ROYALFIRE

Royalfire

I build hosting platforms,
then I try to break them.

Control panels, bot fleets, and the security work that keeps them standing. Most of what I ship I have also attacked, because a system I have not tried to break is a system I only think is safe.

status — currently auditing the VajraClouds access model

Selected work

Four areas. The reasoning behind each one is on its own page.

VajraClouds Mission Control

A hosting control panel where the admin surface is the product, not an afterthought.

platform

2026

  • Node.js
  • Express
  • Discord OAuth2

active

Black-box security assessment

An authorised penetration test of my own hosting dashboard, written up honestly — including the finding that mattered most.

security

2026

  • Burp-style manual probing
  • OAuth2
  • HMAC session analysis

active

Support and bot fleet

Discord support that does not lose a message when the server is lagging.

automation

2026

  • Node.js
  • Discord API
  • Pterodactyl Panel API

active

Minecraft server stack

Running a game server that stays consistent when the owner is not watching it.

game infrastructure

2026

  • Paper 1.21
  • ProtocolLib
  • DeluxeMenus

active

What I do

Hosting platforms

Control panels, billing, node management, and the access model that keeps the admin surface honest.

Security assessment

Black-box testing against a live application, reported with severity, remediation order, and effort.

Discord automation

Support intake, ticket lifecycle, transcripts, and fleet daemons driven from the dashboard rather than chat.