CVSS, EPSS and CISA KEV. Scan computers with or without installation, discover network devices and check security policies, BIOS settings and USB history.
HedgeSEC →We can build it for you
The same engineering that goes into our frameworks, applied to your product.
Web applications
Business portals, dashboards and internal tools in Java, without a heavy JavaScript stack.
Business process automation
AI agents that triage requests, process documents and run approvals — with cost control and a human in the loop.
Modernization
Moving fragile single-page apps and legacy systems to lean, maintainable architectures.
Backend engineering
Jakarta EE and Spring services, SQL data stores, integrations and APIs.
Performance audits
JVM profiling, memory and latency tuning, reliability reviews.
3D CAD & prototyping
Parametric modeling and rapid prototyping for hardware projects.
Cybersecurity & NIS2
Vulnerability scanning, risk prioritization and NIS2 compliance evidence with HedgeSEC.
AI integration
Add AI to the applications you already have: smart search, summaries, document extraction and assistants, with cost control.
AI business process automation, explained
What is AIBPA?
AIBPA stands for AI Business Process Automation: business processes such as request triage, document processing, approvals or reports are run by AI agents together with deterministic steps. At SoftWay, AIBPA is built with SamurAI, our Java framework for AI agents.
What is AIBPA2?
AIBPA2 is the next step: AI also writes the automation. You describe the process in plain language, an AI coding agent generates the SamurAI application (an XML workflow), and SamurAI runs it — with zero code written by a person.
How do AI agents automate business processes safely?
Each SamurAI workflow mixes LLM steps with deterministic ones, keeps secrets out of the workflow file, limits commands to an allow-list, caps the cost of every run, logs everything for audit and can pause for human approval before sensitive steps.
Which AI models can be used?
SamurAI supports 31 LLM provider types — OpenAI, Anthropic Claude, Google Gemini, Mistral, Groq, DeepSeek, AWS Bedrock, Azure, local models through Ollama or vLLM and more — and prefers free tiers and local models to keep costs low.
Do you build Java web applications?
Yes. We develop web applications, business portals and internal tools in Java 21 on Jakarta EE and Apache Tomcat, using FoxyUI, our server-driven Java web framework: the whole interface is written in Java, with no JavaScript build.
What is HedgeSEC?
HedgeSEC is SoftWay’s vulnerability management platform, built on FoxyUI. It tells you which vulnerabilities to fix first by combining CVSS with the real-world probability of exploitation (EPSS) and attacks already seen in the wild (CISA KEV). It scans computers without installing anything, with a single read-only command, or through an installed desktop client with scheduled scans; it discovers the devices on your network and checks the security policies in force, the BIOS/UEFI settings and the history of USB storage devices. It also helps with NIS2 compliance.
Let's talk about your project
Questions about AIBPA2, SamurAI, FoxyUI or HedgeSEC, or a process you want automated — write to us.