Portfolio

Real software. Real systems. Built from the ground up.

From complete business management platforms and cybersecurity applications to training systems, legal workflow software, marketing automation, and open-source infrastructure tools, my work spans the full software lifecycle.

These aren't generic templates with new logos. They are applications designed around actual problems, with databases, user interfaces, business rules, integrations, automation, security, reporting, and operational infrastructure behind them.

Some are running in production. Others are in active beta or development. Each project is labeled honestly so you can distinguish released software from work in progress.

Explore the projects below to see what I've built, what each system does, and the business problems it was designed to solve.

  • 15 standalone applications
  • 1 storefront built on Roots HQ
  • 2 business websites
  • 1 hosted service
  • 1 open-source collection

Project directory

Business ApplicationsActive Beta

Roots HQ

Problem: Independent product businesses sell online, at markets, and in person — and end up running inventory, orders, and customers across a pile of tools that never agree.

A multi-tenant platform that keeps inventory, orders, customers, storefront, market events, sales channels, and reporting for an independent product business in one workspace — with an AI assistant that proposes and waits for approval.

  • One inventory and order queue across storefront, markets, and sales channels
  • Native storefront for each workspace, plus pickup, local delivery, and pay-by-link invoices
  • Market and event operations: pre-orders, prep checklists, event-aware POS
  • Calyx AI assistant: propose, review, apply — nothing changes without confirmation
  • Web administration plus Android apps (Roots Manager and Roots POS)
  • Multi-tenant
  • AI with human approval
  • Payments
  • Android
  • Integrations
E-commerceLive Storefront

Earth Born Roots

Problem: A growing small-batch food brand needed a real online store tied to its market schedule, pre-orders, and customers — not a generic template disconnected from operations.

The live online storefront for a small-batch preserves, sourdough, and botanical goods kitchen, running on Roots HQ — products, market pre-orders, recipes, newsletter, and customer accounts in one system.

  • Product catalog and storefront served by Roots HQ
  • Market dates with pre-order for market pickup
  • Customer accounts, newsletter, recipes, and blog
  • One order queue shared with the business’s other sales channels
  • Storefront
  • Runs on Roots HQ
CybersecurityActive Beta

MailThreatZero

Problem: MSPs and multi-domain organizations pay per mailbox for filtering they can’t explain — when a message is blocked or delivered, nobody can show why.

A managed email security gateway for MSPs and multi-domain organizations, with explainable multi-stage scoring, per-tenant policies, quarantine, and domain reputation monitoring — priced per protected domain rather than per mailbox.

  • SMTP gateway with five scanning stages: reputation, authentication, malware, content, optional AI
  • Explainable scoring: each stage’s weight and contribution to the verdict
  • Monitor Mode, quarantine review and release, and message tracking
  • Delegated MSP administration with tenant, domain, and read-only roles
  • Domain reputation, DMARC aggregate reporting, and a REST API
  • Multi-tenant
  • Mail pipeline
  • Explainable scoring
  • Optional AI
  • REST API
CybersecurityActive Beta

Exploit Hound

Problem: MSPs end up with thousands of vulnerability findings across customers and no useful answer to the only question that matters: what should we fix first?

A hosted exposure-management platform that discovers assets, correlates vulnerabilities, ranks remediation by the attack paths it removes, and verifies fixes by re-checking — across every customer environment.

  • “Fix First” — findings grouped into technician actions, ranked by attack paths removed
  • Asset discovery: external surface, onsite LAN probe, and endpoint agents
  • Remediation verified by re-checking, not by trusting a tool’s “success”
  • Threat Radar: known-exploited and most-likely-exploited vulnerabilities
  • Multi-tenant MSP console with per-customer exposure graphs
  • Multi-tenant
  • Risk modeling
  • Collectors & agents
  • Threat intel
  • Optional AI
TrainingProduction

gr0wpath

Problem: Training platforms track course completion, not capability — managers can’t see what their people can actually do, or where one absence would leave a gap.

A workforce skills platform that measures what people already know, finds the gaps that matter for their role, and builds training, exams, and practical scenarios around each person — with manager reporting on real capability.

