The engineering your company was missing
One team that runs your infrastructure, defends it, and builds the software and firmware your business is missing. Based in Castello di Godego, working with SMBs across Veneto and the rest of Italy.
What we run and manage
The platforms we deploy by default, and the ones we support because our clients already use them.
Our default stack
Also supported
Free · no sign-up
Start with a first look
Tell us what is slow, fragile or worrying you. You get a short, AI-drafted list of the things we would check first. It is a starting point, not an audit.
What we do
Three practices, one team. Most clients start with the first and call on the other two when a project needs them.
Infrastructure & Cybersecurity
We run servers, networks and endpoints for companies that have no IT department, and keep them patched, backed up and watched.
- Proxmox & OPNsense — no vendor lock-in
- Managed SentinelOne XDR & CrowdStrike
- Next-gen Firewalls, DNS security, VPN
- Backup, disaster recovery, hardening
- 24/7 monitoring with proactive alerting
AI Integration & Automation
We wire language models into the tools you already use, such as your ERP, mailbox and document archive, to remove repetitive work.
- LLMs integrated into business workflows
- Document and administrative automation
- Internal assistant trained on your procedures
- Automated data analysis and reporting
- Honest advice on where AI is not worth it
Software & Hardware Engineering
The key-code.dev side of the company: custom software, firmware for embedded devices, and hardware prototypes when nothing off the shelf fits.
- Custom software development (web, mobile, API)
- Firmware for embedded and IoT devices
- Hardware prototyping and PCB design
- Retrofitting and modernization of legacy systems
- Integration between heterogeneous systems
How this differs from a typical MSP
Most IT providers in our area resell licences and bill by the hour. Here is what changes when you work with us instead.
AI inside the tools you already use
No new portal to log into. We attach language models to the ERP, mailbox and file server you already have, and measure the result in hours given back each week.
Document automation
Reports, quotes and offers generated from the data already in your ERP, in your own templates.
Intelligent classification
Incoming emails, invoices and delivery notes read, tagged and filed to the right folder or ticket.
Corporate Copilot
An internal assistant that answers from your procedures, price lists and past tickets, with sources shown.
Predictive analysis
Alerts on unusual numbers in sales or production data, before someone spots them in a month-end report.
Workflow automation
Approvals, notifications and syncs between systems that today happen by copy and paste.
AI Agent for VoIP
A voice agent on your 3CX or Yeastar PBX that answers, routes calls and books appointments outside office hours.
We will tell you whether it is worth automating, and roughly what it would take.
Open source project
We maintain a public IP blocklist that our own firewalls run on. It started as an internal tool and is now used by people we have never met. The code and the feeds are on GitHub.
Bitwire Defense Grid: the IP blocklist behind our firewalls
A set of honeypots and feed aggregators that produce two plain-text lists, inbound and outbound, refreshed every hour. Any firewall that can read a URL can use them.
20M+
Malicious IPs blocked
Hourly
Feed refresh
2
Feeds: inbound and outbound
Free
Open source, no sign-up
The problem: most of the traffic is noise
Anything with a public IP gets scanned thousands of times a day by the same few thousand sources. That traffic fills firewall logs, hides the attempts that matter, and gives every unpatched service a steady stream of visitors.
The approach: block known-bad sources before the rules engine
The blocklist is loaded as an alias on OPNsense and dropped at the top of the ruleset. Packets from listed addresses are discarded before any other rule is evaluated, so the logs only show what is left.
Honeypots
Our own sensors record who is scanning and brute-forcing, and feed the list.
CIDR aggregation
Ranges with many offending hosts are collapsed into one rule, keeping the list small enough for a firewall.
Inbound feed
Scanners, brute-force sources and exploit kits, for blocking traffic coming in.
Outbound feed
Command-and-control servers, malware drops and phishing hosts, so an infected PC cannot call home.
In short
Two plain-text IP lists, over 20 million addresses, refreshed hourly. Maintained by Bitwire, applied on every OPNsense firewall we manage, free for anyone else.
Works with
OPNsense, pfSense, MikroTik, iptables, any SIEM that reads URL lists
Open Source
GithubLive data
Blocklist statisticsRecent work
Three engagements from the last two years. Client names withheld; we are happy to put you in touch on request.
Manufacturing SMB
Two ageing physical servers consolidated into a Proxmox cluster with ZFS and offsite backups. Unplanned downtime down 95% year on year, hardware and licence spend down 40%.
Professional Studio
SentinelOne XDR on every workstation, OPNsense with the blocklist at the perimeter, MFA everywhere. No security incidents in the first 12 months.
Logistics Company
Delivery notes and carrier emails classified and filed automatically, weekly reports generated from the ERP. About 8 hours of office work saved per week.
The right service level for your company
Three plans, all on a fixed monthly fee. We do not publish prices because they depend on how many machines you have and what state they are in.
Not sure which one fits? A 30-minute call is enough to tell you →
Not sure what state your IT is in?
>We come on site, inventory what you have, and send a written report: what is fine, what is at risk, what we would fix first. Free, no contract attached.