Skip to content

What we've built

Real projects, described the same way: what was wrong, what we did, what changed. Where we don't have a measured number yet, the gap is marked.

01

A private AI for an office team, on GPUs they already had

In-house project, not a client engagement · 2026

Problem
The team wanted an AI assistant for chat and coding, but company code and documents shouldn't go to a public service. No single workstation had enough GPU memory for a 27B model with a long context.
What we did
We split a 27-billion-parameter model across four existing GPU workstations, three NVIDIA and one AMD, with llama.cpp RPC, built from source for CUDA, ROCm/HIP and Vulkan. People use it through Open WebUI for chat and through an OpenAI-compatible API in their coding tools. Deployment runs on Bash and systemd with health checks and rollback. The RPC port is firewalled, the service has its own account and the API needs a key.
Result
Load test with 10–16 people at once: 0 errors, about 22 tokens per second each, 262K-token context.
Stack

llama.cpp RPC · CUDA · ROCm/HIP · Vulkan · Open WebUI · Linux · systemd · Bash

How the cluster is wiredClick a box to see what it does.

Diagram: users connect to Open WebUI or the API, which send requests to llama-server. llama-server spreads the model across four GPU workers over llama.cpp RPC: three NVIDIA and one AMD. Tokens are streamed back.

↑ answers streamed back

Coordinator

llama-server

llama-server loads the 27B model and puts a part of it into each worker's GPU memory. For every token it coordinates the workers over the network. It runs under its own service account.

This splits one model across four machines; it isn't load balancing. Every request uses all four GPUs, because each holds part of the same model.

What it's used for

Most questions are about code. Because the model runs in the building, people can paste internal code without it leaving the network.

Illustrative conversation

Open WebUI

Developer

This deploy script restarts the inference server but never checks that it came back up. How do I wait for it to be healthy, with a timeout?

systemctl restart llama-server
echo "deploy finished"

Local model · 27B

Poll llama-server's /health endpoint after the restart. Exit as soon as it answers, and fail with a non-zero code if it's still down after 60 seconds, so the deployment can roll back:

systemctl restart llama-server

for attempt in $(seq 1 30); do
  if curl -fsS http://127.0.0.1:8080/health > /dev/null; then
    echo "llama-server is healthy"
    exit 0
  fi
  sleep 2
done

echo "llama-server not healthy after 60 s" >&2
exit 1

Measured in the load test

GPU workstations
4
parameters
27B
tokens of context
262K
people at once
10–16
errors
0
tokens/s per person
≈22

Figures from this setup's load test, not a promise for other hardware.

02

Finding out why the office firewall was at 100%

In-house project, not a client engagement · SonicWall NSA 4700 (Gen7)

Problem
The firewall's data plane was running close to 100%, and nobody knew which traffic was causing it.
What we did
We traced the biggest traffic sources across the internal subnets with App Flow Monitor, then tightened the security policies, segmentation and VLANs. Remote access runs on OpenVPN and LogonBox VPN, which is WireGuard-based.
Result
We found which traffic was filling the firewall and tightened the policies around it. Remote staff connect over VPN.
Stack

SonicWall NSA 4700 · SonicOS 7 · App Flow Monitor · VLANs · OpenVPN · WireGuard

03

Phishing simulations before a real attacker tries

In-house project, not a client engagement · Microsoft 365

Problem
Nobody knew how the team would react to a convincing phishing email.
What we did
We ran email phishing simulations with Microsoft Defender Attack Simulation Training, including credential-harvest campaigns with custom landing pages, and built small self-hosted training apps. We also proposed extending the tests to Slack with a GoPhish pilot.
Result
A measured picture of how the team reacts to phishing, from realistic campaigns instead of guesses.
Stack

Microsoft Defender for Office 365 · Attack Simulation Training · Microsoft 365

04

Letting people run scripts without giving them a shell

In-house project, not a client engagement · internal tool

Problem
Staff needed to run a handful of maintenance scripts. Giving everyone shell access to a server is how accidents happen.
What we did
A small Python/Flask service on the office network, with HTTP authentication, an allowlist of approved scripts and execution timeouts. People click a button; only approved code runs.
Result
People run the approved scripts themselves, and nobody needs shell access to the server.
Stack

Python · Flask · Linux · HTTP authentication

05

bazarescu.ro, our own deals site, mostly run by scripts

Our own project · Romania · ongoing

Problem
Discounts in Romanian online shops change every day. Checking them by hand doesn't scale.
What we did
Scheduled Python jobs import the retailers' product feeds, clean up the data, check prices and discounts, and publish the offers with affiliate links and AI-powered search. Search-demand research decides which categories get their own pages.
Result
Offers are imported, checked and published by scheduled jobs, without manual work.
Stack

Python · Scheduled jobs · Affiliate feeds · SEO · AI search

How an offer gets onto the site
  1. Retailer product feeds
  2. Python import jobs, on a schedule
  3. Products cleaned into one format
  4. Price and discount checked
  5. Search demand decides the categories
  6. Categories and AI search
  7. Page with an affiliate link
Visit bazarescu.ro

06

Documents and campaign tracking that don't need hand assembly

For our own business

Problem
Recurring documents were put together by hand, and ad campaigns ran without reliable measurement.
What we did
Python scripts with python-docx and ReportLab generate the documents from data. On the marketing side: Google Ads with conversion tracking through Google Tag Manager, technical SEO and Schema.org markup.
Result
Recurring documents come out of a script instead of being put together by hand, and campaigns run with conversion tracking.
Stack

Python · python-docx · ReportLab · Google Ads · Google Tag Manager · Schema.org

Tell us what's broken, or what you want to build.

Book a call, email us, or use the form. You get a reply from the engineer who would do the work.

Practical details

  • We work on Bucharest time (EET); our afternoons overlap with US East Coast mornings.
  • Remote across Europe and the US; on-site in Bucharest.

Or write here

This opens an email to us in your own mail program. Nothing is sent or stored by this site.