Elite-class software development & IT engineering
Today a server in the data centre. Tomorrow an app in the App Store.
Over 25 years of experience and training. From the rack to the iPhone, from one hand.
Pick where it hurts or where you want to go. Everything else follows from the conversation.
From a single server to a highly available cluster: planned, built, documented and operated – with a recovery that has actually been rehearsed.
Learn moreSoftware that mirrors your process exactly and adapts to the way you work. Clean, secure, maintainable – with tests and documentation.
Learn moreNative apps for iPhone, Android, macOS and Windows from one codebase – including signing, store review and updates.
Learn moreYour own certificate authority, signed e-mails and documents, mTLS and hardening – security you can verify.
Learn moreOperations with accountability: monitoring, patch management, incident plan – or an honest second opinion on your plans.
Learn moreFive fields, one standard: technology that holds – today and in ten years.
Servers, network, virtualisation, storage and backup – planned as a whole, coordinated down to the last detail.
Clusters, redundant paths, rehearsed failover.
Proxmox, VMware or Kubernetes – sized to fit.
3-2-1 strategy, offsite copy, regular restore tests.
Segmentation, VLANs, firewalls, VPN, zero trust.
Backends, interfaces and automation – built for your workflow, with tests, documentation and a clear operating concept.
TypeScript, Rust, Python – strictly typed, well tested.
ERP, CRM, accounting, mail – your systems talk to each other.
Workflows, reports and routine run on their own.
Claude-based assistants where they truly save time.
iPhone, Android, macOS, Windows and web from a single project – including signing, store review and updates.
Native shell, biometrics, push, share target, deep links.
macOS notarised, Windows signed, Linux packages.
Review guidelines, screenshots, privacy labels.
Automatic updates with signed releases.
Your own certificate authority, signed e-mails and PDFs, mTLS for services and devices – trust on a cryptographic basis.
Root offline, issuing CA online, ACME for internal services.
S/MIME for e-mail, PAdES with timestamp for PDF.
Client certificates, mTLS, least privilege.
Baselines, patch management, audit logs.
Monitoring, patches, incident plan and an honest second opinion – so technology stays reliable.
Metrics, logs, alerts – before anyone notices.
Scheduled, tested, documented.
Runbooks, restart procedures, rehearsed scenarios.
Architecture review, cost control, make-or-buy.
Everything listed here runs for real users – from open-source tools to store apps.
Screenshot annotations – lightweight, native, focused.
Capture a region, add numbered arrows, boxes, text and a magnifier, then save and copy with one click. My first tool – open source and free on every platform.
Copy messy text. Tap once. Get polish back.
Refines copied text with AI – improve, beautify, add emojis – and redacts personal data on the device first. My favourite app.
Your Mac, in its lane.
DNS protection against ads, trackers and known threats for every app: one switch, your own lists, a program guard and a MASQUE tunnel.
A free image editor you can change.
Layers, masks, brushes, retouching and filters – with a plug-in shop and an MCP interface so AI agents can edit images too.
A calculator that tiles into real windows.
Every pad is a real window that snaps flush to the next one. Twenty skins, 8-bit click sounds, more than twenty languages.
Two panes. Keyboard or mouse.
A dual-pane file manager for the Mac in the Norton Commander tradition: F5 copy, F6 move, drag and drop, encrypted Matrix Drive and MCP control for AI agents.
A fast, honest task manager.
CPU, memory, GPU, disk, network and processes live – with honest numbers. On Windows with process trees, services and ports; viewers for iPhone, Apple Watch and Apple TV.
Keeps AI agents in Cursor moving.
Clicks Run, Always Run and Approve in the Cursor IDE automatically – with statistics, multi-monitor and RustDesk support. Open source.
Every stage left its mark on how the work gets done: plan thoroughly, build cleanly, operate honestly.
Training, first networks and servers. Linux and Windows Server, Cisco, cabling done by hand.
Data centres, virtualisation, storage and high availability. Responsibility for systems that run around the clock.
Custom software and web platforms, first cloud migrations, interfaces between worlds.
iOS and Android, CI/CD, infrastructure as code, security as part of every project.
AI-assisted tools, an own certificate authority, apps from one codebase all the way to the App Store.
A selection – anonymised out of discretion.
Complete automation and digitalisation of every process – e-mail, telephony, SMS and AI functions in one portal, with a management system for nine roles. Apps for iOS, macOS, Windows, Android and Huawei.
Consolidation of two server rooms into one highly available data centre with offsite backup and a rehearsed restart.
Custom software connected to POS, accounting and suppliers – replacing three isolated tools and a lot of manual work.
Native app for iOS and Android from one codebase, with offline mode, push and signed PDF reports.
Every e-mail from Kainzmayer is S/MIME-signed. Every document can be delivered as a signed PDF with a timestamp. The certificates come from an own, published PKI.
S/MIME with a publicly trusted certificate. Apple Mail, Outlook and Thunderbird show the seal.
Request a signed replyPAdES signature with RFC 3161 timestamp and long-term validation – verifiable ten years from now.
Verify a PDFKainzmayer Root CA G1: root offline, issuing CA online. Certificates for devices, services and documents.
Root certificate & fingerprintsSecurity reports to security@kainzmayer.xyz – details in security.txt per RFC 9116.
security.txtPublished here once the certificate has been issued.Describe your project in a few lines. You will get a reply – digitally signed.