Services

Three pillars. Forty years of practice.

01

ISO 27001

Technical ISMS implementation: gap analysis, controls, evidence, audit readiness. No boilerplate — only what makes sense for your actual risk.

  • Gap analysis
  • Controls implementation
  • Technical documentation
  • Audit readiness
02

Custom software

Asterisk, FreePBX, integrations, web apps, internal tools. Built to be used daily — not to impress in a demo.

  • Asterisk + FreePBX
  • Integrations & APIs
  • Internal web apps
  • Long-term maintenance
03

Hosting & IT support

Servers, mail, websites, and workstations managed for clients who prefer to sleep at night — Linux and Windows AD environments.

  • Websites + mail + backup + monitoring
  • Windows Server (AD, GPO) + workstations
  • Endpoint security (ThreatDown EDR)
  • Direct founder SLA

Reference stack

What we run in production.

Mature, open-source-first stack we operate daily for clients. Every piece chosen for longevity, community, and auditability.

Security & network

  • pfSense Firewall + router
  • Snort Inline IDS/IPS
  • pfBlockerNG IP & DNS blocklists
  • Wazuh SIEM + HIDS
  • GVM Vulnerability scanning
  • privacyIDEA MFA / 2FA

Operations & monitoring

  • GLPI IT asset + helpdesk
  • Zabbix Infra monitoring
  • urBackup Managed backup
  • Samba AD Directory services
  • DokuWiki Knowledge base
  • Docker Container runtime

Mail & comms

  • Postfix SMTP server
  • Dovecot IMAP / POP3
  • rspamd Anti-spam + DKIM
  • ClamAV Antivirus
  • Asterisk / FreePBX VoIP PBX
  • Jitsi Video conferencing

Apps & productivity

  • Nextcloud File sync + share
  • Odoo ERP + CRM
  • WordPress Managed CMS
  • Ubuntu LTS Base OS
  • nginx Web reverse proxy
  • Let's Encrypt TLS automation

Windows & endpoints

  • Windows Server AD, DC, file server
  • Group Policy Centralized policy
  • Windows 10/11 Managed workstations
  • ThreatDown EDR Endpoint security
  • WSUS Patch management
  • PowerShell Ops automation

AI & ML — local pipelines

  • Ollama (qwen3) Local LLM — structured extraction
  • YOLOv11 Block detection in DWG/PDF (CUDA)
  • sentence-transformers Multilingual embeddings PT/EN/ES/FR
  • ChromaDB Vector store (M+ vectors)
  • PaddleOCR OCR for scanned PDFs
  • Whisper Speech-to-text — meeting minutes

This is the baseline configuration we run for our oldest client (operational since 1987). Adapted per client — not all need every piece.

Have a complex technical problem?

We schedule a 30-minute discovery call. We assess scope, risk, and propose a concrete next step — paid or pro bono, case-by-case.