Built

Software built by the practice. Two of these exist because the work needed them.

SafeShare

Open source

Self-hosted secure file sharing. Simple, auditable, and under your control.

Most secure-sharing products ask you to trust someone else's server, someone else's retention policy, and someone else's definition of an audit log. SafeShare doesn't. You run it, you hold the keys, and every access is recorded somewhere you can actually read.

Three assumptions shape the design: the transport is hostile, the audit trail should be boring to read, and the tool should never require more trust than the operator is willing to give it.

View on GitHub →

Documentation

Threat model, deployment guide, and security policy will be published here.

idac

In development

Security-assessment platform for consultants and internal teams — structured scoring, evidence, and reporting in one place.

The assessment isn't the hard part. The hard part is spreadsheet reconciliation, a screenshot folder nobody can navigate, and a report rebuilt by hand every quarter because the evidence lives in six places. idac keeps the control catalog, the evidence, and the output in one system, so the report is a view of the data rather than a document someone reassembles.

Built for the practice's own assessment work.

Control catalogs: NIST SP 800-53 Rev. 5. CMMC Level 2 and DISA STIG workflows in progress.

La Mesa

Coming to Google Play · English and Spanish

Dominican dominoes, played right. Real patio rules, ranked matches, AI opponents worth beating, and the tools to actually get better.

Most dominoes apps use a generic international ruleset nobody at a Dominican table would recognize. La Mesa plays the game the way it's actually played — capicúa, the pass rules, partner conventions, the scoring that starts arguments. Built in Spanish and English from the first commit.