Filter by:
🛡️
Cybersecurity

Hardened Infrastructure & Zero-Trust

Secure your data assets using hardened Linux & BSD firewalls, intrusion detection, and zero-trust architectures built for modern threat landscapes.

mylinuxbsdOS ★ OpenBSD pf Suricata IDS Zeek NSM eBPF AppArmor Wazuh SIEM CIS Benchmarks fail2ban
  • Zero-trust network architecture - hardened mylinuxbsdOS, PostgreSQL, MongoDB, MySQL, Docker & Kubernetes
  • Hardened OS baseline (CIS Level 2) on mylinuxbsdOS/Alpine/OpenBSD
  • Real-time intrusion detection with automated response
  • PDPA-aligned data protection audit & remediation
  • Penetration testing & vulnerability assessment reports
🕵️
Threat Intelligence

Unified Threat Intelligence & OSINT

Deploy and operate open-source threat intel platforms - indicator lifecycle, MITRE ATT&CK correlation, and automated dissemination - powered by CoreOSINT, our self-developed in-house platform.

MISP OpenCTI TheHive YETI STIX/TAXII 2.1 MITRE ATT&CK CoreOSINT ★
  • MISP & OpenCTI deployment with live feed connectors (CISA KEV, AlienVault OTX, URLhaus, ThreatFox)
  • CoreOSINT - our self-developed Unified Threat Intelligence Platform (indicator lifecycle, scoring engine, knowledge graph)
  • MITRE ATT&CK technique mapping & hunting matrix dashboards
  • STIX 2.1 / TAXII 2.1 normalization and automated intelligence dissemination
  • Watchlists, RBAC, and audit-logged analyst workflows
🔐
AI Security

AI & LLM Security

Red-team and harden your LLM stack with open-source tooling - prompt injection & jailbreak defense, RAG security, guardrails, and hallucination grounding.

Proof, not just tooling familiarity: we design, build, and operate CoreAI Gateway, our own production AI security control plane in front of a self-hosted LLM, RAG store, and MCP tool layer - CIS MCP Server Benchmark v1.0.0-aligned server-identity pinning and transport auth, LlamaFirewall-style agent goal-alignment checking, Postgres row-level-security-enforced per-document RAG access control, tamper-evident hash-chained audit trails, and continuous red-teaming via NVIDIA's garak.

Garak PyRIT NeMo Guardrails Guardrails AI LLM Guard Presidio Ragas Rebuff
  • Prompt injection & jailbreak red-teaming with open-source scanners (Garak, PyRIT, Rebuff)
  • Guardrails & policy enforcement at the inference layer (NeMo Guardrails, Guardrails AI, LLM Guard)
  • RAG security - retrieval/embedding poisoning prevention & vector store access hardening
  • Rate limiting & abuse throttling for LLM API endpoints
  • Shadow AI discovery - visibility & mitigation of unsanctioned AI tool usage across the org
  • Data leakage prevention - PII & secrets redaction in prompts and outputs (Microsoft Presidio)
  • Grounding & hallucination evaluation against source-of-truth (Ragas)
  • Model hijacking & extraction defense - API key hardening, anomaly detection, output monitoring
🤖
Applied AI & ML

Self-Hosted LLM & ML Pipelines

Deploy cutting-edge AI on your own hardware. No data leaves your premises. Optimized inference, fine-tuning, agentic pipelines, and RAG for Malaysian enterprises.

Ollama llama.cpp vLLM LangChain PyTorch ONNX Milvus Agentic Pipelines OpenClaw Hermes (NousResearch) CrewAI AutoGen
  • Local LLM deployment - Qwen, Llama, DeepSeek, GLM, Gemma, Mistral, Phi-3, Hermes - on-premise
  • GPU/CPU hardware selection & VRAM optimization
  • Retrieval-Augmented Generation (RAG) pipeline setup
  • Custom fine-tuning on proprietary datasets (LoRA/QLoRA)
  • Agentic workflows for autonomous moderation & content ops - see Hartanah Bumiputera below
  • Personal & team AI agent deployment (OpenClaw, CrewAI, AutoGen) wired into chat, email, and internal tools
  • REST API endpoint + Web UI for internal user adoption
☸️
Cloud-Native

Container & Kubernetes Orchestration

High-efficiency application deployment using Docker, Kubernetes, Red Hat OpenShift, and the M2KS modernization framework for legacy app migrations.

Docker Kubernetes OpenShift Helm ArgoCD Istio M2KS Tekton CI
  • Kubernetes cluster design, setup & hardening (on-prem or cloud)
  • M2KS legacy application containerization & migration
  • GitOps pipelines with ArgoCD / Flux CD
  • Service mesh implementation (Istio / Linkerd)
  • Monitoring stack: Prometheus + Grafana + Loki
🌐
VPN & Connectivity

Next-Gen Secure Connectivity

Lightweight mesh networks, secure tunneling, and traditional corporate gateways - all configured with security-first, zero-bloat principles.

WireGuard Tailscale OpenVPN Cloudflared Headscale Nebula
  • WireGuard mesh VPN across multi-branch offices
  • Tailscale / Headscale self-hosted coordination server
  • Cloudflared Argo tunnels - zero port-forwarding exposure
  • OpenVPN gateway for legacy device compatibility
  • Split-tunneling, MFA, and DNS-over-HTTPS hardening
🖥️
Virtualization

Proxmox & Bare-Metal Hypervisors

Replace expensive VMware licenses with Proxmox VE. Full clustering, HA, shared storage, and live migration - at zero licensing cost.

