independent software studio

nullpointer
studio

We build software that runs on real machines. No cloud dependencies you don't own. No bloat. Just well-engineered systems.

connected · building things that matter since 2018
// what we do

services

Full-stack engineering for teams that need things to actually work. We specialise in self-hosted infrastructure, security-hardened deployments, and custom application development.

Infrastructure Engineering
Container orchestration, self-hosted cloud architecture, and production hardening. We design systems you own end-to-end — no vendor lock-in.
Podman LXD nftables Cloudflare
Full-Stack Development
Modern web applications built for longevity. We favour pragmatic technology choices over trendy frameworks that age in six months.
Node.js React Next.js NestJS PostgreSQL
Security & Hardening
Threat modelling, secure deployment pipelines, zero-trust network design, and audit preparation. Security as an architecture decision, not an afterthought.
AppArmor auditd TOTP E2EE
Dev Tools & Automation
Internal tooling, CI/CD pipelines, monitoring stacks, and custom developer experiences that reduce toil and keep teams shipping.
Prometheus Grafana Loki systemd
// selected projects

work

A selection of projects — self-initiated and client work.

2025
VELODROME
Node.js · PostgreSQL · Strava API · GPX
Bike ride analytics platform with Strava OAuth, GPX track parsing, interactive maps with satellite imagery, and elevation profiles. Self-hosted via Podman.
LIVE
2025
CryptoNote
Next.js · NestJS · PostgreSQL · AES-256-GCM
Zero-knowledge encrypted notes application. Client-side AES-256-GCM encryption, TOTP 2FA, admin panel. Nothing readable server-side.
LIVE
2024
HateShield
NestJS · Next.js · Mastodon · Matrix · Stalwart
Hate speech reporting platform with automatic Mastodon and Matrix account provisioning, multi-domain mail integration, and optional TOTP 2FA.
LIVE
2024
Inkwell
Electron · Markdown · Local-first
A distraction-free markdown writing environment inspired by Ulysses. Local-first, no telemetry, no subscriptions. Your words, your disk.
WIP
2023
PAPERBOY 64
HTML5 Canvas · JavaScript · C64 aesthetic
Browser-based Paperboy clone with authentic C64 colour palette, chiptune audio engine, and pixel-perfect sprite rendering. Playable in any modern browser.
LIVE
// how we build

stack

Opinionated tooling choices. Everything selected for reliability and operator ownership, not hype cycles.

frontend
  • React / Next.js
  • TypeScript
  • HTML5 Canvas
  • CSS (vanilla)
backend
  • Node.js
  • NestJS
  • PostgreSQL
  • REST / WebSocket
infrastructure
  • Podman (rootless)
  • LXD containers
  • systemd units
  • Cloudflare Tunnel
  • nftables
security
  • AppArmor
  • auditd
  • age encryption
  • TOTP / FIDO2
  • E2EE (AES-256-GCM)
observability
  • Prometheus
  • Grafana
  • Loki
  • Traefik v3
services
  • Stalwart mail
  • Mastodon
  • Matrix / Synapse
  • Ollama (local LLM)
// who we are

about

Nullpointer Studio is an independent software and infrastructure studio. We're generalists who go deep — comfortable in a kernel config or a React component, equally at home writing an nftables ruleset or a product spec.

We believe software should run on hardware you control. Not because we're ideological about it, but because self-hosted systems are more reliable, cheaper at scale, and don't have a quarterly earnings call that could discontinue your production dependency.

Our work ranges from bespoke web applications to complete self-hosted cloud infrastructure — often for small teams and founders who need senior-level engineering without the overhead of a full agency.

When we're not shipping client work: arcade games, bike analytics, and writing tools.

founded2018
locationremote-first
team sizesmall & focused
public inbound ports0
vendor lock-innone
uptime philosophy5 nines or bust
// get in touch

contact

We take on a small number of projects at a time to ensure quality. If you have something worth building, tell us about it.

We're particularly interested in: infrastructure migrations off big-cloud, security-critical applications, tools for developers, and anything involving interesting constraints.

We respond to every serious enquiry, usually within one business day.