Built

Software built by the practice. Two of these exist because the work needed them.

SafeShare

Open source

Self-hosted secure file sharing. Simple, auditable, and under your control.

Most secure-sharing products ask you to trust someone else's server, someone else's retention policy, and someone else's definition of an audit log. SafeShare doesn't. You run it, you hold the keys, and every access is recorded somewhere you can actually read.

Three assumptions shape the design: the transport is hostile, the audit trail should be boring to read, and the tool should never require more trust than the operator is willing to give it.

View on GitHub →

Documentation

Threat model, deployment guide, and security policy will be published here.

IDAC

In-house tool

IT Discovery & Assessment Checklist (IDAC) is the security-assessment platform the practice runs its engagements on: structured scoring, evidence, and reporting in one place.

The assessment isn't the hard part. The hard part is spreadsheet reconciliation, a screenshot folder nobody can navigate, and a report rebuilt by hand every quarter because the evidence lives in six places. IDAC keeps the control catalog, the evidence, and the output in one system, so the report is a view of the data rather than a document someone reassembles.

Built for the practice's own work, and kept in-house.

Control catalogs: NIST SP 800-53 Rev. 5. CMMC Level 2 and DISA STIG workflows in progress.

La Mesa

Available on Google Play and the App Store

Dominican dominoes, played right. Real patio rules, ranked matches, AI opponents worth beating, and the tools to actually get better.

Most dominoes apps use a generic international ruleset nobody at a Dominican table would recognize. La Mesa plays the game the way it's actually played — capicúa, the pass rules, partner conventions, the scoring that starts arguments. Built in Spanish and English from the first commit.

Get it on Google Play →

Download on the App Store →