OurCVEs
Hundreds of vulnerabilities ship every week, but most never touch your stack. OurCVEs watches your repositories and servers, routes routine patches through automation, and alerts your team only when a human is genuinely needed.
Start a project
We don't just ship for clients. These are the SaaS products, self-hostable services, and open-source packages we've built ourselves. It's the same engineering craft we bring to every engagement, applied to our own ideas and given back to the community.
From customer-facing SaaS to developer tooling and libraries for the wider ecosystem. Visit the ones that are live, or grab the source for the ones that are open.
Hundreds of vulnerabilities ship every week, but most never touch your stack. OurCVEs watches your repositories and servers, routes routine patches through automation, and alerts your team only when a human is genuinely needed.
Some of the work you ship lands and sticks; some churns and gets torn out and redone. Ballast turns your git history into a single deterministic durability score and a trajectory over time, so you can see which is which.
Your team shares service accounts, so nobody should have to ping a colleague every time they need a login code. 2FAnyone gives your whole team secure, instant access to shared TOTP codes, with full audit logging and no secrets pasted into Slack.
Background removal at scale usually means paying a SaaS per image. Matte is a self-hosted background-removal API you fork and deploy to Laravel Cloud, running cut-outs on your own compute with both classical and ML modes behind a simple async endpoint.
Application telemetry usually means shipping your performance data to a third-party SaaS. Hone collects your Laravel app's Nightwatch telemetry on infrastructure you own, rolls it into queryable daily aggregates, and exposes an MCP server so an AI agent can answer questions about it directly.
Staging and CI environments should never send real email. Sink is a self-hosted mail trap you deploy to Laravel Cloud that captures outbound mail into a readable inbox, and exposes a body-blind MCP server so AI agents can assert on subject, recipients, and headers without reading private message bodies.
Building a terminal UI usually means hand-managing ANSI codes, cursor math, and Unicode width edge cases. Parfait gives you a declarative, component-based API instead — you describe the interface as a tree of components, and it renders to a string.
PHP enums are easy to reach for but quick to outgrow. Fat Enums adds state machines for valid transitions, type-safe collections, and bitmask casts for compact storage, giving Laravel developers richer, safer enum-driven models.
Working with FFmpeg in PHP usually means building brittle command-line strings and parsing their output. Ext FFmpeg is a native extension for opening, probing, filtering, and transcoding media through a real object model with typed exceptions.
Real-time WebSocket clients have always lived in the browser, leaving PHP processes on the outside. Pusher WebSocket PHP is a low-level Pusher Channels client — a port of pusher-js implementing Protocol v7 — that lets CLI apps, workers, and daemons connect to Pusher, Soketi, and Reverb from pure PHP.
Laravel Echo handles real-time features in the browser, but server-side PHP has no equivalent. Resonance is a Laravel WebSocket client for CLI commands, queue workers, and background processes, with an Echo-inspired API that listens for Reverb, Pusher, Soketi, and Ably events from your backend.
Testing real-time Laravel features in CI usually means mocking away the WebSocket layer entirely. Reverb Action runs a real Laravel Reverb server as a GitHub Actions service container, spinning it up, waiting until it is ready, and handing your tests live connection details before cleaning up after the job.
Agentic coding assistants are everywhere, but almost none are built in PHP. Tobias is an experimental, full-screen terminal agent — modal like vim, running multiple sessions in parallel across hosted and local models through Prism — built in the open to see how far Laravel can be pushed toward a real coding agent. It installs as the toby binary.
Maintaining a monorepo of composer packages means keeping dozens of read-only split repositories in sync by hand. Kibble is the engine behind our package manager, mirroring each package to its own repository and producing clean distribution manifests so the monorepo stays the single source of truth.
Recording a scripted video usually means memorising lines, manually rolling the teleprompter, and hunting for edit points afterward. PteroPrompter follows your actual voice to advance the script, drives OBS scene switching and countdowns, and exports edit-ready markers and YouTube chapters so every take is ready to cut.
Everyone has a story worth keeping, but few have the design and production skills to make one. Bring a character — a kid, a grandparent, a beloved pet, or one of our in-house originals — and Fawn Fox Fables turns it into a fully illustrated, narrated storybook families actually keep.
Deciding where to move abroad usually means endless lists and guesswork. Out of the US matches Americans to countries they can realistically move to, based on their visa options, income, family situation, and lifestyle preferences.
We want to hear about your company. What you're building, what's working, and what you wish you could improve.
You can book a quick intro call or send us an email. No pressure, no forms — just a friendly hello.