WeldForge
One identity forge for every application you ship
A multi-tenant federated identity platform: a single Spring Boot binary that speaks every protocol your applications already know.
Flagship weldforge.org
Everything CW Vermaak Consulting builds and owns. Where a product is still being built, it says so.
One identity forge for every application you ship
A multi-tenant federated identity platform: a single Spring Boot binary that speaks every protocol your applications already know.
Flagship weldforge.org
Zero-knowledge secrets, human and machine
An enterprise password and DevOps-secrets platform where the server never sees plaintext. Human credentials and machine secrets live in one vault, federated to WeldForge for identity. Running in production.
Mission control for clusters, apps and sites
An operator console that continuously probes Kubernetes clusters, applications and public sites, turns raw signals into incidents rather than alert noise, and streams a live feed with an audible alarm that keeps sounding until someone acknowledges it. Point it at an estate and it discovers what to watch.
In development sentinel.cwvermaak.tech
Offline-first, zero-knowledge notes
A secure note-taking platform where encryption and decryption happen entirely on the client — the server stores only ciphertext. Offline-first sync, zero-knowledge sharing via X25519 key exchange, Argon2id + AES-GCM-256, and one Flutter codebase across web, mobile, and desktop.
In development
First-party analytics, with an SEO module
First-party, multi-tenant, cross-platform analytics with an SEO module — your own measurement, on your own infrastructure, rather than a third party's tag on every page.
MVP running
Time, metered
Cross-platform time tracking built for a software consultancy: capture time against clients, projects and line items offline, then move it through approval, rate snapshots and invoice drafts — so billing follows from what actually happened rather than from memory.
In development clepsydra.cwvermaak.tech
Outbound research that reads public signals
Outbound research that reads public signals (hiring, funding, pricing changes, forum questions) for evidence a company has the problem you solve, then drafts a short, cited first approach for a human to review and send. Built for quality over volume: a handful of well-researched approaches a week rather than hundreds of templated ones.
In development augur.cwvermaak.tech
Training built around outcomes, not video completion
A training platform designed around measurable learning outcomes, real assessment and spaced retrieval rather than video completion: an authoring studio for instructors, an app for trainees.
In development
Outreach and visitor management
A non-commercial platform supporting community outreach programmes — blood drives, health days, and similar. Built TDD and BDD throughout.
Pro-bono
Scope it, plan it, deliver it
AI-native client engagement and agile delivery in one tool: a client and engagement workspace where work is scoped, a single work-item model worked as sprints or Kanban with swim lanes, and light project collaboration.
In development proboulos.cwvermaak.tech
The control plane for device mirroring
The control plane for device mirroring: a device registry, pairing, sessions, presets, a catalogue and an audit trail, behind a server-rendered operator console and a REST API. The mirroring edge client comes later.
In development
One keyboard and mouse, several machines
A local-only, peer-to-peer software KVM: one keyboard, mouse and clipboard control several computers. Move the cursor off a screen edge and control flows to the next machine; the clipboard follows. The cable-free version of a hardware KVM, across macOS, Windows and Linux.
In development
Write, hear, organise and present sheet music
Write, hear, organise and present sheet music from one source. The score is text that compiles to MEI, and engraving, playback, lyric slides and exports all come from that single source rather than from separate files kept in step by hand.
In development