Proxmox VE KVM/QEMU ZFS Ceph LXC Packer
  • Proxmox cluster design & VMware migration (V2V)
  • ZFS storage pools with snapshot & replication schedules
  • Ceph distributed storage for HA shared block storage
  • Backup solution: Proxmox Backup Server setup
  • Custom VM templates & cloud-init automation
📡
Edge Networking

OpenWrt & Advanced Routing

Custom router firmware, intelligent QoS, advanced VLAN segmentation, and BGP/OSPF dynamic routing using battle-proven open-source tooling.

OpenWrt Asuswrt-Merlin pfSense/OPNsense BIRD2 FRRouting VLANs
  • Custom OpenWrt build & flashing for enterprise-grade devices
  • BGP/OSPF dynamic routing for multi-WAN failover
  • VLAN segmentation: IoT, Corp, Guest, CCTV isolation
  • QoS & traffic shaping for VoIP & video conferencing
  • Asuswrt-Merlin scripts for advanced home/SME setups
💿
Free Download

mylinuxbsdOS - Secure Linux Desktop

Our own Debian 13–based operating system, free to download. Encrypt the whole disk at install, boot with Secure Boot, and pick the Full workstation or a lean command-line Minimal core.

Debian 13 Cinnamon LUKS2 encryption Secure Boot Full / Minimal Linux 6.12
  • Full-disk encryption offered right in the installer
  • Full edition: OnlyOffice, Stirling PDF, Krita, VLC, Firefox, Chromium, Tor & Mullvad Browser, plus a privacy/security kit
  • Minimal edition: core system with SSH, no desktop, about 3 GB
  • Automatic security updates switched on
  • Older versions kept in an archive

Products we've shipped, not just deployed

Beyond client engagements, we design, build, and operate our own open-source platforms end to end.

CoreOSINT - Threat Intelligence Platform

Beyond deploying MISP and OpenCTI for clients, we build and run our own open-source Unified Threat Intelligence Platform: indicator lifecycle management, adversary & campaign profiling, MITRE ATT&CK correlation, a source-reliability scoring engine, an interactive knowledge graph, and STIX 2.1 / TAXII 2.1 dissemination - Debian-based and Docker-deployed, end to end.

FastAPI + React STIX 2.1 / TAXII 2.1 MITRE ATT&CK Mapping RBAC + Audit Log EPSS / CISA KEV Scoring
Ask About CoreOSINT →

Hartanah Bumiputera - Autonomous Real Estate Portal

A comprehensive Bumiputera property marketplace for Malaysia - buy, rent, or auction listings, bilingual (Malay/English) guides & articles, and buyer/seller matching - running on self-hosted LLMs and agentic pipelines that handle listing moderation, content generation, and inquiry triage largely without human intervention.

Agentic LLM Pipelines Self-Hosted Inference Automated Listing Moderation Bilingual Content Generation
Visit Hartanah Bumiputera ↗

CariPakar - Home Services Marketplace

A Malaysia-wide home services marketplace connecting homeowners with verified plumbers, electricians, aircond techs, solar installers, and more - built on a double-blind trust & review system, a full Premium provider economy (points, boosts, referrals), and an AI support assistant handling visitor chat.

Double-Blind Reviews Premium Points Economy FastAPI + Postgres AI Support Assistant
Visit CariPakar ↗

Jelajah Halal - Muslim-Friendly Travel Portal

A Muslim-friendly travel guide to Malaysia - mosques, halal food, attractions, and family activities across all 14 states, with live prayer times, Qibla direction, an AI trip planner, and an installable offline-capable PWA.

Prayer Times & Qibla AI Trip Planner 4 Languages Offline PWA
Visit Jelajah Halal ↗

Pre-built project templates

Pick a standard blueprint and we'll deploy it in days, not months - at a fixed price.

Network

Secure WireGuard Mesh - 5 Branches

Full-mesh WireGuard VPN connecting 5 office branches. Includes Headscale coordination server, split-tunneling, and MFA via Authelia.

3–5 days RM 2,800 fixed 5 sites
AI

Private LLM Chat - 50 Internal Users

Self-hosted Llama 3 on a single GPU server with Open WebUI, user auth, and RAG connected to your SharePoint/Google Drive docs.

5–7 days RM 6,500 fixed Hardware by client
Cloud

Kubernetes on Bare-Metal - Prod Ready

3-node K8s cluster with Calico CNI, cert-manager, ingress-nginx, Prometheus/Grafana, and ArgoCD GitOps pipeline pre-wired.

7–10 days RM 8,200 fixed 3+ nodes
Virtualization

VMware → Proxmox Migration

Full V2V migration of up to 20 VMs from ESXi/vSphere to Proxmox VE. Includes ZFS setup, backup server, and staff handover training.

10–14 days RM 12,000 fixed Up to 20 VMs

Our open-source stack maturity

Assessed quarterly. Only battle-tested tools make it here.

Security & Network

WireGuard
Adopt
OpenBSD pf
Adopt
Suricata
Adopt
Tailscale
Adopt
Cloudflared
Trial
MISP
Adopt
OpenCTI
Adopt
CoreOSINT
Trial
NeMo Guardrails
Trial
Garak
Assess

AI / Cloud / Infra

Kubernetes
Adopt
Proxmox VE
Adopt
Ollama / vLLM
Trial
ArgoCD
Adopt
Istio
Assess
Hermes (NousResearch)
Trial
OpenClaw
Assess

Ready to ditch the proprietary tax?

Pick a blueprint, post a custom project, or just talk to an engineer first.

Start a Project See Cost Savings