  • Skills checks and section-scored exams generated from an approved question plan
  • Role-based learning paths, including product-specific IT roles
  • Practical scenarios with supervisor review
  • Team mastery heatmaps and single-point-of-knowledge reporting
  • AI-drafted lessons and questions, each approved by a person
  • Assessment engine
  • Role-based access
  • AI with human review
  • SSO
  • Reporting
Legal / WorkflowEarly Access

Practa

Problem: Law firms juggle separate tools for cases, documents, client communication, and trust accounting — and every handoff between them is a chance for something to slip.

Legal practice management that brings matters, documents, billing, IOLTA trust accounting, client communication, and AI-assisted drafting into one multi-tenant platform for a law firm.

  • Matter lifecycle tracking with statute-of-limitations alerts, calendar, and tasks
  • Document center: in-browser editor, templates, version history, and e-signing
  • Time, expenses, invoices, and an IOLTA trust ledger with three-way reconciliation
  • Branded client portal with TOTP two-factor sign-in and secure messaging
  • AI drafting, summaries, and vision OCR using the firm’s own API keys
  • Multi-tenant
  • Trust accounting
  • Bring-your-own AI
  • Audit log
  • Integrations
Legal / WorkflowIn Development

CaseBuilder

Problem: Case records, deadlines, notes, and documents end up scattered across folders and email, making it hard to see a case’s full history in one place.

A workspace for organizing a case’s records, timeline, notes, and documents together. In development — not a finished legal practice management product.

  • Case timelines
  • Notes and records kept with each case
  • Document organization
  • In development
Legal / WorkflowLive · Free Tier

OnBetterTerms

Problem: Relationships at home and work erode through small conversations that went slightly wrong — and people rarely have a private, structured way to work through one.

An AI-assisted application for working through difficult conversations privately: understand both perspectives, find a practical next step, and control exactly what is ever shared.

  • Private journal and AI guide, with Shared, Private, and “Never shared” privacy levels
  • Shared mediation, de-escalation mode, and conflict debriefs
  • Voice input
  • Abuse-aware safety system
  • Account export and deletion, plus device and session controls
  • Field-level encryption
  • Privacy by design
  • AI
  • Passkeys
  • Mobile app
CRM / MarketingLive · Early Access

MarketQwik

Problem: Outbound marketing usually means paying for separate prospecting, enrichment, email, and CRM tools — and stitching their data together by hand.

A lead discovery, enrichment, CRM, and campaign platform for marketing teams and agencies — find prospects, enrich and verify contacts, run email campaigns, and report on results, with isolated workspaces per client.

  • Geographic and category-based prospect discovery
  • Enrichment flows and email verification with de-duplication
  • AI email generator with deliverability grading
  • Drip campaigns, CRM deals and tasks, and email conversation sync
  • Agency workspaces with client portals and white-label reports
  • Multi-client workspaces
  • Data enrichment
  • AI
  • Email automation
  • Integrations
MSP / IT ToolsProduction

Monit

Problem: Small IT teams find out about a down server, an expiring certificate, or a full disk from the customer — because health data is scattered and nobody is watching it.

Agent-based infrastructure monitoring delivered on a dedicated VM per customer: servers, websites, network flow, and syslog, with dashboards, multi-channel alerting, and public status pages.

  • Agent-based Linux and Windows server monitoring, plus SNMP
  • Website, SSL-expiry, and IP blacklist checks
  • NetFlow traffic collection and syslog receiver
  • Drag-and-drop dashboards, wallboards, and public status pages
  • Alerts by email, SMS, Pushover, Pushbullet, and webhooks with escalation
  • Dedicated VM per customer
  • Remote probes
  • Alerting
  • Dashboards
MSP / IT ToolsLive Service

MSP Reboot Hosting

Problem: Small businesses need their website, email, and DNS to simply work — without managing servers, certificates, or mail delivery themselves.

A managed hosting service for websites, business email, databases, and DNS — configured, monitored, and kept running from one control panel. Listed as operations work, not as a separate software product.

  • PHP and static website hosting with managed TLS
  • Mailboxes on your own domain with webmail and calendars
  • Authoritative DNS with optional DNSSEC
  • Managed MariaDB, SFTP/FTPS, and scheduled jobs
  • Linux hosting
  • Mail
  • DNS
  • Operations
MSP / IT ToolsLive · Free Tool

Net Agit8or

Problem: Quick network troubleshooting — DNS, email records, reachability — usually means installing tools or juggling several single-purpose websites.

A free web toolkit for DNS, email, and network checks such as ping, traceroute, DNS lookup, and port scanning — no install and no account.

