AI that works. Software that holds up.
Softboom is the Italian software house that builds AI agents, automation and custom software, and makes them secure with penetration testing and security by design. Since 2013.
- 2013
- the year we started
- 970
- Italian SMBs use yourang.ai
- 5M+
- downloads of our apps
Four crafts, one standard: work and hold up.
We build artificial intelligence and the software that carries it, and we defend both with the same rigour. Every project draws on all four skills.
-
Agents that answer, book, fill in and decide within the limits you set: on the phone, in chat and inside your business software.
- Phone assistants They answer 24/7, book appointments, send WhatsApp confirmations and pass the calls that matter to a person. It is the technology behind yourang.ai, adapted to your case.
- Operational agents They work inside your business software: they prepare files, reconcile data, chase whoever needs to reply and leave you only the decisions.
- Team copilots Customer and case summaries, email and message drafts, search across company documents, voice notes turned into structured data.
- MCP and API integrations MCP servers and APIs that let models work on your tools with authentication, permissions and an action log.
-
Processes that run on their own: documents read, requests routed, systems that finally talk to each other.
- Workflows between apps Self-hosted n8n, Zapier or dedicated code, with monitoring and automatic restart when something stops.
- Integrations with your tools E-invoicing platforms, CRMs, calendars, WhatsApp, Meta and Google Ads, Stripe, Sendcloud: we connect what you already use.
- Documents and images Reading invoices, PDFs and photos, recognising text and logos, generating production-ready files.
- Follow-ups and campaigns Personalised emails and WhatsApp messages, reminders that go out at the right moment and stop when the customer replies.
-
Web apps, mobile apps, business platforms and connected devices, designed around your process and not the other way round.
- Web apps and business platforms Next.js and Django on PostgreSQL, multi-tenant when needed, with each customer’s data isolated from the others.
- iOS and Android apps Flutter, React Native or native, with App Store and Google Play release and automatic updates.
- Connected devices ESP32 firmware, MQTT messaging, remotely managed fleets and signed over-the-air updates.
- Painless migrations We replace legacy software and bring along data, accounts and users’ habits.
-
Penetration testing, AI system security and infrastructure built to hold up.
- Penetration testing and vulnerability assessment Web apps, APIs, mobile apps and networks, following OWASP guides. Technical report with evidence and priorities, an executive summary and a retest after the fixes.
- AI system security Direct and indirect prompt injection, data exfiltration, agent tool abuse, jailbreaks. Red teaming of your assistant and tailored guardrails, mapped to the OWASP Top 10 for LLM Applications.
- Secure by design and infrastructure Threat modelling, code review, server and cloud hardening, secrets management, backup and disaster recovery, monitoring and release pipelines with automated checks.
Our flagship product
The phone always answers. Even when you can’t.
yourang.ai is the AI phone assistant we built for small businesses: it answers 24/7, books appointments, confirms on WhatsApp and passes the calls that matter to a person. 970 Italian companies use it.
Listen to a sample call
Guest: Good evening, do you have a table for four tomorrow at 9 pm? yourang.ai: Good evening! Tomorrow at 9 pm for four, I have a table inside. What name should I book under? Guest: Rossi. Is there anything gluten-free on the menu? yourang.ai: Yes, there are gluten-free pasta dishes and desserts. Booked for Rossi, tomorrow at 9 pm: I’m sending the confirmation on WhatsApp.
- Booking in the calendar
- WhatsApp confirmation
Sample conversation, for illustration only.
We attack your systems before someone else does.
Penetration testing, AI system security and infrastructure designed to hold up. We tell you where you are exposed, how serious it is and how to close every gap.
-
Penetration testing and vulnerability assessment
Web apps, APIs, mobile apps and networks, following OWASP guides. Technical report with evidence and priorities, an executive summary and a retest after the fixes.
-
AI system security
Direct and indirect prompt injection, data exfiltration, agent tool abuse, jailbreaks. Red teaming of your assistant and tailored guardrails, mapped to the OWASP Top 10 for LLM Applications.
