Apps & tools
One team, a lot of shipping. These are the tools and apps we've built and still maintain, from supply-chain security to a browser quiz that a million people have played. Most are free, several are open source, and the ones that aren't are honest about what they cost. Shipped research tools from the lab show up here too, the moment they're ready to use.
Continuous supply-chain monitoring: eight-plus intelligence feeds cross-referenced against your actual dependency tree, with the evidence behind every alert rather than a bare score.
Visit OSPulseRun a package's install script inside a throwaway, hardware-isolated micro-VM and watch everything it touches live: every process, file, secret read and outbound connection, traced at the syscall level and diffed against how a package should behave.
See PoisonBoxPoint it at a stripped binary. It tells you which open-source libraries are inside, which versions, and what's vulnerable. No source required.
See StrataPaste a system prompt and see which instructions actually carry behavioural weight and which are ballast, measured empirically against a local model, or a frontier one, instead of guessed at.
See Prose Weight VisualiserAgent-fleet cost intelligence built on OmnisRouter receipts. AI coding spend by commit, repo and team, with hard budget caps and a kill-switch that catches the looping agent before the invoice does. Team-level, never a per-developer scoreboard.
See OmnisVigilAn open, reproducible benchmark for LLM routing efficiency. Every result re-grades offline. It's the data behind OmnisRouter's routing, published so you can check the working.
See OmnisBenchA drop-in proxy that sends each LLM request to the cheapest model that can handle it, across the Anthropic, OpenAI and Gemini formats, with a receipt explaining every decision. Self-hosted, bring your own keys.
See OmnisRouterThree memorable words for any commit hash, and back again. Deterministic, reversible and entirely offline. Say your commit instead of spelling out forty hex characters.
Try WhatThreeGitsSeven questions and a clear verdict on whether the UK Online Safety Act applies to your service, every duty linked to its Ofcom or GOV.UK source. Guidance, not legal advice.
Check your serviceAgentic coding rebuilt for developers who are partially sighted, low-vision or blind. The agent does the looking and narrates it back. Windows, code-signed.
Download for WindowsAttach it to a running .NET process and watch the memory move: allocations rising as a live flame graph, garbage collections sweeping through, and a leak revealing itself as the one glowing ridge that won't come down.
See CinderA free, public health check for the open-source packages the world leans on. It scores the most-depended-on libraries on npm, PyPI and NuGet against a transparent rubric, last release, commit velocity, bus factor, issue-response decay, so abandonment shows up as a risk you can price instead of a CVE you find the hard way.
See The ObservatoryTrivia that's quick to learn and hard to put down, with a Travel Quiz spanning 197 countries. Played by over a million people.
Play QuizlyA DIY wedding planner that carries couples from the proposal to the big day: guest lists, budgets, suppliers, and the hundred small decisions in between.
Visit Forever YoursPhoto albums, milestones and the little moments that matter, gently kept for the people who love them.
Visit Forever Paws
