Products

One dashboard to monitor, manage and secure everything — from AWS accounts and Kubernetes clusters to VMware hosts and bare-metal servers. Self-hosted with a single Docker Compose command, connected securely over Cloudflare Tunnel. No agents required on monitored hosts.

Protect users from malicious domains before connections happen. DNS Wall combines an AI risk engine, real-time threat intelligence, reputation analysis and a policy-driven DNS firewall to stop malware, phishing, ransomware, botnets and newly registered malicious domains — in the cloud, self-hosted or fully air-gapped.

• Blocks before the HTTP connection: the attack chain stops at the DNS lookup
• AI domain scoring: entropy, WHOIS, infrastructure and behavioral signals — not just lists
• SOC-ready threat hunting: passive DNS, reverse pivots, infrastructure graph, SIEM integration
• Enterprise scale: multi-tenant, RBAC, SSO, audit logs; SaaS to air-gapped

Connect a repository once: SAST, secret detection, dependency, container, IaC and CI/CD analysis run on every push and pull request — findings deduplicated into one identity each, rolled into a project score, and enforced as a merge gate on the PR.

• Six engines, one report: gitleaks, semgrep, trivy, checkov, hadolint + native CI/CD rules
• Pipeline attacks covered: unpinned actions, pull_request_target abuse, script injection, token over-permission
• Hostile input assumed: scanned code is never executed — read-only, sandboxed, credential-free scanners
• SaaS or self-hosted: sign in with GitHub/GitLab, or run the stack in your own network

Company-scoped AI agents with persistent memory, encrypted credentials and real tool execution — shell, cloud CLIs, Kubernetes, git and databases — inside isolated per-agent sandboxes.

• Real operational work: cloud audits, cost reports, cluster health checks, incident response
• Persistent agents: long-term memory and a stable persona per agent, scoped to your company
• Every channel you use: WhatsApp, Slack, Telegram, Microsoft Teams, webhooks and scheduled prompts
• Safe by design: isolated sandboxes and confirmation gates before destructive actions
• Multi-model: works with multiple LLM providers

A truly private mailbox on grafmails.com or your own domain — end-to-end encryption between GrafMails users and zero-access storage for everything else, on infrastructure we operate and harden ourselves.

• Private by default: no advertising, no profiling, no inbox scanning
• Encrypted mailboxes: end-to-end between GrafMails users, zero-access storage at rest
• Custom domains: professional addresses for you, your family or your team
• Hardened delivery: SPF, DKIM and DMARC configured correctly out of the box
• Works everywhere: webmail plus IMAP/SMTP for the clients you already use

Multi-tenant SaaS that runs a German driving school end to end — scheduling, students, vehicles and billing in one place. One deployment serves many schools; each school sees only its own world. German-language UI, built for how Fahrschulen actually work.

• Scheduling that fits: practical lessons and theory classes around instructor hours, breaks, holidays, vehicles, branches and rooms
• Student self-service: a portal for booking and progress, with the official Ausbildungsnachweis as PDF
• Billing built in: price lists, invoices and payments, with PDF output for every document
• Plays well with your tools: iCal calendar feeds and per-school SMTP for transactional email
• Strict tenant isolation: every query is scoped to the school — verified by an automated test suite

The order-to-receipt system we built and run in production for Paula Restaurant & Meathouse in Kocaeli: waiters take table-based orders, the kitchen works its own screen, and the bill prints on the thermal printer at the end — with the numbers management needs on the side.

• Table-based ordering: dine-in tables and takeaway, portion sizes, and order transfer between tables
• Kitchen screen: order states from waiting to ready, with preparation-time estimates
• Thermal receipts: 80 mm printer-friendly bills, ready at the table
• Money in view: revenue and daily breakdowns, product and table sales, expenses and income–expense balance
• AI reports: occupancy, table dwell time and hourly/daily trends from your own data

Every screen in every branch, managed from one dashboard. A small agent inside the branch connects outward to the cloud, so there is nothing to configure on the customer's router — and match days stop meaning phone calls to the shop.

• Zero network setup: the agent opens an outbound connection; no port forwarding, no VPN, no router changes
• Auto-discovery: scans the branch network and recognises Enigma2 receivers and Android TV boxes
• Virtual remote: full per-device remote control from the browser, including channel zap
• Match-day ready: a daily fixture list with tournament and country filters, mapped to the channels that show them
• Per-branch security: each branch authenticates with its own token — no shared secrets

The platform we run our own homes on: two sites, 90+ devices, one panel. Energy, pool, climate, cameras and the network itself — monitored, logged and controlled in one place, without handing your home to someone else's cloud.

• Whole-home view: energy, pool, climate and network health across multiple sites in one panel
• Network discovery: finds and inventories every device on the network
• Camera archive without cloud: pulls SD-card recordings from cameras on schedule, into your own storage
• Vendor ecosystems respected: works on top of Home Assistant, Omada and the vendors' own apps rather than replacing them
• Long-term telemetry: every device logged every 5 minutes and kept for over a year — trends, not snapshots

Download, upload, ping and jitter — measured against a server we run ourselves in Frankfurt, with no ads, no trackers and no data sold on. Shareable result links make it handy for debugging "the internet is slow" tickets with your ISP or your team.