A
MCP / AI-agent security review
Static review of a small MCP server or agent integration: permissions, secrets, trust boundaries, sensitive operations, logging, input handling, and remediation.
from $75
/ Independent security & software lab
Security engineering, agent security & developer tooling.
Open-source tools, independent security research, and small fixed-scope engineering work.
01 / Services
Focused help for small, well-defined projects.
Clear scope, practical deliverables, and no inflated consulting promises.
B
Developer tooling & automation
Small utilities, API integrations, parsers, reporting workflows, logging/audit tools, Dockerization, test automation, and focused Go, Python, or Rust work.
from $100
C
Static security code review
Concise inspection of small open-source projects and developer tools for obvious security, privacy, configuration, and supply-chain risks.
from $75
02 / Featured work
Tools and systems work.
Selected practical projects across security engineering, systems, and developer tooling.
01
AuditMCP
Local-first MCP auditing with tamper-evident logs and automatic secret redaction.
02
Conveyance
Security engineering R&D exploring credential isolation and phone-approved, second-device authorization.
03
Security Enrichment
Threat-intelligence enrichment for IPs, domains, URLs, and file hashes across multiple security data sources.
03 / Security research
Public findings, responsibly reported.
Static analysis and manual review of publicly available code, with disclosure status retained alongside each report.
RustChain — Malicious Installer
A malicious installer analysis covering SSH key deployment, undisclosed hardware fingerprinting, and persistent service behavior.
Read writeupOneDragon — Telemetry Policy Violation
A review of anonymization bypasses and transmission of account usernames and hostnames contrary to a published privacy policy.
Read writeup04 / Notes
Practical notes from the build.
Short writeups about the systems, infrastructure, and mistakes behind the work.
SEO for a Tiny Technical Site Is Mostly Making Things Worth Finding
For a small technical site, the useful SEO work was giving projects permanent, understandable pages with technical ideas worth finding and citing.
Read noteCustom Domain Email Is Way More Complicated Than It Should Be
A free replacement for Gmail third-party “Send as” using Cloudflare Email Routing, Thunderbird, and SMTP2GO — with SPF, DKIM, and DMARC passing.
Read note05 / Lab
Experiments and live utilities.
Earlier tools and active research experiments that complement the featured work.
Experimental / R&D
Baptisia
An experimental ICS/OT DSL and compiler that encodes structural safety rules and generates C.
View projectLocal tool + hosted dashboard
PCAP Agent
Local packet capture with real-time browser-based network metadata analysis.
Local tool
Network Scanner
TCP scanning with OT/ICS protocol awareness for local or authorized lab networks.
View projectLive utility
Hardware Dashboard
Backend host telemetry for CPU, memory, disk, and network.
06 / About
An independent lab run by Alex.
Ahlyx Labs focuses on security tooling, agent security, systems programming, automation, and independent research.
07 / Contact
Have a small project?
Send what you are trying to build or review, the relevant repository or documentation, and your expected timeframe.