Seglamater Code

Open-source code from an independent security and software studio.

What this is

code.seglamater.app is where Seglamater publishes source for the software it builds. It is a curated set, not a mirror of everything we touch: each repository here is a reviewed public copy that you can read, build, and check for yourself. Other products stay private until they can stand up to the same scrutiny; they will appear here when they can.

We think transparency is a feature, not a marketing line. The most honest thing a security vendor can do is show you the code. So we do.

Why we do it this way

You can audit it. Claims about privacy and security are cheap. Source you can read is not. If we say a hub cannot read your data, or that a machine token cannot reach beyond its scope, the code is here to confirm it.
We use what we ship. These tools run in our own business before they reach anyone else. A bug that would annoy a customer annoys us first.
Clear terms. Every repository here is AGPL-3.0-only, with the full text in its LICENSE. Read, run, modify, and redistribute on those terms; run a modified copy as a network service and you share your changes. A commercial license is available for use outside the AGPL terms: contact info@seglamater.com.

Published today

sps: the Seglamater Privacy Standard scanner

A privacy scanner that grades a website from 0 to 100 against the SPS v1.0 specification: 24 pass/fail checks across transport security, security headers, tracking and third parties, cookie behavior, email and DNS security, and best practices, with a letter grade. Runs as a command-line tool or an HTTP API server with badges and scheduled scans. Written in Rust. Try it live at seglamater.app/privacy: free, no account. License: AGPL-3.0-only; the specification itself is CC BY 4.0.

atlas: scoped machine-token API

A curated architecture extract of Atlas, Seglamater's customer ledger: its authentication and authorization core, showing how automation gets least-privilege, revocable, auditable access to the ledger. Python on FastAPI and PostgreSQL. This is not the whole product; the README says what is left out. License: AGPL-3.0-only.

vantage: privacy-first business dashboard

Pre-alpha. Connectors pull from the services you already use, encrypt each record on your own device, and hand the hub only ciphertext it cannot read. The public copy carries the hub server, the client-side cryptography crate, the connector SDK, and the connectors; the desktop app is not published yet. Python and Rust. License: AGPL-3.0-only (one vendored third-party crate keeps its MIT license).

Feedback

Issues are not open on this forge. Send bugs, questions, and ideas to info@seglamater.com with the product name (SPS, Atlas, or Vantage) in the subject. Report a security issue to security@seglamater.com.

Elsewhere

seglamater.com: the company, and how to reach us.
seglamater.app/privacy: scan any site with SPS.

showcase