  • DNS and email record lookups
  • Ping and traceroute
  • Port scanning
  • Runs in the browser with no install or account
  • Free tool
  • Networking
Open SourceOpen Source

MSPZero

Problem: MSPs rent a separate subscription for documentation, firewall management, infrastructure, backups, and remote support — and their data lives on someone else’s servers.

The umbrella for five independent, MIT-licensed, self-hosted tools for MSPs and IT teams: ClientSt0r, OPNMGR, Depl0y, St0r, and Rem0te. A collection of separate projects, not one more application.

  • Five independent tools — use one, several, or all five
  • All MIT-licensed and self-hosted, with no paid tier
  • Public source code on GitHub
  • Optional paid setup and hosting from MSP Reboot
  • Open source
  • Self-hosted
  • MIT
Open SourceOpen Source

ClientSt0r

Problem: MSPs keep runbooks, assets, passwords, and tickets in separate rented products, so a technician opening a ticket has to hunt across systems for context.

Self-hosted IT documentation and service desk for MSPs. A ticket opens with the client’s contract, the affected asset, the runbook, and the vault entries the technician needs — all in one database.

  • Client documentation, assets, runbooks, and an encrypted password vault
  • Opt-in service desk: queues, SLA timers, time entries, quotes, invoices, and contracts
  • One organization per client, with parent/child organizations
  • Enforced TOTP 2FA and optional Entra ID SSO or LDAP
  • PSA and RMM integrations and a browser extension
  • Multi-tenant
  • Encryption at rest
  • REST + OpenAPI
  • SSO
  • Docker
Open SourceOpen Source

OPNMGR

Problem: Managing dozens of firewalls means logging into each one to check health, back up configs, and apply updates — and hoping nothing drifted in between.

Self-hosted OPNsense fleet management for MSPs and IT teams: monitor every firewall, back up and diff configurations against an approved baseline, and roll out updates in safe, staged rings.

  • Agent check-ins for gateways, VPN, CARP, services, and certificate expiry
  • Configuration backups and drift detection against an approved baseline
  • Update campaigns through canary, pilot, and production rings
  • Incidents, maintenance windows, and grouping by customer and site
  • Optional AI configuration review with secrets redacted
  • Agent protocol
  • Staged rollouts
  • Encryption
  • 80-table schema
Open SourceOpen Source

Rem0te

Problem: Supporting computers for many customer businesses means juggling remote-access passwords and having no clean record of who connected to what.

A self-hosted, multi-tenant remote support portal built around a self-hosted RustDesk server — enrollment, permissions, credential release without passing passwords around, and a full audit trail.

  • Three-level roles: platform admin, business owner, and business user
  • Managed-device enrollment for Windows, Linux, and macOS
  • Connect without sharing passwords, using single-use grants
  • Device inventory, Windows event logs, and Tactical RMM launch integration
  • Audit timeline and a public API
  • Multi-tenant
  • RBAC
  • Monorepo
  • Desktop launcher
  • Go installer
Open SourceOpen Source

St0r

Problem: Backups that nobody can easily check are backups nobody trusts — and a full backup volume quietly stops them altogether.

A modern web interface for UrBackup Server: live job progress, endpoints grouped by customer, file recovery, schedules and retention, offsite replication, and a disk guard that pauses backups before storage fills.

  • Live backup job progress and endpoint status
  • Endpoints grouped by customer, with customer-scoped read-only users
  • File browser recovery and per-endpoint schedules and retention
  • Offsite replication over SSH/rsync with run history and lag
  • Disk guard that pauses backups before the volume fills
  • Integration
  • Automation
  • Customer scoping
  • Encryption
Open SourceOpen Source

Depl0y

Problem: The Proxmox interface shows one cluster per login and none of the server hardware underneath — so managing several sites means many tabs and no hardware health at all.

Proxmox infrastructure and server hardware management in one dashboard: many clusters and hosts in one view, Dell iDRAC and HPE iLO health over Redfish, VM provisioning with cloud-init, and VM import.

