Your infrastructure, your rules.
Open source, professionally managed.

Three services built around the tools small practices actually benefit from: hardened open-source networking, self-hosted applications, and hands-on mentoring. No vendor lock-in, no subscription to a box you don't understand.

Get a quote See the three services
Schematic: two WAN uplinks (fibre primary, 5G LTE failover) into an OpenWrt gateway, then a managed switch splitting Office, Self-Hosted and Guest/IoT VLANs
Reference build: dual-WAN resilience, VLAN segregation, and WPA3 mesh — drawn from our standard install.

Open source infrastructure

Three services, one philosophy

Auditable tools, hardware you own, and documentation you keep.

Security-enhanced routers & Wi-Fi mesh

We supply, install, and maintain OpenWrt-based routers and mesh systems configured to a security baseline most off-the-shelf gear can't match.

  • Firmware locked to the latest stable OpenWrt release, with a signed update cycle we manage
  • WPA3-Enterprise Wi-Fi with per-user or per-VLAN isolation — client devices never see each other
  • Guest and IoT networks fully segregated from your office network
  • Router-level ad/tracker blocking and VPN-ready, without a commercial SD-WAN
  • Quarterly re-hardening: firmware audit, open-port check, config review, and a one-page report

Who it's for: 1–20 person offices, shared workspaces, and homes that hold sensitive data. We maintain the kit as long as you do.

Supply + install (mesh/access hardware, quoted per site) from HK$6,000
Security baseline configuration (VLANs, WPA3, firewall, logging) included
Maintenance retainer (updates, monitoring, 1 on-site visit per quarter) from HK$800/mo

Self-hosted operations stack

Renting SaaS for everything means paying forever and trusting someone else's servers. We set up a small, boring, well-documented self-hosted stack on a single appliance or low-power mini-PC in your office.

  • Operations: internal calendar/wiki, document storage with access controls, and automated encrypted backups — tested restore, not just stored files
  • AI, safely: a private LLM gateway or data-excluded enterprise tiers, so client data never enters public models
  • Cyber hygiene: network monitoring, phishing-test tooling, a self-hosted password manager with hardware MFA, and log retention so you can answer "what happened?" after an incident
  • Everything documented and handed over: if we disappear tomorrow, anyone competent can run it

Who it's for: practices with data-sensitivity, AI ambitions, or a "we shouldn't rent everything" policy.

Homelab console schematic: encrypted backups, private AI gateway, vault and MFA, network monitoring, log retention, and handover runbooks
The six services in your stack — monitored, tested, documented.
Self-hosted stack setup (single appliance, standard config) from HK$12,000
Private AI gateway add-on from HK$5,000
Stack maintenance retainer from HK$1,200/mo

Open source utilities mentoring

A private, plain-language mentoring track. No certification theatre — just the utilities that actually save your firm time and money, taught in the context of your own office.

  • For executives: what self-hosting and open source mean for cost, data control, and vendor risk in your sector; a practical "should we?" decision guide
  • For office managers: document management, backup discipline, password manager + MFA roll-out, and safe use of open-source utilities day to day
  • For the tech-curious: a hands-on afternoon building and running a small self-hosted service on real hardware, with notes you keep

Format: 90-minute sessions on-site or remote, small groups (max 6) or one-on-one. You get a short written playbook after each session.

Mentoring session (90 min, on-site or remote) HK$2,500
Group rate (up to 6 people) HK$6,000

FAQ

Open source, answered

Why open source?

Auditable code, no per-seat licensing that scales against you, and a community that patches vulnerabilities in days. We only recommend projects with active maintenance and a real security track record.

What if the gear or software breaks?

Maintenance retainers include response SLAs; self-hosted stacks are documented and tested for restore, so nothing is a single point of failure.

Can this work alongside our existing IT provider?

Yes. We handle the security, self-hosted, and mentoring tracks; they keep day-to-day support. We document every hand-off.

Own your infrastructure

Tell us what you run today. We'll map what can be hardened, self-hosted, or taught.

Get a quote Back to all services