Small utilities and experiments.
php2shell-checker — OK, potentially
vulnerable or unknown — against the October 2026 fixed releases for CVE-2026-109618 and
CVE-2026-109619, with the vendor backports that carry the fix. Then keep a running tracker of the
PHP systems you are responsible for, stored only in this browser.
Meet Town →
A storybook town of the people, companies and topics worth keeping an eye on —
people are little animals in odd vehicles, companies are buildings, topics are billboards,
and the roads between them are the connections. Dated notes, a next-touch date, tags and
links on each one. Everything stays in your browser, encrypted with the password, with an
encrypted backup file you can export and import.
Export License Board →
Every export authorization a business holds, laid out as a board of hex tiles — one
per destination country, coloured by whether shipments are covered, expiring, waiting on
an agency or stopped. Each line carries its EAR pathway (BIS license, License Exception,
no license required, or ITAR) and is checked against the Commerce Country Chart and the
destination's country groups, so surplus licenses and gaps show up. Click a country for
what each authorization covers, its end-user, its drawdown, the conditions riding on it
and the reasons for control behind it; below the board sit a twelve-month calendar with
BIS reporting deadlines, a coverage matrix of product family against destination, a
groupable list view, a plain-language EAR reference and CSV export (demo data).
Export License Screener →
Enter a part number or description of a piece of equipment to get a quick first-pass
read on whether it likely needs a US export license — the probable CCL category,
ECCN and control reasons, with product-catalog lookup, destination flags,
restricted-party screening and a check of whether the license board already covers it
(demo data), plus a printable screening record.
Document Marking Scanner →
Point it at a folder of PDF, Word, PowerPoint, Excel and text files and it comes back solved
like a Rubik's cube: one row per file, linked to the file, saying whether the document carries
an export control warning (ITAR/EAR) or a CUI marking and which US government contract number
it cites. Headers, footers, slide notes and spreadsheet headers are read too, and scanned pages
go through OCR. Everything runs in your browser; nothing is uploaded.
Moat Deleter →
Identify the structural moat a sector or business relies on, classify the power
behind it, expose its load-bearing weakness, and follow a step-by-step playbook to
drain it.
NIS2 Requirement Tracker →
Look up EU NIS2 supply-chain and cybersecurity requirements and track compliance.
CMMC C3PAO Status Checker →
Enter a CAGE code or business name to assess whether an entity has completed a CMMC
third-party (C3PAO) assessment — with a brief status summary (level, date,
assessor) and a running index of entities and their current CMMC status.
What I Pay For a… →
A running daily budget of the small recurring things — a cup of coffee,
a smoothie — with the cost per day, a short note on each, and live
monthly and yearly totals so you can see your real overhead and where to trim.