Every layer on this page is real — a two-node homelab fleet, a honeypot catching live scans, an AI-SIEM watching it all, and a website that runs on its own infrastructure. Scroll through, then break it yourself in the lab.
A decoy service on fenris02 plus a tripwire choke catch real internet noise — scanners looking for /.env, /wp-login.php, admin panels. Live feed, sanitized.
The fleet exposes no ports — Cloudflare tunnels carry the traffic in, everything else is dropped at the firewall. Watch the probes bounce.
Cloudflare-style WAF logic: bad bots blocked, logins rate-limited, suspicious traffic challenged. Toggle them in the lab and watch the verdicts flip.
Encrypt, sign, relay, verify, archive — the push pipeline that ships vault content between machines over an encrypted mesh, with OOB hash checks on arrival.
Capture, age-seal, manifest with OOB hash gates, restore — the reflash pipeline has been dry-run on a scratch box until it passed.
fenris01 runs the site, the agents and the SIEM; fenris02 watches it from outside. Live status, right now.
Sign in with a passkey — your device holds the key, the server holds only a public key. Face ID, Touch ID, Windows Hello or a hardware key. Try it.