Filter by:
🛡️
Cybersecurity

Hardened Infrastructure & Zero-Trust

Secure your data assets using hardened Linux & BSD firewalls, intrusion detection, and zero-trust architectures built for modern threat landscapes.

OpenBSD pf Suricata IDS Zeek NSM eBPF AppArmor Wazuh SIEM CIS Benchmarks fail2ban
  • Zero-trust network architecture design & implementation
  • Hardened OS baseline (CIS Level 2) on Alpine/OpenBSD
  • Real-time intrusion detection with automated response
  • PDPA-aligned data protection audit & remediation
  • Penetration testing & vulnerability assessment reports
🕵️
Threat Intelligence

Unified Threat Intelligence & OSINT

Deploy and operate open-source threat intel platforms — indicator lifecycle, MITRE ATT&CK correlation, and automated dissemination — powered by CoreOSINT, our self-developed in-house platform.

MISP OpenCTI TheHive YETI STIX/TAXII 2.1 MITRE ATT&CK CoreOSINT ★
  • MISP & OpenCTI deployment with live feed connectors (CISA KEV, AlienVault OTX, URLhaus, ThreatFox)
  • CoreOSINT — our self-developed Unified Threat Intelligence Platform (indicator lifecycle, scoring engine, knowledge graph)
  • MITRE ATT&CK technique mapping & hunting matrix dashboards
  • STIX 2.1 / TAXII 2.1 normalization and automated intelligence dissemination
  • Watchlists, RBAC, and audit-logged analyst workflows
🔐
AI Security

AI & LLM Security

Red-team and harden your LLM stack with open-source tooling — prompt injection & jailbreak defense, RAG security, guardrails, and hallucination grounding.

Garak PyRIT NeMo Guardrails Guardrails AI LLM Guard Presidio Ragas Rebuff
  • Prompt injection & jailbreak red-teaming with open-source scanners (Garak, PyRIT, Rebuff)
  • Guardrails & policy enforcement at the inference layer (NeMo Guardrails, Guardrails AI, LLM Guard)
  • RAG security — retrieval/embedding poisoning prevention & vector store access hardening
  • Rate limiting & abuse throttling for LLM API endpoints
  • Shadow AI discovery — visibility & mitigation of unsanctioned AI tool usage across the org
  • Data leakage prevention — PII & secrets redaction in prompts and outputs (Microsoft Presidio)
  • Grounding & hallucination evaluation against source-of-truth (Ragas)
  • Model hijacking & extraction defense — API key hardening, anomaly detection, output monitoring
🤖
Applied AI & ML

Self-Hosted LLM & ML Pipelines

Deploy cutting-edge AI on your own hardware. No data leaves your premises. Optimized inference, fine-tuning, agentic pipelines, and RAG for Malaysian enterprises.

Ollama llama.cpp vLLM LangChain PyTorch ONNX Milvus Agentic Pipelines OpenClaw Hermes (NousResearch) CrewAI AutoGen
  • Local LLM deployment — Qwen, Llama, DeepSeek, GLM, Gemma, Mistral, Phi-3, Hermes — on-premise
  • GPU/CPU hardware selection & VRAM optimization
  • Retrieval-Augmented Generation (RAG) pipeline setup
  • Custom fine-tuning on proprietary datasets (LoRA/QLoRA)
  • Agentic workflows for autonomous moderation & content ops — see Hartanah Bumiputera below
  • Personal & team AI agent deployment (OpenClaw, CrewAI, AutoGen) wired into chat, email, and internal tools
  • REST API endpoint + Web UI for internal user adoption
☸️
Cloud-Native

Container & Kubernetes Orchestration

High-efficiency application deployment using Docker, Kubernetes, Red Hat OpenShift, and the M2KS modernization framework for legacy app migrations.

Docker Kubernetes OpenShift Helm ArgoCD Istio M2KS Tekton CI
  • Kubernetes cluster design, setup & hardening (on-prem or cloud)
  • M2KS legacy application containerization & migration
  • GitOps pipelines with ArgoCD / Flux CD
  • Service mesh implementation (Istio / Linkerd)
  • Monitoring stack: Prometheus + Grafana + Loki
🌐
VPN & Connectivity

Next-Gen Secure Connectivity

Lightweight mesh networks, secure tunneling, and traditional corporate gateways—all configured with security-first, zero-bloat principles.

