I'm Andri — a Reykjavík security engineer, sysadmin, and web consultant. 15 years across Windows, Linux, macOS; the last 5 years leaning hard into security and compliance.
I run small. I ship fast. I prefer honest work over pitch decks.
The short version of how I think about security, systems, and web work.
I have implemented and operated controls around ISO 27001, TPN Gold, and AI governance work for small teams, production studios, and infrastructure-heavy environments. The useful work is practical: scope, evidence, risk treatment, incident paths, and controls people will actually follow.
Windows, Linux, macOS, DNS, hosting, backups, access control, logging, and vendor selection. I favor boring designs a small team can understand during an outage over platforms that only make sense to the person who installed them.
I design, build, deploy, and maintain websites for Icelandic operators and small companies. The goal is fast pages, clear offers, reliable contact paths, and content that says what the business actually does.
Three projects. All live. No case-study PDFs — click through.
Kastro is the consultancy I run — where the security, systems, and web work gets delivered. Independent, Iceland-first, EU/EEA by default.
The consultancy I run. Iceland-first IT, security, cloud, domain trust, backup and recovery, and websites — sold straight, with data kept inside the EU/EEA by default. One person, no enterprise theatre.
Work with Kastro →Independent IT, security, and continuity for small European teams.
Immutable backups hosted in Iceland, designed for the ugly parts of ransomware, jurisdiction, and human error.
Domain trust done properly — SPF, DKIM, and DMARC set up and monitored so your mail is trusted and your name is hard to spoof.
Eight practical ways I help small teams ship secure systems and useful websites — delivered independently, or through Kastro for ongoing work.
Selected, across two decades. Current on request.
