KwibbiaN Labs Talk to us
Small team · serious software

Make your business safer with our software.

We build the unglamorous, security-critical infrastructure your company actually depends on — a syslog server, a CEF server and a mail server. Written in-house, reviewed line by line, and tested to break before anyone else can.

See what we're building Talk to the team
  • No third-party libraries
  • Secure by design
  • Full code control
release gate · v0.9.3
  • Static analysis
  • Dynamic analysis
  • Fuzzing
  • Penetration tests
  • Load testing
All gates passed · no external dependencies
secure by design
In development

Three products. One promise: nothing gets lost.

All three share the same core — our own protocols, our own parsers, our own storage layer. Nothing borrowed, nothing inherited, nothing you can't audit.

In development

Syslog server

Centralised log collection for every device on your network. RFC 3164 and RFC 5424 parsing over UDP, TCP and TLS, with searchable retention and tamper-evident storage.

RFC 3164 / 5424 TCP · UDP · TLS Retention
In development

CEF server

Ingests Common Event Format events from firewalls, IDS and endpoints, normalises them into one schema and makes them ready for correlation and alerting.

CEF Normalisation Correlation
In development

Mail server

A hardened SMTP/IMAP server for transactional and security notifications. Strict TLS, SPF, DKIM and DMARC — and not a single external library in the binary.

SMTP / IMAP STARTTLS SPF · DKIM · DMARC
How we build

Security isn't a feature we added. It's how we started.

Four rules we don't bend. They slow us down sometimes — and that's exactly the point.

Full code control

Every line is written and reviewed in-house. You get the source, the build scripts and the ability to audit — or rebuild — anything we ship.

No third-party libraries

Zero external dependencies in our products. Nothing to inherit from someone else's supply chain, nothing to patch at 3 a.m. because a package changed hands.

Secure by design

Threat modelling before the first commit. Least privilege everywhere, encrypted by default, and the smallest possible attack surface.

Full application security testing

Static analysis, dynamic analysis, fuzzing, penetration tests and load testing — on every release, not once a year before an audit.

Verification

Every release goes through five gates.

A build that fails any one of them never leaves the lab. The reports ship with the product — you don't have to take our word for it.

  1. 01

    Static analysis

    Automated review of every line: unsafe patterns, tainted data flows, dead code and forbidden calls.

  2. 02

    Dynamic analysis

    The running software under instrumentation — memory safety, race conditions and runtime leaks.

  3. 03

    Fuzzing

    Millions of malformed inputs thrown at every parser, protocol handler and API endpoint.

  4. 04

    Penetration tests

    Manual, adversarial testing by people whose only job is to get in without being invited.

  5. 05

    Load testing

    Sustained traffic and burst scenarios, so "it holds" is a measurement rather than a hope.

The team

A small team, on purpose.

No outsourcing. No contractors with partial access. The five people who designed this software are the same five who write it, test it and answer your email. Full code control only means something when you know exactly whose hands wrote the code.

5engineers, no more
0third-party libraries
3products in development
5security gates per release

Want the source, or a demo?

Tell us what you need to protect and we'll show you what we're building — including the test reports behind it.

Request a demo hello@kwibbian.com