// Services · capabilities

What we build.

Three tiers, escalating in surface and secrecy. Concrete artifacts, no adjective stacks — every engagement ships a named deliverable, the source tree, and a runbook. Defaults below match the fixed-XMR packages on Pricing.

TIER 1

Untraceable presence

// Site

Static or SSR site on offshore, privacy-first hosting. No mainstream CDN, no analytics. Up to 6 pages on the list packages.

// Domain + mail

Domains registered by privacy proxy. Privacy mail hosting — no Gmail, no O365. Brochure volume on Presence; higher-volume plan on Presence +.

// Darknet

.onion Tor mirror with Onion-Location ships on Presence + only. Base Presence is clearnet-only.

// Presence · 10 XMR · 1–2 weeks
  • Up to 6 pages, SSR or static
  • Domain held by privacy proxy + DNS
  • Privacy mail (brochure volume) · unlimited aliases
  • Offshore front host with TLS · hardened SSH/firewall
  • No analytics, no mainstream CDN
  • 50% deposit · try before balance
  • PGP-signed source + encrypted USB + deploy runbook
  • Clearnet only — no .onion, no payment node
// Presence + · 15 XMR · 2–3 weeks
  • Everything in PRESENCE
  • Larger front host sized for clearnet + Tor
  • Higher-volume privacy mail plan
  • .onion Tor mirror sharing one backend
  • Hardened hidden-service config
  • Onion-Location advertised on clearnet
  • HS private-key custody transferred at handover

By default: 50% deposit at kickoff, you try the live build before the balance, then full handover (PGP-signed source, encrypted USB of the build tree, credentials, runbook). Includes 1-year domain + 1-year front hosting, brochure-volume privacy mail, TLS, hardened SSH/firewall baseline, and a 90-day free maintenance window — no retainer. After you confirm media, we wipe residual access. Self-hosted mail is a scoped add-on. Renewals outlined at scope and written into your runbook.

SHIPS → deployed site · signed source · encrypted USB · runbook · after balance · we hold nothing
TIER 2

Untraceable dark store

// Store

Full catalog, cart, admin and order pipeline. Clearnet on base; clearnet + .onion on Dark Store +.

// Payments

Self-hosted BTCPay on a separate payment host. Dark Store is BTC-only; Dark Store + adds XMR. USDT/LTC are scoped add-ons with disclosure — not default. Funds never in our custody after handover.

// Maintained

Mid-build review, hot→cold custody notes, then a 90-day free maintenance window. No retainer.

// Dark Store · 28 XMR · 4–6 weeks
  • Full catalog, cart, admin, inventory, order pipeline
  • Clearnet only
  • Self-hosted BTCPay · BTC-only checkout (pruned full-node class)
  • Separate payment host · year-1 included
  • Privacy mail for order and invoice mail
  • Hot→cold custody notes in the runbook
  • 50% deposit · try before balance
  • PGP-signed source + encrypted USB + store and pay-host runbooks
// Dark Store + · 44 XMR · 6–8 weeks
  • Everything in DARK STORE
  • Clearnet + .onion storefront · Onion-Location
  • Front host sized for dual surface
  • Payment host VPS #5-class · XMR + BTC
  • Escrow and refund flow documented
  • Payable test invoices on both rails before handover
  • Optional USDT/LTC only with written risk disclosure

By default: 50% deposit at kickoff, you try the live store before the balance, then full handover (PGP-signed source, encrypted USB, credentials, runbook). Includes 1-year domain, 1-year front hosting, and 1 year on one payment VPS (BTC-only / pruned full-node class), privacy mail for order and invoice mail, mid-build review, and a 90-day free maintenance window — no retainer. After you confirm media, we wipe residual access. USDT/LTC are not included. Self-hosted mail, extra disk, and pay-host upsizing are scoped add-ons. Renewals written into your runbook.

Try the path first:Umbra Supply sandbox— fictional catalogue, tiny mainnet checkout, refund request. Not a client store.

SHIPS → deployed store · admin · signed source · encrypted USB · runbooks · after balance · we hold nothing
TIER 3

Black Box — open scope

// Any build

No fixed deliverable — web, tool, service, daemon or infrastructure. Scoped from a written brief before quote.

// Escrow + comms

Multisig escrow where value moves. PGP order flow, dead-drop message queue when the brief requires them.

// Kill-switch

Dead-man switch — infra wipes and rotates on compromise or missed check-in when scoped.

// What the engagement covers
  • Any build — web, tool, service or infrastructure
  • Written brief before quote — deliverables and non-goals locked
  • Deposit invoice via BTCPay checkout link after brief agreed
  • Balance invoice as scoped in the quote
  • Multisig escrow where value moves
  • PGP order flow · dead-drop message queue when scoped
  • Kill-switch / wipe-on-compromise when scoped
  • PGP-signed delivery + agreed support window
SHIPS → scoped brief · source tree · wipe runbook · discuss → brief → quote → build → wipe
HARDWARE

GrapheneOS Ready

// Handset

Made-to-order Pixel 10 series with bare GrapheneOS: new, grade A, or grade B. We source the handset — no client ship-in. Latest generation only. Express AU postage included.

// What ships by default

Official GrapheneOS install, verified-boot relock, Auditor attestation, hardening checklist, setup guide. Not a Threema / VPN / eSIM lifestyle bundle.

// Buy

Fixed XMR online (model, storage, grade, colour). Open shop·Product page·Custom preset quote.

SHIPS → Pixel · GrapheneOS · Auditor attest · hardening checklist · fixed price · express AU postage included
See pricing →