Ruji Labs, a Malaysian product studio that builds and runs complete software

We build and run complete software for Malaysian businesses. The database, the payments and the rules in between.

Product Studio

Orders in WhatsApp. Invoices in Excel. Approvals in somebody’s head.

One system your team opens every morning, with the order, the payment and the alert in the same place.

We design it, build it on a real backend, connect the payment gateway and stay with it after launch. The same way we run our own products.

Products in production

Every one of these shipped to production and runs on its own backend.

What sits under every product

The screens are the part you see. These four are the part that decides whether the business can run on it.

  • The backend

    MySQL or PostgreSQL, accounts, roles, API design and an audit trail, modelled on how your business actually works.

    Every change has a name and a time next to it.

  • The payments

    Curlec and Razorpay checkout with FPX and e-wallets, subscriptions, one-time payments and webhooks verified with HMAC-SHA256.

    The money lands and the order updates itself.

  • The alerts

    Telegram bots, Brevo email and SMS, sent the moment something happens.

    The right person hears about it before the customer asks.

  • The safeguards

    PDPA compliance, encrypted sensitive data, role-based access, audit logs and security headers from day one.

    You have an answer when a client’s IT team sends the checklist.

The proof is in the numbers we can show

products shipped to production
13
automated tests on NodeX alone
189
biogas plants run on one platform
24
to a working form in NodeX
2 min

  • Plans and limits

    Multi-tenant systems with plan enforcement, subscription billing and usage limits.

  • Payment flows

    Order creation, signature verification, webhook handling and refunds, end to end.

  • The stack

    Next.js, React, TypeScript, Tailwind CSS, MySQL, Supabase, Prisma, Curlec, Brevo and the Telegram Bot API.

Need a website, not a whole product?

Start from one of our landing page templates and we make it yours. Starter sites from RM500.

See templatesSee pricing

Questions owners ask before they start

Still deciding? Send the brief and ask us directly.

Have you actually shipped anything?

Thirteen products have shipped to production: NodeX, Berkira, SemakCV, Conecta, e-Tempah, RSVP-Lah, WorkIt and PL-300 Drill among them, plus client platforms like Safety Hub, an operations system for 24 biogas plants and monitoring for 138 solar sites. Each has its own backend, payments and business logic.

How much will it cost?

Starter sites start from RM500, advanced sites from RM1,500 and custom apps such as e-commerce, CRM, booking or SaaS from RM4,500. Care plans start from RM200 a month. You get a fixed quote before any work starts.

Can my customers pay online with FPX?

Yes. We connect Curlec and Razorpay for FPX and e-wallets, with subscriptions or one-time payments, and verify every payment webhook with HMAC-SHA256 so an order is only marked paid when the money is real.

Is my customers’ data safe under PDPA?

Every product ships with PDPA compliance, encryption for sensitive data, role-based access, audit logs and security headers. These are in the first release, not added later.

What if it breaks after launch?

We write automated tests for the parts that handle money and access. NodeX alone has 189 tests across 17 files covering plan limits, subscription expiry, anti-spam and payments. A care plan keeps us on it after launch.