  • Multi-cluster dashboard, topology graph, and VM metrics
  • Dell iDRAC and HPE iLO hardware health, inventory, and power control
  • Create-VM wizard with cloud images and cloud-init
  • VM import from OVA/OVF, VMDK, VHD, QCOW2, or ESXi/vCenter
  • Admin, operator, and viewer roles with TOTP and an audit log
  • Infrastructure APIs
  • Redfish
  • Background jobs
  • RBAC
WebsitesLive Website

MSP Reboot

Problem: MSP owners need practical operational advice — and a home for the hosted services and tools that come out of that experience.

The website for MSP Reboot: MSP consulting, hosted services such as Monit and managed hosting, and the hub linking the commercial and open-source software in this portfolio.

  • Consulting services and free resources for MSP owners
  • Hosted services, including Monit and managed hosting
  • Directory of commercial products and free open-source projects
  • Website
  • Single-page app
WebsitesLive Website

MyAppDone

Problem: Business owners with workflows that off-the-shelf software doesn’t fit need someone who can build the application and keep it running.

This site: custom application development, hosting, maintenance, and workflow modernization — with a prerendered, filterable portfolio and a self-hosted contact form with built-in spam protection.

  • Prerendered, crawlable portfolio with category filters and search
  • Self-hosted contact form with signed-token, time-trap, and honeypot antispam
  • Light and dark themes, no frameworks, no third-party fonts
  • Static + PHP
  • Prerendered
  • Accessible
How projects are labeled
Production
Released and running for real use.
Active Beta
Working software in a public beta or early-access program — not yet generally available.
Open Source
Free, MIT-licensed, self-hosted. The source code is public on GitHub.
Live Website
A website or storefront, not a separate software product.
Hosted Service
An operated hosting service, not a separate software product.
Collection
An umbrella for several separate projects, not an application of its own.
In Development
Under active development; not released.

A machine-readable version of this list is published at /projects.json. Screenshots are of public product pages, public repositories, or the products themselves without customer data. No testimonials, customer counts, certifications, or performance statistics are claimed here. Entries are counted by what they are — a website or hosted service is not presented as a separate software product.

Engineering capabilities

More than an app developer. The complete system behind it.

Building the screens is only part of the job. A business application also needs dependable databases, permissions, integrations, secure hosting, backups, monitoring, maintenance, and a clear path for future changes.

My experience spans software development and the infrastructure that keeps business systems running.

  • Custom web application development

    Complete applications built around a real workflow — screens, data, business rules, and the operations behind them.

    Seen in: Roots HQ, gr0wpath, Practa

  • Database architecture

    Relational schemas designed for real records, history, and reporting — from Prisma models to an 80-table MySQL design.

    Seen in: ClientSt0r, OPNMGR, Rem0te

  • SaaS and multi-tenant systems

    Tenant isolation enforced in the data layer, not just hidden in the interface.

    Seen in: Roots HQ, MailThreatZero, Exploit Hound, Rem0te

  • API development and integration

    REST APIs with OpenAPI schemas, and integrations with payment, PSA, RMM, Microsoft, Google, and infrastructure APIs.

    Seen in: ClientSt0r, MailThreatZero, Depl0y

  • Workflow automation

    Scheduled jobs, staged rollouts, replication, enrichment flows, and campaigns that run without someone babysitting them.

    Seen in: OPNMGR, St0r, MarketQwik

  • AI-assisted business applications

    AI that drafts and suggests — with a person approving anything that matters.

    Seen in: Roots HQ, gr0wpath, MailThreatZero, OnBetterTerms

  • Identity and access management

    Roles and permissions, TOTP and passkeys, Entra ID and LDAP single sign-on, and audited access.

    Seen in: ClientSt0r, Rem0te, gr0wpath

  • Dashboards and reporting

    Dashboards that answer real questions — what to fix first, who can do what, what’s healthy.

    Seen in: Exploit Hound, gr0wpath, Monit

  • Linux server hosting

    Production hosting for web apps, mail, databases, and DNS on infrastructure I operate.

    Seen in: MSP Reboot Hosting, Monit, MailThreatZero

  • Virtualization and infrastructure

    Proxmox clusters, server hardware management, and per-customer virtual machines.

    Seen in: Depl0y, Monit

  • Security and operational monitoring

    Email security, exposure management, firewall fleets, and infrastructure monitoring.

    Seen in: MailThreatZero, Exploit Hound, OPNMGR, Monit

  • Backup, recovery, and maintenance

    Backups you can see, configurations you can roll back, and systems kept patched after launch.

    Seen in: St0r, OPNMGR, ClientSt0r