Security
Rapiscan Systems
Rebuilt a legacy airport screening platform as a modern web product in 12 months
Overview
Rapiscan Systems needed to modernize a mission-critical airport screening platform without disrupting live operations. We rebuilt a legacy Windows desktop application as a web-based product that preserved operator workflows while improving accessibility and long-term maintainability.
The Challenge
The legacy C-based desktop application powered high-stakes operational workflows: terminal status monitoring, live X-ray viewing, operator session tracking, threat injection, and performance reporting. Reporting depended on complex stored procedures, and any performance regression would be immediately visible to operators.
Constraints included a fixed timeline and budget, distributed teams, and the need to match legacy behavior closely enough to avoid retraining.
The Solution
We led the modernization in two phases, validating feasibility with an MVP and then delivering full platform parity on a web stack.
Architecture and Delivery
- HTML5 + Angular front-end with a .NET 4.8 Web API layer
- SQL-backed reporting with parity against legacy outputs
- Live terminal monitoring, remote viewing, and operator session tracking
- Secure remote control via Guacamole for operational access
- Automated builds and packaging using Jenkins for predictable releases
Workflow Validation
We validated critical workflows with client staff through structured walkthroughs and adoption checks, focusing on operator readiness and report parity.
Outcomes
- Delivered a full desktop-to-web migration in 12 months
- Deployed to Hong Kong International Airport and additional clients
- Preserved operational workflows while improving maintainability
- Enabled modern UI with multilingual support and light/dark themes
Proof: Adoption Criteria (Excerpt)
| Workflow | Adoption Criteria | Validation Result |
|---|---|---|
| Terminal status monitoring | Accurate online/offline status | Passed parity checks |
| Operator visibility | Active user sessions per terminal | Verified against legacy |
| Live X-ray monitoring | Remote read-only feed | Validated in target environments |
| Remote control | Secure access to terminal operations | Implemented via Guacamole |
| Threat injection | Inject threats + log results | End-to-end workflow validated |
| Reporting | Reports match legacy outputs | Parity achieved |
| UI experience | Responsive light/dark UI | Delivered |
Outcomes
Delivery timeline
12 months
Deployment
Hong Kong International Airport
Workflow parity
Validated across core operations