SYSTEM SECURE • POZNAŃ

Your IT under
full control.

Comprehensive computer repair, cybersecurity and network design. Enterprise-grade standards brought to the local market.

about.sh

$ whoami

gracjan@pivlab

$ cat role.txt

IT Technician &

Cybersecurity Specialist

$ uptime

Years of experience

// About

Enterprise standards,
a local approach.

I'm Gracjan — an experienced IT technician working day-to-day for a respected cybersecurity company. The procedures I use to secure enterprise clients' infrastructure I bring directly to the local market.

In my spare time I help businesses and individuals in Poznań and the surrounding area. From hardware repair, through system configuration (including Linux servers), to full security audits — I solve every problem with the utmost care.

// Services

How can I help you?

Repair & Service

  • Fault and failure diagnostics
  • Liquid-damage repair, drive replacement (incl. iMac)
  • Formatting, Windows / macOS installation
  • Hardware upgrades and speed-ups

Cybersecurity

  • Free security consultation
  • Configuration to the highest standards
  • Virus, adware and malware removal
  • Data protection and encryption

Networks & Monitoring

  • Wi-Fi and LAN networks (home / business)
  • CCTV / monitoring system design
  • CCTV for business and residential sites
  • Hardware advice and optimisation

Anonymity & Privacy

  • GrapheneOS on Google Pixel phones
  • Whonix & Tails OS
  • Disk encryption (LUKS / VeraCrypt)
  • OSINT / OPSEC — identity protection
  • VPN (WireGuard / Tailscale / NetBird)
  • Secure communication (Signal / Session)
  • Bitwarden self-hosted / KeePassXC
  • Metadata scrubbing and SSD/HDD wiping
// Anonymity

Knowledge you can actually use.

Practical guides on privacy and security — no fluff, ready to use right away.

// Shop

Hardware you can trust.

Devices we configure for maximum privacy and security — ready to use.

GrapheneOS

GrapheneOS Smartphones

A Google Pixel with GrapheneOS installed and configured — a de-Googled, hardened system for maximum privacy and security.

  • Full control over app permissions
  • No Google services (optional sandbox)
  • Configured for your threat model

// Models & pricing — coming soon

Ask about availability →
OpenWRT

OpenWRT Routers

Routers running open-source OpenWRT firmware, configured by us for privacy, performance and full control over your network.

  • Built-in VPN (WireGuard)
  • Network-wide ad and tracker blocking
  • Guest network, VLANs, monitoring

// Models & configuration details — coming soon

Ask about configuration →
// Case study

Bespoke router configuration.

A dedicated OpenWRT configuration matched 1:1 to the client's threat profile and infrastructure — a router tailored to the mission, with operational-grade security.

Platform

Minisforum MS-01

Intel Core i5-12600H · 16 threads · 2× 10GbE SFP+ · 32 GB RAM · nftables/fw4

Why such powerful hardware: the client operates an extensive internal network and a 10 Gbps uplink, which demands line-rate routing, firewalling and VPN tunneling. Consumer SoC routers become the bottleneck here — only an x86 platform with 10GbE SFP+ interfaces and a multi-core CPU can handle WireGuard encryption, inspection and multi-segment routing without sacrificing throughput.

Scope of the deployment
  • WireGuard full-tunnel to a VPN with automatic server rotation and a fail-closed killswitch — no real-IP leakage.
  • VLAN segmentation with per-segment policy: transparent Tor, clearnet-over-VPN, isolated guests, management overlay.
  • Encrypted DNS (DoH) to a privacy resolver, resolver enforcement (anti-bypass) + a separate DNS-over-Tor path.
  • Zero-trust firewall (default-deny): management on a self-hosted mesh VPN with source allow-listing, key-only SSH, out-of-band break-glass.
  • On-device IDS/IPS: CrowdSec with community blocklist and push notifications on compromise attempts.
  • Roaming / multi-uplink: automatic VPN endpoint adaptation across networks (LTE / Wi-Fi / Ethernet).

Result: a high-performance router with an OPSEC profile, capable of handling a 10 Gbps link — full traffic isolation and continuous security monitoring.

Ask about a deployment →
pivlab-ai.sh
AI ONLINE

Got a question? Ask our AI.

In the bottom-right corner you'll find a chat with an AI assistant powered by PivLab's own infrastructure. You have 3 queries — use them wisely!

// Portfolio

Recent projects.

Every device has a story. Here are selected projects from recent weeks.

Loading projects...
searxng.sh — private search engine
ZERO TRACKING

Try the best search engine
in the world.

SearXNG — a private meta-search engine that doesn't track, profile or sell your data. Hosted on PivLab infrastructure. No ads. No cookies. No compromises.

Self-hosted · Open Source · Powered by PivLab infrastructure

// Social Media & Knowledge Base

Stay up to date.

Every day I share IT security knowledge, service tips and news from the world of technology. Join the PivLab community.

Social feed widgets go here (e.g. LinkedIn embed, YouTube embed).

// Contact

Let's talk about your project.

Contact details

Session (click to copy)

0588f3c167d8e5f8dbb15d9e75de3350e49a442d062847e93137d580be248d0d68

// Save contact

QR — save PivLab contact (vCard)

Scan — save contact