Data ownership
Your data, your keys, your audit trail. Insulated from vendor price swings and EULA changes, because you own the asset.
Ruby on Rails · Inertia · React
AWS · Cloudflare
At the intersection of software & business.
We help businesses run on infrastructure they own, with open-source tools they control.
Get in touch
Why this, why now
Two trends are running in parallel, and they're getting worse together. AI-accelerated development is shipping broken software faster than it used to be shipped working, and the resulting attack surface is expanding faster than the people defending it can keep up.
We're betting on the other side. Decentralization. Open source. Data you own. Software that's boring, by design, because it stays up. This is not a stance against AI. It's a stance for the customers and businesses left holding the bill when the consequences arrive.
Our principles
Every system we build or operate is anchored in the same commitments. They shape what we will and won't build for you.
Your data, your keys, your audit trail. Insulated from vendor price swings and EULA changes, because you own the asset.
No proprietary black boxes, no per-seat lock-in, no surprise license changes. We build on software you can read, fork, and outlive.

Workloads run on infrastructure you control. You keep ownership, full operational visibility, and a working exit plan from any vendor.
04No single vendor as a single point of failure. Portable architectures that survive when platforms pivot, get acquired, or sunset features.
What we do
A focused set of services for businesses that need senior-level technology operations without building the team in-house.
Strategic guidance at the intersection of software and business, from architecture reviews to vendor selection and roadmap planning.
Strategic guidance at the intersection of software and business, from architecture reviews to vendor selection and roadmap planning.

Reliable, performant hosting for marketing sites, applications, and APIs, provisioned, monitored, and maintained on your behalf.
Reliable, performant hosting for marketing sites, applications, and APIs, provisioned, monitored, and maintained on your behalf.

Kamal ships your containers. Kamal Cloud runs the machines underneath, provisioned, hardened, patched, backed up and watched, inside your own cloud account.
Kamal ships your containers. Kamal Cloud runs the machines underneath, provisioned, hardened, patched, backed up and watched, inside your own cloud account.

Our in-house project management platform. Focused, opinionated, and free of the bloat that plagues general-purpose PM tools.
Our in-house project management platform. Focused, opinionated, and free of the bloat that plagues general-purpose PM tools.

Our AWS-backed sending platform for transactional email and newsletters. Inbox-grade deliverability without surrendering your sender reputation to a third party.
Our AWS-backed sending platform for transactional email and newsletters. Inbox-grade deliverability without surrendering your sender reputation to a third party.

Self-hosted password vaults on infrastructure you control. Enterprise-grade password management without subscribing to another SaaS vendor.
Self-hosted password vaults on infrastructure you control. Enterprise-grade password management without subscribing to another SaaS vendor.

Self-hosted document collaboration. Word, Excel, and PowerPoint compatible, without sending your business documents to Google or Microsoft.
Self-hosted document collaboration. Word, Excel, and PowerPoint compatible, without sending your business documents to Google or Microsoft.

Centralized domain portfolio and DNS management on Cloudflare, registration, renewals, zone configuration, and migrations done right.
Centralized domain portfolio and DNS management on Cloudflare, registration, renewals, zone configuration, and migrations done right.

Edge caching, web application firewall, and Turnstile bot protection on Cloudflare, tuned to make your site fast everywhere and resilient under load.
Edge caching, web application firewall, and Turnstile bot protection on Cloudflare, tuned to make your site fast everywhere and resilient under load.

How we keep it reliable
Every client server stands up the same way: hardened, monitored, backed up, ready for users. Same playbook for every engagement, because consistency is what reliability is made of.
Read the playbookA dedicated Hetzner server stands up with DNS on Cloudflare, Docker, and Kamal Proxy on the public ports, ready for users.
Read morePublic SSH is closed. Admin access is via Tailscale. Firewall, key-only SSH, fail2ban, no root login.
Read moreBackups on 3-2-1, three copies, two media, one offsite. Immutable offsite targets, and monthly restore drills.
Read more24/7 monitoring routed to an actual human. OS and dependency patching on a documented cadence, with scheduled access reviews.
Read moreIn their words
Small engagements, direct contact, and clients who have stayed with us for years.
How we work with you
The values behind the principles.
MBC has been our IT team for years, across the restaurant and the investment side. They built infrastructure we actually own, our costs are predictable, and they're the first call when something matters.
The stack we ship on
A deliberately boring toolchain that fits in one head, deploys atomically, and stays up. Stability and reliability aren't extras, they're the product.

From the field
Why we are betting on data ownership, open source, self-hosting and decentralization while the rest of the industry races the other way.
Get in touch
Tell us what you're working on. We'll respond with a candid assessment, an outline of how we'd approach it, and what it would take to get there.
What to expect