Production discipline, pointed at the unknown.
Twenty years of enterprise infrastructure, systems programming and broadcast engineering — applied to every BTHL instrument, service and server.
No shortcuts. No toy apps.
Investigation tools only matter if their output can be trusted. That makes software quality a scientific requirement, not a nicety.
Real data only
Our instruments never synthesize a reading. With no hardware connected, every display says so and lists the device it needs.
Real-time by design
Lock-free real-time audio pipelines, GUI-thread painting with no stalls, and 60 fps spectral waterfalls.
Reproducible evidence
Every session writes timestamped WAV, JSONL and CSV on one shared session clock, ready for correlation and archival.
Measured, never assumed
Live capability probes report what each device can actually do — unreported sensors are saved empty, never as a fabricated zero.
Privacy by architecture
On-device whisper.cpp inference. Zero cloud dependencies for the core workflow — audio never leaves the machine.
Signed & notarized
Apple-notarized installers, signed model packages and in-app updaters — integrity from build to desktop.
The tools we build with
Languages
C · C++17/20 · Go · Python · PHP · JavaScript / TypeScript · C# · Bash
Frameworks & libraries
Qt6 · SoapySDR · FFTW3 · PortAudio · CoreAudio · whisper.cpp · librtlsdr · ffmpeg · Electron · Node.js · React · .NET 8
Infrastructure
Docker · Podman · Kubernetes · Helm · Ansible · Terraform · Jenkins · GitLab CI · GitHub Actions · nginx · MariaDB · Prometheus
Security engineered in from the first commit
The same practices proven at Verizon (MapQuest), MTI and Clubspeed run every BTHL system — from desktop instruments to the servers that host this site.
- SAST / DAST auditing across application code before release.
- CI/CD pipelines on GitLab CI, Jenkins and GitHub Actions with self-hosted runners.
- Infrastructure as code — Ansible playbooks, Terraform, Helm charts and state-driven cluster definitions.
- Container-first deployment — services run in Podman/Docker with resource caps and health checks.
- Certificate automation — Let's Encrypt auto-renewal on every public site, plus an internal CA for local domains.
- Hardened edge — reverse-proxied services, source-disclosure guards, rate limiting and a purpose-built C++ WAF.
- Observability — Prometheus metrics, structured logs and real-time health endpoints.
Kubernetes cluster management, state-driven
An enterprise Kubernetes cluster management system with state-driven multi-cluster support, GitLab CI/CD integration and KVM host management.
- Universal
--statefileparameter — every script operates on an isolated, cluster-specific state - Cluster size templates from micro to large, with statefiles generated from successful installs
- Kubeconfig distribution to every KVM host, with per-cluster selection scripts
- MetalLB load balancing, Helm-templated TLS, and Prometheus monitoring
- No hardcoded values — network settings, hosts and domains read from state at runtime
Platforms we ship
BlabberMouth BT Scanner
Military-grade Bluetooth threat detection with tactical radar UI, AI threat assessment, GPS triangulation, real-time device tracking, and rootkit scanning. Cross-platform Electron desktop app.
BTHL Tactical Scanner
Cybersecurity reconnaissance platform for threat detection, signal intelligence, and RF domain analysis. Built for field deployment and tactical operations.
BTHL-CheckGate
Enterprise Windows system monitoring platform with Kubernetes integration, real-time metrics collection, REST API, and React dashboard for infrastructure health.
BTHL-K8Scape
Enterprise Kubernetes cluster management system with state-driven multi-cluster support, GitLab CI/CD integration, and KVM host management.
BTHL-CA
Internal Certificate Authority for self-signed SSL/TLS certificate chain management across bthlcorp.com infrastructure and local development domains.
The Mcaster1 broadcast stack
BTHL Radio runs on infrastructure we engineer ourselves — compiled C++17 daemons with TLS termination, PHP-FPM web interfaces, MariaDB persistence and systemd supervision.
Mcaster1DNAS
Streaming server for professional internet radio.
DSP Encoder
Professional audio processing and encoding pipeline.
AMP
Desktop media player built on Qt6.
AudioPipe
Virtual audio routing between applications.
BackDraft WAF
A pure-C++ web application firewall at the edge.
StreamProxy
Stream relay and directory proxy in Go.
YP Manager
Directory service for the CasterClub community.
Studio
C++20 / Qt 6.8 broadcast studio with multi-database support.
Engineering partnerships
Need instrument software, a hardened platform or a DevSecOps practice built to production standards? Let us talk.