We build and implement open-source, self-hosted software, backed by hands-on consulting and tailored engineering. We help organizations manage security risk and compliance evidence, connect systems, and turn data into useful analytics. Through data pipelines, automation, and agentic workflows, we reduce manual work and give teams time back.
Run our tools in your own environment, with your infrastructure, identity, and data under your control.
| Project and quickstart | What it does |
|---|---|
| agent-bom | Security scanning and a self-hosted control plane for AI, MCP, and cloud infrastructure. |
| grc-lake | Collect read-only compliance evidence, evaluate controls, and export reviewable audit workpapers. |
Both projects are available under the Apache-2.0 license and are free to use and self-host. You cover your own infrastructure and any third-party service costs. Consulting services are optional.
We offer services across:
- Security and security analytics: security data platforms, visibility into cloud and AI environments, and integrations for investigating risk.
- Compliance and governance: evidence collection workflows, control evaluation, and audit preparation.
- Data and analytics: data platforms, pipelines, dashboards, and reporting that turn information into useful decisions.
- AI and automation: AI agents, agentic workflows, and system integrations that reduce repetitive work.
- Software implementation and customization: self-hosted deployment, integration with your existing systems, and software tailored to your requirements.
Explore our services and discuss your project →
- Andres Linero — Co-founder
- Wagdy Saad — Co-founder
For bugs, feature requests, and contributions, use the relevant project's issues and contributing guidance. For consulting or tailored implementation, contact us through our website.