AegisBPF is an eBPF-based runtime security agent that monitors and blocks unauthorized file and network activity using Linux Security Modules (LSM).

A terminal based dashboard for Docker that monitors multiple hosts in real-time.

Polykube is a Kubernetes-native, GitOps-driven pattern for portable backend workloads. Desired state is delivered as Kubernetes resources, and reconciliation happens locally inside each member cluster.

In-cluster governance for AI agents on Kubernetes. Runtime-agnostic workload contracts, isolation and egress configuration, model-cost evidence, and offline-verifiable audit primitives.

Attune is a Kubernetes operator that automatically right-sizes pod resource requests and limits using In-Place Pod Resize.

Jarvis is an open source web frontend for Prometheus Alertmanager — interactive, realtime, and self-hosted.

A self-hosted workspace that puts a live metric chart next to the paragraph explaining it, gives your internal APIs Stripe-style docs, and lets a change go through a draft, a diff and an approval.

A UNIX-like operating system on the Linux kernel, with the userspace — init, coreutils, networking, services and SSH — written mostly in Go.

Kubernetes 1.37 closes that gap with three things: a set of reusable building block APIs, a shared workloadbuilder Go library, and an updated, explicit Job integration built on both.

Since the past eight years, if you ever found that your Go service was getting throttled inside Kubernetes, the way to fix that was using one import. And with the release of Go 1.25, that same job was absorbed into the runtime itself. But that import is still sitting in your go.mod file, and it is now taking a CPU away from you.

You scaled your gRPC service to five replicas. One of them is on fire. The other four are asleep. This isn’t a bug — it’s a direct consequence of how Kubernetes moves traffic between pods, and once you see the mechanism, the fix is obvious.