Alongside our engineering work we build and run products — our own, and for clients who need one built. The ones below are ours: six so far, from a free identity-provider security scanner to software for schools, workshops, function halls and water plants, plus the websites we build for others. All serverless on Cloudflare, by the same team that does our IAM engineering. Have one in mind? Talk to us.
6 products3 website demosServerless on CloudflareMulti-tenant SaaS
Security tooling
Grade your identity provider in seconds
oidcscan is the product closest to our day job — the same checks we run in IAM engagements, packaged as a free scanner.
oidcscan
Free OIDC & OAuth security scanner — SSL Labs for your IdP
Checks discovery, JWKS, endpoints, PKCE, token and algorithm hygiene
Every finding cites the exact RFC or OpenID clause it comes from
Immutable report permalinks to paste into tickets and PRs; optional drift monitoring
Sunnah fasting reminders — email or push, the evening before
Reminders for Mondays/Thursdays, White Days, Ashura, Dhul Hijjah & Shawwal — plus a Hijri converter, calendar feed, fasting journal and an embeddable widget. Free forever, Insha Allah.
Fast, secure sites for restaurants, hospitals and schools
Each live demo ships with a dozen-plus switchable designs. Pick a style you like and we make it yours — designed, built, secured and hosted end-to-end.
Reminders before Mondays & Thursdays, the White Days (13–15), Ashura, the first nine days of Dhul Hijjah incl. Arafah, and six of Shawwal — pausing respectfully for Ramadan, the Eids & Tashreeq
Two channels: email or push notifications — and sunnahfast installs as an app (PWA) straight from the browser, no app store
A short Jumuah email every Thursday evening — Surah al-Kahf, salawat & the hour of acceptance, Insha Allah
Lands at 7 PM in your own local timezone — the evening before, so suhoor is never a scramble
Umm al-Qura Hijri calendar with a ±1-day "sync with your local moon sighting" adjuster
Hijri ↔ Gregorian converter, month-by-month fasting-days pages, and a subscribable .ics calendar feed with built-in evening-before alarms for Google, Apple & Outlook
Private fasting journal (stored only on your device) and a free embeddable "next sunnah fast" widget for any website
Blog & reminder emails quote every hadith verbatim with its exact reference — machine-checked against verified source banks
Double opt-in signup and a genuine one-click unsubscribe — free forever, Insha Allah, no account, no card, ever
Technology Stack
Frontend
SvelteKit, TypeScript, TailwindCSS — installable PWA with a service worker
Backend API
Cloudflare Workers, Hono.js, TypeScript
Database
Cloudflare D1 (SQLite at the edge)
Notifications
Web Push — VAPID (RFC 8292) + RFC 8291 payload encryption, hand-built on WebCrypto
Email
Resend (confirmation & evening reminders)
Protection
Cloudflare Turnstile, per-IP rate limiting
Scheduling
Hourly Cron Trigger, timezone-aware
Analytics
Cloudflare Web Analytics (cookieless) + anonymous first-party referral tallies
Free forever, Insha Allah — no account, no card, just an email and a one-click unsubscribe whenever you like.
Note: The SvelteKit UI and REST API are served from the same Cloudflare Worker. The REST API interacts directly with both D1 (for data persistence) and Modal.com (for timetable generation & PDF export).
Note: Single Cloudflare Worker serves both the SvelteKit UI and REST API. Includes offline PWA support with automatic sync when connectivity resumes.
200+
API Endpoints
38
Database Tables
50
Test Suites
31
Route Modules
IntegrAuth in numbers
7+ years in IAM and API security15+ years of combined team experience11 client testimonials, in their own words15 gateway, CDN and load-balancer integrations10 custom Kong plugins in Lua162 technologies across 18 stack categories20 services, from MCP security to full-stack delivery6 products built and run in-house237 free Academy lessons237 hands-on labs, right in your browser27 free security tools59 real practicals in the Lab16 identity flows, animated step by step20 learning tracks, from identity to practical AI