An independent lab, not an agency.

We take the engineering problems most organizations delegate.

Cardinal Codes is an independent systems and AI lab. We design sovereign infrastructure, carrier-grade networks, and on-premise AI, built, hosted and operated end to end. No subcontracting, no vendor lock-in, no data leaving the perimeter you define.

What we build

Sovereign Products

Range Zero: external attack surface management (Atlas), cybersecurity training (Paladin), and LLM prompt protection (Vanguard). Designed in Europe, NIS 2 and RGPD compliant.

Carrier-Grade Infrastructure

BGP/IPv6 networking, bare-metal Kubernetes (Talos, ArgoCD, Cilium), private cloud operations. The kind of infrastructure that stays up during transit outages.

On-Premise AI

Local LLM inference with vLLM, Qdrant vector DB, open-weight models. Air-gapped RAG pipelines with zero data leakage. Your models, your data, your servers.

Open Source

Four public projects: cardinal-talos-k8s, vanguard-core-proxy, sovereign-rag-engine, finops-leak-scanner. MIT and Apache 2.0 licensed.

Operating principles

01

Data Sovereignty & Privacy

Complete data retention, local AI inference on your own servers, and zero reliance on black-box third-party dependencies.

02

Architectural Rigor

End-to-end Zero Trust security, applied from BGP network routing down to LLM token-stream filtering.

03

Cost Efficiency & Control

Pragmatic engineering focused on eliminating cloud waste, reducing operational overhead, and delivering high ROI.

Start a conversation

Whether you need sovereign infrastructure, an AI protection gateway, or carrier-grade networking, write to us. We respond within 48 hours.

[email protected]