Work

Things you can go and look at

Most consultancies describe their capability. Below is ours running in production, with the addresses included so you can check it rather than believe it.

The main one

A multi-agent AI system that runs our own business

We built an autonomous agent platform on Amazon Bedrock and we run our own company on it. Four agents operate continuously on a single EC2 instance under process management, each with its own role, its own persistent memory, and scheduled work it performs without anyone watching. One handles publishing. One does lead research and outreach. One coordinates. One does engineering.

This is the same service we sell as agent deployment, which means the reference implementation is the thing paying our bills. It has been running since August 2026.

Worth being straight about the limits. Agents are good at bounded, repeatable work with a clear definition of done. They are not good at being handed a vague goal and left alone, and anyone telling you otherwise is selling. We learned where that line sits by running into it, which is more useful to you than a demo that only ever succeeds.

Sites in production

Built, deployed and maintained

awavegifting.com

Client site, built and shipped

A corporate gifting business with no technical staff. Built on a template we maintain, with a CMS the owner edits herself and her own repository so her content is never mixed in with another client's.

javaupdate.org

Our own publication

Astro, Cloudflare Pages, a content pipeline and a style checker that fails the build on unsourced numbers. Eighty-two pages, deployed by script, verified live after every publish.

carma.la

Our own publication

A second site on the same stack with structurally enforced sourcing: every vehicle specification has to record where it came from or the build rejects it.

Security

We found a live compromise on a law firm's site

Our scanner looks for a specific signature: a hidden container injecting spam links that visitors never see and search engines do. On a Glendale law firm's homepage it found several hundred links to gambling sites concealed in a hidden block, the classic marker of a compromised WordPress install being used as a link farm. Left alone, that gets a site labelled as hacked in search results or removed from the index outright.

We reported it. The site has since been cleaned. That outcome is the argument for the monitoring service rather than a one-off cleanup, because nothing about a cleanup explains how the attacker got in or stops it happening again.

If you want this pointed at your problem

Start small. A readiness audit or a half-day working session costs a fraction of a build and tells you whether the build is worth doing at all. We would rather talk you out of the wrong project than sell it to you.

Get in touch