Engineering that stays in-country
Every service is built for SA reality: tenant isolation, sealed blobs, offline queues and purpose-bound auth — no offshore scrubbing centre.
Eureka — capability fabric
Ed25519-signed, purpose-bound (e.g. nda:visit:<id>), expiring, audience-scoped. Verified at the edge — no central lookup to breach. Every suite service is Eureka-enabled by default.
Stack: .NET, Ed25519. Purpose string is the scope.
Identity — POPIA by architecture
Hierarchical MFA (15+ providers), nested-group RBAC, tenant isolation via EF global filters, and user-owned vault where values are client-encrypted and only schemas/receipts are server-side.
OpenIddict 7.4 · Postgres + Redis · GraphQL + REST
Parser Fleet — isolated decodes
One container per format: SADC licence PDF417 + SWI32 wavelet, NaTIS disc, SA Smart ID, ICAO 9303 MRZ + chip, ISO 6346. Each parser isolated, no shared secrets, metered via Eureka consent tokens.
Gateway: .NET 8 · Fleet: Docker · Delegated by GatePoint / OmniVisit
Defence Mesh — L7 → L3 closed loop
Coraza WAF as Traefik ForwardAuth at /verify, Go daemons at host-net with NET_ADMIN, RansomGuard + YARA + honey-ports, and MailProxy on loopback (1143/1110/1025) with 3-tier ZIP/.bdna/AES-GCM.
Razor 10.x .bdna · per-part SHA MIME verify · fail-closed lattice
Yard & Edge — when links flap
Gate events + weighbridge ticks correlated by tenant claim. RDT ESP32-S2/C3 Modbus terminals sync ACL to SPIFFS and run autonomously; OmniGrid ESP32-C3 dongles → MQTT → SQLite rules → contactors with snapshot-durable store.
Platform — self-hosted
Coolify on your tin, Postgres + Redis, Docker, SignalR/MQTT/MassTransit, YARP. Zero-plugin mail, BYOB gate scanners over versioned MQTT gp/v1/…
See products →Performance & Privacy
- Globe and viz lazy-load, respect
prefers-reduced-motion, no heavy Three.js bundle — Canvas fallback. - No secrets in static output; CSP meta, no inline scripts breaking policy.
- Sealed blobs, consent receipts, metering per tenant — audit trail per tenant claim.