VulCode

All work

The whole portfolio on one page: 92 projects in 7 categories, each with a write-up and a preview.

Portfolio by category

Websites & landing pages

Complete websites for clients and for our own brands, from single-screen teasers to multi-page sites with pricing, a configurator and a back office where the client edits the content.

VulCode

Our own studio platform and the site you are looking at. It presents our services and products, ships a growing library of free developer tools and can be deployed for other clients.

Flaem

A multi-page website for Flaem, our control panel for hosting companies, in Polish and English.

Plazer

The website of Plazer, our encrypted messenger, in Polish and English, with a light and a dark theme.

Gyred

The website of Gyred, our panel for running many Claude Code and Codex sessions at once, in Polish and English.

Polimata

A Polish-language encyclopedia written only from high-quality sources, with copies of those sources kept next to the articles.

VulMail

The website of VulMail, email from the VulCode family on an @vulmail.pl address or your own domain.

VulBio

The website of VulBio, a service for link pages to paste into your Instagram, TikTok and YouTube bio.

Aphrodi

A full web presence for a Polish design and branding agency - one of our close partners.

WaveHost

A new website for a hosting brand: a multi-page site with transparent pricing, trust-building sections and a server configurator.

Sinlege

A marketing site for a VPS and Minecraft hosting provider. A plan switcher with clear pricing, a hardware-highlights section and full anti-DDoS protection as its own selling point.

Lunatic Studios

A game studio we built a brand teaser page for. One memorable logo animation and a dark, atmospheric aesthetic build anticipation around the brand.

DualFroz

The studio founder's personal site with eight sections in one navigation: a candy jar, a live Discord profile card, projects, open source and a blog, all in two languages.

dev.dualfroz.com

A developer card for the studio founder: projects, stack, an about section and contact in one navigation.

Jajco

A joke page at jajc.ooo: a link you send to friends to get them "egged". Deliberately built like the 90s, with a swinging egg, a blinking line and a PHP counter of everyone who got egged.

Jeju Macieju

A joke page at jejumacieju.pl with a hand-drawn face whose eyes pop further, jaw drops lower and hair stands higher with every click.

Panels & dashboards

Panels for clients, operators, resellers and teams: from hosting and hotels to restaurants and internal systems. Each with role-based permissions and data straight from the backend.

VulCode client panel

The client panel for our own brand: projects, billing, an affiliate program with automatic commission payout and support tickets.

Aphrodi client panel

A twin client panel in Aphrodi's full identity. The same proven core as the VulCode panel, a different brand and palette - proof that our panel architecture is genuinely multi-brand.

WaveHost client panel

The client panel for a hosting provider: ordering and managing VPS and dedicated servers, a wallet, invoices and a referral program.

SafeBands

The operational core of a medtech platform for a startup building smart rescue wristbands.

Monitoring and status

An internal monitoring system with a public status page and incident handling. Uptime counted honestly - time without observation is "unknown", and maintenance windows do not inflate availability.

Flaem operator panel

The panel a hosting company runs its whole Flaem installation from: nodes and onboarding them, plans, finance, KSeF invoices, the network with BGP and a team with a permission for every action.

Flaem reseller panel

The panel where a reseller sells the operator's servers under their own brand: logo, domain, colors, pricing with a margin, invoices under their own tax ID and their own ticket desk.

Flaem client panel

The panel where a hosting company's client buys and runs their own services: game servers with a live console, files and backups, VPSs, websites, domains and mail.

Atrium hotel panel

The daily panel for a hotel's front desk and owner: the day starts with arrivals, departures, rooms to clean and open issues, and ends with closing the day.

Lokal hospitality panel

The panel an owner and team run a restaurant, bar, club or cafe from: the day's dashboard, reservations on the floor plan, table and takeaway tabs, a kitchen screen and the menu.

Integrations & scripts

Integrations and tooling that connect systems to the rest of the world: payments and KSeF, domains, Discord and webhooks, service-to-service APIs, MCP servers and bots. Each one built around a specific system.

vulp

A terminal tool for managing many repositories at once. From one place it shows the state of the whole workspace, does batch syncs, handles PRs, issues and contribution stats.

Flaem

The integrations of the Flaem hosting platform, each connected separately with keys in the operator panel: payment gateways with BLIK entered right in the panel, KSeF with VIES and NBP exchange rates, domain registrars with a fallback order, DDoS protection, text messages and Discord.

Gyred

Gyred wires together the tools AI agents actually work in: Claude Code and Codex as session engines, repositories through vulp and gh, notifications on Discord, Telegram and Web Push, and an MCP server the sessions use themselves.

Plazer

Bots, webhooks and automations of the Plazer messenger that also work in end-to-end encrypted channels: a bot is a participant with its own keys there, not a hole in the encryption.

VulCode

The integrations of the VulCode client panel: a service-to-service channel through which the panel changes the plan of VulBio pages, suspends, resumes and cancels them, while a nightly reconciliation evens out any lost signal.

