DCYFR Labs builds @dcyfr/ai — an open-source AI agent framework with plugin marketplace, delegation system, and 20+ specialist agents. Learn about our mission at the intersection of cybersecurity and modern AI engineering.
DCYFR Labs builds @dcyfr/ai — a portable open-source TypeScript AI agent framework with plugin architecture, multi-provider LLM support, and a security-hardened delegation system. Founded by a cybersecurity architect, we bridge enterprise security practice and modern AI engineering.
“Security isn't about saying no, it's about enabling innovation with confidence.”
We believe in building resilient systems that empower teams to move fast without compromising on security. Our approach is practical, human-centric, and focused on real-world constraints rather than theoretical perfection.
Development & Architecture
Production-grade architecture decisions, server-first rendering, and building systems that scale. We share real experiences from real projects, complete with trade-offs and lessons learned.Explore development articles
Cybersecurity & Defense
Defense-in-depth strategies, practical security hardening, and analysis of real threats and defenses. Security as an enabler, not a bottleneck.Explore security articles
AI & Automation
Augmentation over replacement. We explore practical AI workflows, human-centric automation, and how AI can enhance (not replace) human expertise and creativity.Explore AI articles
Through our blog and projects, we share knowledge and practical guidance from real production systems — from security architecture to AI agent engineering and open-source framework development.
Author of @dcyfr/ai, a portable open-source AI agent framework on npm, and a human-AI partnership building secure software at scale.

Founding Architect
Founding Architect and creator of @dcyfr/ai — a portable open-source TypeScript AI agent framework with plugin marketplace, delegation system, and 20+ specialist agents published on npm. Security architect with a decade of experience leading global security programs and secure AI engineering.
AI Lab Assistant
An autonomous agent swarm built on the @dcyfr/ai framework — 20+ specialist agents for security analysis, code generation, architecture review, and delegation-routed task execution. Published on npm and powering DCYFR Labs development.

Issued by Global Information Assurance Certification (GIAC)

Issued by Global Information Assurance Certification (GIAC)

Issued by Global Information Assurance Certification (GIAC)
In 10 certifications
In 7 certifications
In 7 certifications
In 6 certifications
In 5 certifications
In 5 certifications
In 5 certifications
In 5 certifications
In 4 certifications
DCYFR is built by a swarm of specialised AI agents, each with deep expertise in a specific engineering domain. Together they handle everything from feature development to security auditing — autonomously and at scale.
The primary workspace agent. Coordinates cross-project work, enforces quality standards, and routes tasks to the right specialist. Serves as the DCYFR subject-matter expert for architecture decisions and cross-package changes.
End-to-End Feature Engineer
Implements complete features from database schema through Next.js UI. Handles React Server Components, API routes, Drizzle ORM, and full test coverage — shipping production-ready code in a single pass.
Type System Specialist
Deep TypeScript expertise: advanced generics, mapped types, conditional types, and strict null-safety. Migrates JavaScript to TypeScript and designs type-safe APIs that prevent entire categories of runtime errors.
Data Layer Designer
Designs PostgreSQL schemas with Drizzle ORM, creates migrations, and optimises slow queries. Balances normalisation with read performance and ensures referential integrity across the data model.
Security & Vulnerability Specialist
Audits code for OWASP vulnerabilities, performs threat modelling, and hardens authentication and authorisation flows. Enforces TLP classification and reviews dependency risk via automated Dependabot triage.
Design Pattern Validator
Reviews system designs against SOLID principles, identifies coupling risks, and writes Architecture Decision Records (ADRs). Ensures new patterns align with established conventions before implementation begins.
Test Strategy & Coverage
Designs Vitest test suites for unit, integration, and end-to-end scenarios. Achieves ≥99% pass rates, generates coverage reports, and enforces testing conventions so regressions are caught before merge.
CI/CD & Infrastructure
Manages GitHub Actions workflows, Vercel deployments, and Docker containerisation. Maintains the 30-job automation platform and ensures every commit reaches production safely and verifiably.
Core Web Vitals Optimiser
Profiles Next.js bundle sizes, optimises images, and eliminates render-blocking resources. Targets Lighthouse scores ≥95 and tracks Core Web Vitals regressions using the Elvis benchmark suite.
We'd love to hear from you! Whether you have questions, feedback, or just want to say hello, feel free to reach out through our social channels below.
Our calendar is now open! Whether you're looking for advice on secure coding practices, application performance, or architecture, we're here to help.
Booking Page
Meet with us
Twitter/X
Follow us on Twitter/X
DEV
Read our articles on DEV
Connect on LinkedIn
Peerlist
Build on Peerlist
Wellfound
Explore startups on Wellfound
GitHub
View our code
Become a Sponsor
Support open source projects
Credly
View our professional certifications
Goodreads
Read through our bookshelf