-
Secure by design and infrastructure
Threat modelling, code review, server and cloud hardening, secrets management, backup and disaster recovery, monitoring and release pipelines with automated checks.
Scan in progress
Sample report
- High Indirect prompt injection in the AI assistant Open Fixed
- High Access to other customers’ data through the API Open Fixed
- Medium Session tokens not revoked on password change Open Fixed
- Medium Library with a known vulnerability (CVE) Open Fixed
- Low Missing HTTP security headers Open Fixed
Illustrative simulation: no real customer data.
We do it in our own code first
- Data isolated per customer A separate database schema for each company, or row-level access rules: nobody reads anyone else’s data.
- Encrypted secrets Third-party credentials and tokens encrypted with AES-256-GCM, never in plain text in code or logs.
- Signatures everywhere Webhooks verified with HMAC signatures, signed links, device firmware signed with RSA-3072.
- Controlled releases Deploys only run if automated checks pass, with keys restricted to the bare minimum.
Case studies
Real projects, told without names: our clients trust us with their data and processes, and confidentiality is part of the job.
- Property management The property management platform where AI does the work and the firm checks it Being trialled with a pilot firm
- Local marketing and manufacturing From sales network to doorstep: the pipeline for 3D-printed NFC displays In production since October 2026
- Restaurants The box that prints kitchen tickets on its own, without losing an order Working prototype on real hardware
- Local retail A loyalty app rebuilt for iOS and Android without losing a single customer Feature-complete, in device testing
Our own products, used every day
Besides yourang.ai we publish and maintain our own products. That is where we test, before anywhere else, what we later bring to our clients’ projects.
-
iOS and Android app
Quiz Patente Ufficiale
Over 5 million downloads, rated 4.6 out of 5
One of Italy’s most downloaded apps for the driving licence theory test: official quizzes, mock exams, explanations for every question and error review.
Website Quiz Patente UfficialeApp Store Quiz Patente UfficialeGoogle Play Quiz Patente Ufficiale
-
App with an AI coach
OltreFit
On the App Store and Google Play
A strength coach for iPhone and Android: an AI coach writes and adapts the training plan on real data, while 33 deterministic rules check that every proposal is feasible and safe.
-
Multi-tenant CRM
Relatia CRM
Each company’s data in its own schema
The CRM for businesses that collect leads online: leads from Meta, Google and the website routed automatically, pipelines, WhatsApp, appointments and an AI copilot that drafts follow-ups.
How we work
-
Listening
A call to understand goals, processes, constraints and risks. It ends with a written proposal with phases, timeline and costs.
-
Prototype
A first working version, on real data where possible, to decide on facts before investing.
-
Secure development
Frequent releases, automated tests, threat modelling and code review at every step.
-
Production and care
Go-live, monitoring, updates and support. The software stays alive and under control.
Frequently asked questions
What does Softboom do?
Softboom is an Italian software house founded in 2013 in San Vito dei Normanni (Brindisi). It builds AI agents and voice assistants, automation, custom software and cybersecurity services for companies. Its flagship product is yourang.ai, the AI phone assistant used by 970 Italian SMBs.
Do you only work with companies in Italy?
We are based in Puglia, Italy, and work remotely with companies wherever they are. Our products are used across Italy, and we run projects in English as well as Italian.
How much does a project cost?
It depends on features, integrations and the security level required. After a first call we send you a written proposal with phases, timeline and costs. For AI projects we often start with a prototype, so you see results before investing in the full project.
How do you protect data when you use AI?
We send models only the data the task needs, configure providers so data is not used for training, keep production data in Europe and limit what an agent can do to the user’s permissions. Every action is logged.
Do you run penetration tests on software built by others?
Yes. We test web apps, APIs, mobile apps and networks from any vendor, with a written scope and authorisation agreed before we start. You receive a report with vulnerabilities ranked by severity and the fixes to apply.
Who builds yourang.ai?
yourang.ai is Softboom’s flagship product: we design, build and run it. It answers the phone 24/7, books appointments, calls customers back and also works on WhatsApp, Instagram, Facebook and websites.
Tell us what you want to build.
Write a few lines about your project: we will reply personally to set up a first call.