Selected work

Projects we've delivered

Clients are described generally to respect their privacy. References are available on request.

Multi-site network standardization

Property group · 11 locations
Challenge
Each building had a different consumer-grade setup, no failover, and guest traffic sharing the business network.
What we did
Standardized routing across all 11 sites with dual-WAN failover, isolated guest networks, and centralized configuration. Added monitoring that also covers building systems such as HVAC and snow-melt controls.
  • Ubiquiti EdgeRouter
  • Dual-WAN
  • VLANs
  • Guest isolation
  • Monitoring

Door access driven by reservations

Short-term rental operator
Challenge
Guest door codes were created and removed by hand, which caused late check-ins and stale access.
What we did
Built an integration that reads bookings from the property-management system and provisions UniFi Access and smart-lock credentials for the exact stay window, then revokes them automatically.
  • UniFi Access
  • OwnerRez API
  • Hubitat
  • Node.js

Per-location security documentation

Multi-location operator
Challenge
Staff at each site needed simple instructions for doors and cameras, and generic manuals didn't match their hardware.
What we did
Developed tooling that generates branded, location-specific PDF guides for UniFi Access and UniFi Protect from each site's configuration.
  • UniFi Access
  • UniFi Protect
  • TypeScript
  • PDF generation

Off-grid solar security trailer

Designed and built by spinrag
Challenge
Job sites, lots, and remote property often need camera coverage where there is no power or internet.
What we did
Designed and built a self-contained trailer with UniFi G6 Bullet cameras, a UniFi Cloud Gateway Industrial, and Starlink backhaul, on solar power with battery storage sized for three days without sun.
  • UniFi Protect
  • G6 Bullet
  • Cloud Gateway Industrial
  • Starlink
  • Solar + battery

Rural connectivity with Starlink failover

Rural property
Challenge
A single unreliable ISP, with no visibility into which link was failing or when.
What we did
Deployed multi-WAN with Starlink, per-WAN egress and point-of-presence probes, and dashboards with alerting for link health and environmental sensors.
  • Starlink
  • Multi-WAN
  • InfluxDB
  • Grafana
  • Alerting

Power monitoring & disaster recovery

Colocation facility · Rochester area
Challenge
Critical power telemetry lived on a single system with no tested recovery path.
What we did
Documented and rebuilt the power-monitoring stack with backups and a disaster-recovery runbook so it can be restored quickly.
  • Grafana
  • Graphite
  • Backup/DR
  • Runbooks

Reverse-engineered local device control

Connected-equipment owner
Challenge
The manufacturer's app for an infrared sauna was unreliable and depended on the vendor's cloud, with no supported way to control it locally.
What we did
Reverse-engineered the device's Wi-Fi module protocol, published it as an open-source library, and built a self-hosted web app for real-time control on the local network, with temperature push notifications.
  • Protocol analysis
  • Node.js
  • SvelteKit
  • Socket.IO
  • Open source

Technical due diligence

Analytics company
Challenge
Leadership needed an independent view of what their software platform and cloud infrastructure really contained, and what it would take to carry it forward.
What we did
Reviewed the codebases and cloud environment, mapped how the systems fit together, and estimated the effort to stabilize and extend them, with a clear summary for decision-makers.
  • Code review
  • Google Cloud
  • BigQuery
  • Effort analysis

Google Workspace security audit

Nonprofit organization
Challenge
No clear picture of who had accounts, what was shared externally, or how users were signing in.
What we did
Built an audit tool covering users, Drive sharing, sign-in activity, and mail settings, and delivered a prioritized cleanup report.
  • Google Workspace
  • Admin SDK
  • Security audit

Software we build and run

We operate our own products on our own infrastructure, using the same practices we apply for clients.

dmarco

DMARC monitoring and email-safety analysis. dmarco ingests aggregate reports, shows who is sending as your domain, and flags what needs fixing before you move to enforcement.

  • DMARC
  • SPF
  • DKIM
  • PostgreSQL
  • SvelteKit