Can someone help with evaluating my application?

1

Hi everyone!

I’m preparing my Global Talent Visa application in Digital Technology and would really appreciate a review of my route choice and evidence.

I have a bit over 5 years of experience working in cybersecurity (security operations, cloud security, incident response) alongside full-stack product engineering and founding my own products.

Over the last 2–3 years I’ve focused on:

  • Building and launching a multi-platform productivity app (macOS, iOS, watchOS) that I designed and engineered myself. It launched in June 2025, has around 15k installs, and has generated about USD 500 in revenue so far.
  • Architecting and building an online automotive marketplace platform (web app, APIs, admin tools). This product is pre-launch with 0 revenue at the moment, but the core platform is built and ready for pilots.

I technically qualify for Exceptional Talent on years of experience, but my profile still feels closer to Exceptional Promise: most of my major achievements and public recognition are recent and still growing. I also have a national-level award from around 2016 for a digital innovation project and I’m unsure how much weight that still carries.

Letters of Recommendation – their roles, recognition and what they say

1. Lead Digital Product & Project Manager / former founder
• Senior product leader at a large regional group, with 10+ years driving digital products and transformations.
• Co-founder and former Managing Director of a digital product company; recognised in Forbes 30 Under 30 for achievements in product and digital transformation.
• Has mentored my work for about three years and knows my product engineering and founder work in detail.
• In his letter he describes how I conceived and built my multi-platform app end-to-end, validates the traction metrics (installs, conversion, backend load), reviews my architecture for the marketplace platform, and explains why he believes I fit the Exceptional Promise profile and will contribute to UK product-led tech companies.

2. Senior Cloud Architect & System Manager (ex-senior colleague at a product-led tech company) • Senior technologist who provided technical oversight on my work at Vivaticket (product-led ticketing platforms).• Worked directly with me for 2+ years across incident investigations, threat risk assessments, identity hardening, and cloud reviews.• In his letter he details a production incident I helped resolve by tracing auth flows and privilege mappings, the identity and email security controls I implemented (MFA, least-privilege, SPF/DKIM/DMARC), AWS hardening steps, and the playbooks I authored. He vouches for my security-by-design approach and my ability to turn findings into implemented changes.

3. Senior Cybersecurity Instructor & Consultant
• Head of global research and intelligence division and Chief Information Security Officer at a cyber-intelligence firm; also a chapter director and technical adviser in well-known cybersecurity communities and conferences.
• Has mentored me for several years, starting from my CEH preparation, and has reviewed my work from multiple roles.
• In his letter he describes my performance in complex attack simulations, the quality of my threat assessments and security designs in previous roles, and how I apply security-by-design principles in my own products. He states that I can conduct high-quality assessments, design secure architectures and build reliable, protected digital products, and that I have strong potential to contribute to the UK cybersecurity and technology sectors.

Planned criteria and evidence (high level)

I plan to apply under Exceptional Promise with:

  • Mandatory Criterion - recognition as an emerging leader
  • Optional Criterion 1 - innovation
  • Optional Criterion 2 - significant technical / commercial / entrepreneurial contributions as a founder

Mandatory Criterion - recognition as an emerging leader

Evidence I am submitting:

  1. MC1 - WakeMinder user traction App Store Connect analytics showing total installs (~15k), active devices/sessions over time, growth curves and country distribution, plus selected user reviews to show real adoption and recognition.

  2. MC2 - WakeMinder founder role and product overview Document explaining that I am the founder, product owner and sole engineer, with screenshots of the Xcode project, system architecture diagram, CloudKit backend activity (requests, bandwidth) and Apple Developer account ownership (single-user team).

Optional Criterion 1 - innovation

Evidence I am submitting:

  1. OC1-1 - WakeMinder technical architecture and innovation Detailed breakdown of the multi-platform Swift/SwiftUI architecture, CloudKit sync engine, macOS wake agent and background helpers, explaining why wake-triggered reminders and this architecture are technically novel.

  2. OC1-2 - TheCarMarket technical innovation Technical description of the marketplace architecture (Next.js + TypeScript, Supabase/Postgres with RLS, AWS S3 + CloudFront, Vercel), including the schema, modules (dealers, garages, spare parts, etc.) and system diagrams, showing a production-ready but pre-launch platform.

  3. OC1-3 - USB malware scan automation Original security automation I engineered in PowerShell that integrates Windows Defender scans with SHA-256 hashing and structured, tamper-evident logs to speed USB triage and generate reproducible forensic outputs. Includes flow diagram, key code blocks, and sample redacted reports.

Optional Criterion 2 - significant technical / commercial / entrepreneurial contribution

Evidence I am submitting:

  1. OC2-1 - WakeMinder commercial and entrepreneurial contribution Evidence of my founder-led commercial work: App Store Sales & Trends screenshots (around USD 500 revenue since June 2025), breakdown by products, paywall and pricing screens, release history, and examples of PRO-gated features and upgrade flows that I designed and implemented.

  2. OC2-2 - TheCarMarket founder’s significant technical contribution (pre-launch) Evidence of my role as founder and lead engineer: commit history, CI/CD pipeline on Vercel (preview and production), Supabase RLS policies, admin dashboard and feature flags, all showing a secure, operational platform that is fully built but still pre-launch with 0 revenue.

My cybersecurity work (security analyst / specialist roles and a small paid side consulting engagement) forms part of my overall profile and will be described in the CV and personal statement, but my core evidence focuses on the product-led work above.

My questions

  1. Given that I have just over 5 years of experience, but most major achievements and recognition are from the last few years, would you recommend applying as Exceptional Promise or Exceptional Talent?

  2. Is the combination of a multi-platform productivity app (with installs and revenue), a pre-launch marketplace platform, and a cybersecurity background coherent and strong enough for the three criteria I’ve chosen, or do you see obvious gaps?

  3. Does a national award from 2016 still add meaningful value for the mandatory criterion in my case, or is it likely to be discounted because of its age unless very clearly linked to my current work?

  4. My background mixes cybersecurity roles and founder / product engineering work. Is it better to keep the core evidence focused on the product-led pieces and treat cybersecurity mainly as context, or should I include at least one concrete cybersecurity evidence piece under “significant technical contribution”?

  5. One of my recommenders is a senior Cloud Architect and System Manager who directly oversaw my work at my previous product-led company. Is this acceptable as an “established expert,” and is it stronger than a letter from a Managing Director of a non-tech but tech-enabled company?

  6. For my marketplace platform, the system is fully built but pre-launch with 0 revenue. Is this still acceptable as evidence for innovation and significant technical contribution if I am transparent about its stage and focus on architecture, complexity and roadmap rather than traction?

  7. My productivity app has around 15k installs and about USD 500 revenue since June 2025. Is that level of revenue meaningful enough to present as commercial traction, or should I frame it mainly as early validation and growth potential rather than focusing on the absolute amount?

  8. For my recommenders, do I need to upload their full CVs as separate documents, or is it sufficient that each letter includes a short bio (role, experience, achievements) and a link to their LinkedIn profile? If a CV is preferred, is it acceptable for me to generate it based on their LinkedIn, or should it always come directly from them?

I’d really appreciate any feedback on the route choice and overall strength of this evidence set before I finalise everything.

Thank you so much for your time and help!