Security engineering and infrastructure.

MercIT Labs is a small practice: security assessments, infrastructure engineering, and the software that supports both. Decades of enterprise and field work, applied to systems that have to keep running.

Built, not just described.

The practice builds its own tooling. idac is the assessment platform used for its own engagements — control catalogs, evidence, and reporting in one system instead of six spreadsheets. SafeShare is open source, self-hosted, and auditable by anyone who wants to read it.

Two of the three products on this site exist because the work needed them.

See what's built →

Contact

Questions about the software, or about working together. Email goes to the engineer directly — no forms, no funnel.

Contact the practice →

Not ready for a conversation? Start with the credentials and experience →