WireGuard Tailscale OpenVPN Cloudflared Headscale Nebula
  • WireGuard mesh VPN across multi-branch offices
  • Tailscale / Headscale self-hosted coordination server
  • Cloudflared Argo tunnels — zero port-forwarding exposure
  • OpenVPN gateway for legacy device compatibility
  • Split-tunneling, MFA, and DNS-over-HTTPS hardening
🖥️
Virtualization

Proxmox & Bare-Metal Hypervisors

Replace expensive VMware licenses with Proxmox VE. Full clustering, HA, shared storage, and live migration—at zero licensing cost.

Proxmox VE KVM/QEMU ZFS Ceph LXC Packer
  • Proxmox cluster design & VMware migration (V2V)
  • ZFS storage pools with snapshot & replication schedules
  • Ceph distributed storage for HA shared block storage
  • Backup solution: Proxmox Backup Server setup
  • Custom VM templates & cloud-init automation
📡
Edge Networking

OpenWrt & Advanced Routing

Custom router firmware, intelligent QoS, advanced VLAN segmentation, and BGP/OSPF dynamic routing using battle-proven open-source tooling.

OpenWrt Asuswrt-Merlin pfSense/OPNsense BIRD2 FRRouting VLANs
  • Custom OpenWrt build & flashing for enterprise-grade devices
  • BGP/OSPF dynamic routing for multi-WAN failover
  • VLAN segmentation: IoT, Corp, Guest, CCTV isolation
  • QoS & traffic shaping for VoIP & video conferencing
  • Asuswrt-Merlin scripts for advanced home/SME setups

Products we've shipped, not just deployed

Beyond client engagements, we design, build, and operate our own open-source platforms end to end.

CoreOSINT — Threat Intelligence Platform

Beyond deploying MISP and OpenCTI for clients, we build and run our own open-source Unified Threat Intelligence Platform: indicator lifecycle management, adversary & campaign profiling, MITRE ATT&CK correlation, a source-reliability scoring engine, an interactive knowledge graph, and STIX 2.1 / TAXII 2.1 dissemination — Debian-based and Docker-deployed, end to end.

FastAPI + React STIX 2.1 / TAXII 2.1 MITRE ATT&CK Mapping RBAC + Audit Log EPSS / CISA KEV Scoring
Ask About CoreOSINT →

Hartanah Bumiputera — Autonomous Real Estate Portal

A comprehensive Bumiputera property marketplace for Malaysia — buy, rent, or auction listings, bilingual (Malay/English) guides & articles, and buyer/seller matching — running on self-hosted LLMs and agentic pipelines that handle listing moderation, content generation, and inquiry triage largely without human intervention.

Agentic LLM Pipelines Self-Hosted Inference Automated Listing Moderation Bilingual Content Generation
Visit Hartanah Bumiputera ↗

Pre-built project templates

Pick a standard blueprint and we'll deploy it in days, not months—at a fixed price.

Network

Secure WireGuard Mesh — 5 Branches

Full-mesh WireGuard VPN connecting 5 office branches. Includes Headscale coordination server, split-tunneling, and MFA via Authelia.

3–5 days RM 2,800 fixed 5 sites
AI

Private LLM Chat — 50 Internal Users

Self-hosted Llama 3 on a single GPU server with Open WebUI, user auth, and RAG connected to your SharePoint/Google Drive docs.

5–7 days RM 6,500 fixed Hardware by client
Cloud

Kubernetes on Bare-Metal — Prod Ready

3-node K8s cluster with Calico CNI, cert-manager, ingress-nginx, Prometheus/Grafana, and ArgoCD GitOps pipeline pre-wired.

7–10 days RM 8,200 fixed 3+ nodes
Virtualization

VMware → Proxmox Migration

Full V2V migration of up to 20 VMs from ESXi/vSphere to Proxmox VE. Includes ZFS setup, backup server, and staff handover training.

10–14 days RM 12,000 fixed Up to 20 VMs

Our open-source stack maturity

Assessed quarterly. Only battle-tested tools make it here.

Security & Network

WireGuard
Adopt
OpenBSD pf
Adopt
Suricata
Adopt
Tailscale
Adopt
Cloudflared
Trial
MISP
Adopt
OpenCTI
Adopt
CoreOSINT
Trial
NeMo Guardrails
Trial
Garak
Assess

AI / Cloud / Infra

Kubernetes
Adopt
Proxmox VE
Adopt
Ollama / vLLM
Trial
ArgoCD
Adopt
Istio
Assess
Hermes (NousResearch)
Trial
OpenClaw
Assess

Ready to ditch the proprietary tax?

Pick a blueprint, post a custom project, or just talk to an engineer first.

Start a Project See Cost Savings