Tools
Tools you can actually run.
Built on real client work, hardened in production, then open-sourced. CLIs, scanners, and apps your team can pick up today, most install in under a minute.
Open Source
Seven tools, all open source.
Every one was born from a client engagement, the people who build these build your platform.
ReconX
Checks your website for security problems.
27 built-in checks that cover the security industry's standard list, plus a check for a common, often-missed mistake: one user accidentally being able to see another user's data. AI reviews every result so your team isn't stuck chasing false alarms.
- 6 scan modes, from a quick check to a full review
- AI-checked results, using Claude, GPT-4, or your own model
- Reports as HTML, PDF, Word, or JSON
Smurf
One CLI for Terraform, Docker, and Helm.
A Go-based CLI that collapses build, plan, and deploy into a single workflow. Engineers stop context-switching between three tools and three sets of flags.
- One
smurf.yamlacross all three tools - Multi-registry: ECR, GCR, ACR, Docker Hub, GHCR
- Ships as a GitHub Action
SyncerD
Beat Docker Hub rate limits.
A lightweight registry sync engine that mirrors container images into ECR, ACR, GCR, and GHCR. Keeps pipelines fast, cuts egress costs, and runs anywhere.
- Smart tag detection, only syncs what's missing
- Run as CLI, GitHub Action, or Kubernetes CronJob
- Multi-arch images, optional Slack alerts
Naoru
AI that reads your failed pipeline and tells you why.
When a build fails, Naoru reads the logs and your diff, finds the root cause, and posts a fix on the PR. One sticky comment, auto-updated. Never breaks your pipeline.
- 6 LLM providers (Anthropic, OpenAI, Groq, and more)
- GitHub, GitLab, Jenkins, Docker, or local CLI
- Fail-safe by default, always exits 0
Vanisec
Share a secret that vanishes after one use.
Production-grade ephemeral secret sharing. Exchange passwords, API keys, and credentials through encrypted, single-use links that auto-delete, so sensitive data never lingers in chat or email.
- Encrypted, single-use links with auto-deletion
- Self-hosted, Redis-backed, your data stays yours
- Production-ready Helm chart included
Pod Resource Scanner
Kubernetes resource monitoring, made simple.
Scans CPU, memory, and disk usage across your pods so you can right-size workloads and catch resource waste. Runs as a CronJob and can report straight to a Google Sheet.
- Cluster-wide CPU, memory & disk usage
- Runs on a schedule as a Kubernetes CronJob
- Optional Google Sheets reporting
Octoboard
A GitHub dashboard for engineering teams.
DORA metrics and delivery insights for your whole org, free. See deployment frequency, lead time, and team activity at a glance, no setup beyond connecting GitHub.
- DORA metrics: deploy frequency, lead time, and more
- Team and repository dashboards
- Free to use, connect GitHub and go
Open By Default
Looking for modules, not tools?
Beyond these tools, we publish 200+ Terraform modules, 40+ reusable CI/CD workflows, Helm charts, and reference repos, all production-tested and open source.
Browse open sourceCloud Infrastructure Assessment
See exactly where your cloud stands.
A senior engineer reviews your architecture, cost, security, and reliability, then sends back a prioritized findings report, the fixes that matter most, in order.
- Architecture & scale
- Cost & efficiency
- Security & reliability
Complimentary · no obligation · no sales pressure
Work With Us
The people who build these build your platform.
If this is the kind of engineering you want on your side, let's talk about what you're working on.
Talk to an Expert