Andri Pétur Hafþórsson: security engineer, sysadmin, resident tech wizard in Reykjavík. I keep systems standing under load, under audit, and under a Saturday night.
I run small on purpose. No account manager, no discovery phase that bills like a mortgage. The person who does the work is the person who picks up.
Firewall, DNS, deploy pipeline and the hero headline. Fewer handoffs, fewer places for the truth to go missing.
Logs somebody actually reads. Access you can revoke at 16:55 on a Friday. Unglamorous. Load-bearing. Deeply unsexy. Works.
Keep the interesting risk in the parts that don't page you at 03:00, then write down what broke where people can read it.
The studio, the labs, and the graveyard.
Everything that exists, with a URL. Kastro is the independent studio holding the client sites and the labs; the products below are mine. Client work is paused while I keep Nova's systems upright. The live ones, and the honest post-mortems, stay public.
Every client build now lives at Kastro: travel, commerce, machinery, automation. The business moved out so this site could stay a portfolio.
Side projects with the door open: infrastructure tools, harmless experiments, public proof-of-work.
02.C / PRODUCTS
4 BUILT · 2 LIVE · 1 PARKED · 1 FOLDEDEnd-to-end encrypted messaging with a server-independent core. Works over the internet, LoRa, or a USB stick in a coat pocket.
KOMMS.ORG ↗SPF, DKIM, DMARC, BIMI and report parsing: evidence that your domain isn't trivially spoofable.
DMARK.IS ↗Managed home-network safety for Icelandic families. Parked indefinitely: good idea, wrong year.
NETFRIDUR.IS ↗Iceland-hosted immutable backup, built end to end, then folded into RunAtlas. Shipping it taught me more than keeping it would have.
RECOVER.IS ↗