Software we build.

Available

Trojan

A vulnerability scanner for codebases that runs entirely on your machine.

Trojan finds leaked secrets, risky dependencies and dangerous code patterns, then explains each finding in plain English with the exact fix. It adds AI-assisted penetration testing and one-click security and compliance reports for clients and investors, and it works with MCP.

• Local-first: no source upload, works offline and air-gapped
• Findings ranked into five levels by how exploitable and how damaging they are
• Free scanner, with paid plans for AI testing and reports

Research prototype

PDFreak AI

Explainable PDF malware detection for small security teams.

Final-year research project, BSc Computer Science, Brunel University London, 2025.

Signature-based antivirus misses a lot of malicious PDFs, and most AI tools send your files to someone else’s cloud. PDFreak AI keeps everything self-hosted. Static and dynamic analysis extract 17 features, a Random Forest decides whether a file is malicious, and only flagged files go to a local Mistral 7B. That model uses retrieval over MITRE ATT&CK and a corpus of real malicious PDFs to name the threat, map the technique and recommend next steps in plain language.

• Two-stage design: the language model only runs on files the classifier flags
• No external API calls; containers built to move on-premises
• Hardened intake: upload and decompression caps, timeouts, Zip Slip-safe extraction