DeltaZulu is a small technology company focused on cybersecurity, infrastructure, and defensive engineering. We build tools and operational practice for teams that need their systems to keep working under pressure — not theatre, not buzzwords, not generic dashboards.
We provide evidence-led consultancy and risk assessment services that translate operational realities into defensible controls. Our engagements span cybersecurity strategy, infrastructure resilience, and business continuity planning.
Practical, evidence-led security work — not posture theatre. We focus on the controls and telemetry that actually shape outcomes during an incident, and the audit artefacts buyers can defend in a review.
Cybersecurity and operational resilience risk assessment aligned to regulatory frameworks (NIS2, DORA). We identify material exposures and provide actionable remediation paths that account for operational constraints.
Detection, response, drills, and the tooling that makes them survivable at small-team scale. We build for the operator who is on-call at 02:00, not for the slide-deck audience three quarters later.
Some of this work is released openly. Some becomes the basis for commercial products. The throughline is the same: instrumentation and controls a small operations team can actually run, audit, and explain.
Day-to-day tooling for detection, triage, and response — built so a small team can keep pace without drowning in vendor consoles or low-signal alerts.
Resolver telemetry, DNS-layer signals, and traffic instrumentation that make the boring parts of a network legible — well before an investigation needs them.
Controls, checks, and evidence outputs aligned to compliance regimes (NIS2, DORA-adjacent). The kind of artefacts a procurement reviewer actually reads.
Realistic exercises, attack-path validation, and tabletop scaffolding — the unglamorous discipline that turns a written runbook into something a team trusts at 02:00.
We are committed to supporting Free and Open Source Software as a core part of our practice. FOSS releases represent our vision to give back to the community and share the operational scaffolding that underpins our work. We contribute new tools, enhancements, and integrations to strengthen the ecosystem.
A Windows desktop application with both GUI and CLI for managing adapter MAC addresses. A from-scratch reimplementation of Technitium MAC Address Changer with a narrower, more maintainable feature scope.
A Windows LAN tool (GUI + CLI) for discovering hosts and running bounded, authorised ARP-disruption sessions. Built for internal labs, defensive validation, and incident-response diagnostics on owned infrastructure.
A pair of plugins that extend Technitium DNS Server with operational integrations: pipeline-bounded query-log export to files, HTTP, and Syslog sinks; and a connector for ingesting MISP threat-intel indicators into DNS-layer enforcement.
Three current releases under the DeltaZulu-OU organisation. More tooling, including resolver-side telemetry and defensive-testing scaffolds, follows the same publish-when-useful cadence. We actively contribute to the broader security and infrastructure ecosystem.
Browse the GitHub orgOur open-source work is the practice. Commercial offerings are deliberately announced apart from it — when they are mature enough to defend on their own terms, with their own positioning and support obligations.
Protective DNS builds on the same resolver-telemetry and evidence-output work that runs through our open practice. A forthcoming SIEM extends that pattern into a modern data security pipeline: proper stream processing, near real-time rules, scheduled rules by default, and a data lake for long-term storage. The core principle is bring your own storage format — the data belongs to the customer.
Direct enquiries about engagements, partnerships, or our published tooling are welcome. We reply individually — no marketing funnel, no qualification gauntlet.
For engagement enquiries, partnerships, and direct correspondence.
Open-source releases and the operational tooling behind our practice.
Company updates, hiring, and longer-form posts on defensive engineering.