WaveHost

The integrations of the WaveHost client panel: VPSs created on Proxmox VE nodes through a job queue, game servers in Pterodactyl with console and power from the panel, Stripe payments with a signed webhook and a shop that pulls its offers from the brand's website on its own.

Aphrodi

The integrations of the Aphrodi agency's website and panel: the contact form, newsletter, referral links and analytics events reach the team's channels through webhook-proxy, and an analytics bot on the team's Discord answers with reports on traffic, pages, events, FAQ and referral links, posts a daily report on its own and announces crossed milestones.

Atrium

The internal API through which the VulCode client panel runs a hotel's subscription in Atrium: reading its state, setting the plan with the end of the paid period and suspending it with a stated reason.

Lokal

The internal API through which the VulCode client panel puts a venue on the free, trial or pro plan, suspends and unsuspends it.

Discord bots

Production bots running our brands' servers. Ticketing with team pings, welcoming new members, email verification and role hygiene - all tailored to a specific server.

webhook-proxy

A middleware layer between our services and Discord webhooks. It queues events per target, respects 429 limits and retries 5xx errors, so notifications do not get lost during traffic spikes.

Ops scripts

A set of diagnostic scripts that watch the health of our infrastructure. They catch config drift, secrets committed to repos, expiring certs, dead links, missing backups and occupied ports.

ghapi

Our own GitHub statistics API powering dualfroz.com, vulcode.com and profile READMEs: raw JSON and SVG cards with commits, languages, frameworks, tests, streaks and open source contributions.

Nebula

Plugins for SCP: Secret Laboratory servers wired to Discord. Player sessions and stats in a MySQL database, in-game ranks assigned live from roles, player lookup by Discord, Steam or IP address, punishments with templates, and reports the staff accept and close from the Remote Admin panel, confirming the close with a reason on Discord.

monito

A monitoring microservice that checks HTTP addresses, Docker containers and server resources every minute, opens and closes incidents, counts uptime with maintenance windows and sends alerts to Discord without flooding the channel.

mailcow-mcp

An MCP server through which an AI assistant manages mail in Mailcow: domains and their DKIM record, creating and deleting mailboxes, aliases, and sending and reading messages over SMTP and IMAP.

lokalny-bot

A Discord bot called with a ping that answers with Claude from a Claude Code subscription or with a model from a local Ollama.

Mobile apps

Native Android and iOS apps: separate Kotlin and Swift code where native behavior matters, plus panels that behave like an app on a small screen.

Flaem

Native apps of the Flaem hosting platform, separately for Android in Kotlin and for iOS in Swift.

Plazer

A native Android app of the Plazer messenger, in Kotlin and Jetpack Compose, that also runs on phones without Google services.

Gyred

A native Android client for running AI agent sessions from a phone: a Today screen with what is waiting and what is running, a quick reply to a session straight from the list, operations to approve and undo, a conversation with the assistant by voice too, and a home screen widget with the number of things waiting.

Lokal

Lokal on a waiter's and an owner's phone: open table and takeaway tabs with the status of every item, adding dishes and settling the bill at the table, plus reservations, the kitchen screen and the day's dashboard laid out for a small screen.

Atrium

Atrium on a phone: the same hotel panel laid out for a small screen, with a side drawer menu, so the front desk, housekeepers and the owner carry arrivals, housekeeping, repairs and bookings with them instead of leaving them at the desk.

RimShot

RimShot on a phone: duels of two memes, gifs or jokes from the same category where one tap picks the funnier one, and the result immediately moves both in the Elo ranking.

Desktop apps

Apps, desktop add-ons and editor extensions installed on the computer, where a window open all day, file access or offline work matter. We build them natively, not as a wrapped browser.

Flaem

A native client of the Flaem hosting platform for Windows and Linux, written in C# on Avalonia, with no browser inside.

Plazer

A native app of the Plazer messenger for Windows, macOS and Linux, written in Rust on Slint, with no browser underneath and the encryption core built straight into the program.

Gyred

An AI agent control room as a native desktop window, rendered without a browser (Rust + Dioxus).

vulp

The same multi-repo tool, as a full-screen terminal interface. The whole workspace on one screen, keyboard-driven, without ever leaving the terminal.

studio

A desktop tool for moodboards, cuts and sessions on a shared core (Rust + Tauri).

Atrium

Atrium as an app for the front desk computer: bookings on a timeline with a free room search, a floor map with room status, housekeeping, repairs, the restaurant and room service, inventory, the schedule and reports in one window that stays open for the whole shift.

Lokal

Lokal as an app for the computer at the bar and in the office: reservations on a day timeline for every table, the floor plan, tabs, the kitchen screen, the menu, promotions, inventory with supplier orders, the schedule and reports.

