Born from repeated consulting problems
TRF
Hardened Images & Software Supply Chain
API Platform
Enterprise Azure APIM & Gateway Operations
CDeck
Internal Developer Platform
Opencrypt
PKI Platform
OpenDP
Open Data Platform
DigitID
Application, Workload Identity & Authorization Platform
CPlane
Composable Content & Omnichannel Delivery
TRF
TRF (Trusted Runtime Factory) builds, hardens, scans, signs, attests, and continuously rebuilds golden images, container base images , so every workload starts from a known good, provenance verified baseline instead of an ad hoc one.
API Platform
A secure, developer ready API management platform built on Azure API Management (APIM) for publishing, protecting, governing, and operating APIs at scale. API Platform uses APIM Workspaces to give individual API teams federated, self-service ownership of their own APIs and policies, while a central platform team retains gateway infrastructure, identity, and observability standards across environments, giving application teams a consistent path from API definition to production.
CDeck
An internal developer platform gives engineers one governed front door to infrastructure, deployment, and service ownership instead of assembling cloud tools by hand. CDeck is Infer Origins' engineering control deck for cloud native delivery, an enterprise IDP that pairs a Backstage powered developer portal with automated CAPI and CAPZ infrastructure provisioning on Azure, so teams provision environments, discover services, deploy workloads, apply platform standards, and understand operational health in one place.
Opencrypt
Opencrypt is a managed PKI and trust platform built on OpenBao. It operates certificate authorities, issues and rotates certificates automatically, including through ACME, and distributes trust across environments, so teams get standardized certificate services without operating PKI infrastructure themselves.
OpenDP
OpenDP is a governed data control plane built on Apache Airflow, OpenMetadata, and OpenLineage. It standardizes ingestion, orchestration, quality, lineage, and delivery across analytics and AI workloads, evaluating data contracts and quality gates as part of the delivery lifecycle rather than after deployment.
DigitID
DigitID is a secure, developer ready identity and authorization platform for applications, APIs, services, and workloads. It combines federated application identity with SPIFFE and SPIRE workload identity to cover non human identity management end to end, providing authentication, workload attestation, short lived credentials, federation, and consistent authorization patterns across Kubernetes and cloud environments.
CPlane
CPlane is a managed headless CMS: a control plane for modeling, governing, and delivering structured content once, so websites, mobile apps, portals, and other digital channels can each pull from the same source through standardized APIs, without a code release every time content changes.