RimShot

RimShot on a computer: content duels on a big screen, uploading memes, gifs and jokes straight from the disk, the rankings of every category and a moderation panel with the report queue, restoring and removing content, categories and invite codes.

Linux desktop add-ons

Add-ons for the Linux desktop: clip-vault keeps a clipboard history with pinning, a tray icon and blindness to password managers, and notif-vault archives every desktop notification to search from the terminal.

CodeHeat

A Visual Studio Code extension that counts working time in every project and file only while you are actually working, and paints it onto the file explorer as a heatmap.

Online platforms

Our own SaaS systems and open tools: whole products rather than single screens, built and maintained entirely in-house.

Flaem

Our flagship platform for hosting companies: a service panel, a store and a billing system, installed on the operator's own servers.

Atrium

A vertical SaaS for running a hotel: the owner "knows everything, everywhere, always".

Lokal

A vertical SaaS for running a hospitality venue. Menu, reservations with a floor plan, POS orders, promotions, inventory with purchase orders, staff scheduling and reports.

VulBio

A platform for personal link pages at vul.bio/<name>. A page is built in the panel from blocks, from a link list and socials to a gallery, a contact form and a launch countdown, with its own color, background and search description.

Plazer

An encrypted messenger for communities. Private messages encrypted with MLS (RFC 9420), a Rust core running in the browser and a community server you host yourself.

Gyred

A control room for running many AI agent sessions at once: one place to see them, talk to them, plan the work and be told when something needs a human.

Pharos

Uptime monitoring, a public status page and incident handling in a single binary (Go + embedded SQLite), started with one command.

Cairn

A self-hosted panel where knowledge about a project outlives the agents that work on it.

VulMail

Email on your own domain or an @vulmail.pl address, with no ads in the inbox. MX, SPF, DKIM and DMARC records set themselves up, the spam filter learns from the user's decisions, and the antivirus and quarantine hold back suspicious attachments.

RimShot

A humor platform where content fights in pairs: the user sees two memes, gifs or jokes from the same category and picks the funnier one.

Other

74 MVP frontends across industries and styles, plus engineering projects in many languages: an OS kernel, emulators, game and database engines, programming languages.

frostbyte

An x86_64 OS kernel in C and assembly. It boots via Multiboot2, switches to 64-bit mode with its own page tables, has a preemptive scheduler and runs ring-3 programs - it genuinely boots in QEMU.

voxelforge

A voxel engine with a playable browser world. The renderer runs on WebGL2/WASM, while the simulation core builds natively and has dense test coverage.

gameboy-sharp

A Game Boy (DMG) emulator in C#. A frontend-free core, so the whole machine runs and is verified headless against standard test ROMs.

chip8-sharp

A complete, tested CHIP-8 emulator in C#. The full instruction set verified headless against community test ROMs - a pure library with no rendering dependency.

vantage

A desktop dashboard for a self-hosted homelab: CPU, memory, disk, uptime, Docker container control and HTTP/TCP health checks.

kestrel

A relational database engine from scratch in Kotlin: a SQL parser, B-tree storage, an executor, WAL transactions and a CLI.

sift

A DPLL SAT solver with a propositional-logic toolkit and a DIMACS parser, in Haskell.

fml

A small ML-family language implemented from scratch in F#. Lexer, parser, type system and evaluator - a complete chain from source to result.

lumen

A dynamically-typed scripting language in Kotlin. Source is scanned, parsed into an AST, compiled to bytecode and run on a stack-based virtual machine.

prism

A Ruby web framework built purely on the standard library - no external gems. A router, a controller layer, a file-backed ORM with migrations, layouts and partials.

bazaar

An e-commerce shop on a hand-rolled PHP microframework - no Laravel, no Symfony.

slotline

A resource booking platform (rooms, courts, equipment) on Spring Boot. The core guarantees a single slot can never be double-booked - even under heavy concurrency.

cellar

A spreadsheet engine with its own formula language, in pure Dart. A parser, a dependency graph and cell recalculation - the foundation of how a spreadsheet works.

cobalt

An embedded LSM key/value store in Zig. Fresh writes go to a WAL-backed skiplist, flush to immutable SSTables, and space is reclaimed by leveled compaction.

excache

A cache layer in Elixir, built on the OTP actor model. Concurrent, resilient to single-process failures, with real tests.

fluxswap

A decentralized exchange (DEX) protocol in Solidity, built with Foundry. Liquidity pools, a router, staking and a timelock - with invariants and full test coverage.

gambit

A chess engine in Scala 3. Move generation, position evaluation and search - a complete chess brain, built with scala-cli.

warren

A roguelike with persistent progression, in Lua, driven from the terminal. Generated runs, classes, mutators and cross-run "legacy" - with a headless mode and determinism checks.

kite

A Scheme interpreter written in Swift. First-class continuations with call/cc, tail calls in constant space, hygienic syntax-rules macros, big integers and exact fractions, plus a REPL.

Frequently asked

Click a question and we answer in the chat.