Independent software studio · UK

One engineer. Whole systems.

Kernal Tech is the studio of Andrzej Werner — designing, building and operating production software wherever the problem happens to be. Care operations, systematic markets, online games, media automation, security tooling, autonomous agents. Every project here runs on real infrastructure rather than sitting in a folder as a prototype, and the portfolio keeps growing.

Founder: Andrzej Werner
Based: South Wales
Team: One engineer
Practice: Design, build, operate

The work

Live projects, in domains that rarely share an engineer. Each states what it is, what it runs on, and honestly where it stands.

Care operations

CareShift

Workforce software for care homes

Rota planning, timesheets and payroll for residential care — with the compliance side built in rather than bolted on: staff training records, DBS expiry tracking and the evidence trail an inspection actually asks for.

Built single-tenant by design. Each home gets its own install and its own data, which keeps the boundary between organisations physical rather than a query filter someone can get wrong.

LivePHP MySQLSelf-hosted

Marketing site Try the app

SpecificationCare

Sector	Residential & domiciliary care
Covers	Rota, timesheets, payroll, HR, compliance
Architecture	Single-tenant per install
Deployment	Self-hosted
Status	In service

Markets research

SignalDesk

Systematic trading, running live — with bespoke builds to order

A working systematic trading platform covering US equities and crypto: live signal generation, execution against your own broker account, position and risk management, and a dashboard that shows what the system is doing and why.

Every strategy is validated before it runs — hypothesis, parameters and pass/fail thresholds fixed before testing, against data held back during development. Strategies that fail that bar are retired rather than retuned, and the platform reports its own state honestly, including when something breaks.

Beyond the standard platform, bespoke builds are available — custom strategies, private deployments and integrations built to a specific mandate.

LivePython DockerValidated strategies Bespoke builds

Visit SignalDesk

SpecificationMarkets

Markets	US equities, crypto
Validation	Pre-registered, holdout tested
Execution	Your own broker account
Controls	Drawdown breaker, position limits, kill switch
Premium	Bespoke strategies and private deployments
Status	Live

Games

Kingdoms of Teyvat

An original open-world MMORPG, mobile first

A persistent multiplayer world built on a self-owned server fork — original art, original quests, and its own progression and companion systems written from scratch rather than reskinned from someone else's design.

The stack was chosen around one constraint: the client has a proven Android build, so phones are the first real platform rather than an eventual port. Monetisation is entitlement-based and deliberately cosmetic — convenience and appearance, never power.

In developmentC++ LuaMySQLAndroid

Visit the site

SpecificationGames

Genre	Open-world MMORPG
First platform	Android
World	2048 × 2048 tiles
Custom systems	Quests, pets, waypoints, market
Monetisation	Cosmetic and convenience only
Status	Server live, pre-launch

Media automation

Content Factory

A publishing pipeline that runs itself

Short-form vertical video, produced end to end without a camera: real source articles in, narrated and captioned video out, published straight to YouTube, TikTok and Instagram through each platform's own API.

Every video is grounded in an actual published article — the pipeline summarises real reporting rather than inventing claims. Two channels run on it today, each with its own voice, palette and mascot.

OperatingPython FFmpegDocker

SpecificationMedia

Output	45–90s vertical video
Channels	Two, independently themed
Sourcing	Live RSS, real articles only
Publishing	YouTube, TikTok, Instagram APIs
Status	Running daily

Intelligence tooling

Nightglass

Open-source intelligence, gathered without touching the target

A passive reconnaissance toolkit. Point it at a domain, a handle or an address and it assembles what the public internet already says — registration records, certificate history, exposed infrastructure, archived pages, breach appearances — into one timeline you can actually read.

Nothing is scanned or probed. Every source is one a stranger could open in a browser, and every finding keeps the URL and timestamp it came from, so any claim in a report can be checked rather than trusted.

OnlinePython Async collectorsPassive only

Open the console

SpecificationIntelligence

Collection	Passive only — no scanning or probing
Collectors	Registration, infra, certificates, archive, handles
Interface	CLI and web console
Output	Unified timeline, JSON / CSV / PDF
Audit	Source and retrieval time on every finding
Status	Online

Domain security

Bastion

Every record that decides whether your mail arrives — or gets spoofed

One domain in, one graded report out. Bastion reads registration, DNS, mail authentication and certificate records, checks each against how it should be configured, and gives you the exact record to publish when something is wrong.

Built because SPF, DKIM and DMARC fail quietly. A policy of p=none looks configured but enforces nothing; an SPF record past ten lookups is invalid and silently ignored. Nothing breaks — mail just starts landing in spam, or leaving in somebody else's name.

OnlineSPF · DKIM · DMARC DNSSECRead-only

Open the scanner

SpecificationDomains

Input	A domain name
Method	Read-only public record lookups
Areas	Registration, DNS, SPF, DKIM, DMARC, TLS
Grades	Per-area, plus an overall letter
Remediation	Exact record text, ready to publish
Status	Online

Autonomous agent

KAI

Kernal Autonomous Intelligence — an agent that runs your machine, and your day

A resident AI agent that does the work rather than describing it. It drives the machine directly — applications, files, browsers, terminals — so anything a person can do at a computer, it can be given to do. You talk to it, and it answers, through a spatial holographic interface rather than a chat box.

Day to day that means email triaged and answered, calendars managed, morning briefings prepared, research done, reports written, systems watched. It learns how you work, remembers what it has been told, and corrects itself when it gets something wrong instead of repeating the mistake.

Built per client, to that client's machines, tools and working habits. More capability lands continuously.

By commission Voice Holographic UI Machine control Persistent memory

Enquire about KAI

SpecificationAgent

Interface	Voice, plus a holographic workspace
Control	Full desktop — apps, files, browser, terminal
Handles	Email, calendar, briefings, research, reporting
Memory	Persistent, and self-correcting
Delivery	Built per client, to their own systems
Availability	By commission — contact only

Field services

Werner Computer Services

Computer repair, custom builds and networks — Llanelli and Swansea

The hands-on half of the studio. Desktops and laptops that will not boot, machines that crawl, cracked screens, dead batteries, failing drives — diagnosed free, quoted as a fixed price before anything is opened, and warranted for twelve months.

Also custom builds specced around what the machine is actually for, home Wi-Fi that reaches the back bedroom, and small business IT: office fit-outs, shared drives, printers, backups and switches that stay up. One engineer start to finish, so nobody hands your machine to somebody else.

Taking bookings Repairs Custom builds Networks Data recovery

Open the site

SpecificationField

Covers	Llanelli, Swansea and Carmarthenshire
Diagnosis	Free, before any quote
Pricing	Fixed, agreed in writing up front
Turnaround	24–72 hours on most repairs
Warranty	12 months, parts and labour
Status	Online

Hosting

Kernal Cloud

Managed hosting on Oracle Cloud Infrastructure — London

Websites, web applications, databases and private services, each on a dedicated machine built to spec. Sized, secured, backed up nightly and kept patched, with certificates that renew themselves and a firewall that starts closed.

Customers get a portal rather than a support queue: uptime measured every five minutes from real checks, connection details, and a fixed set of jobs they can run themselves — open a firewall port, restart a service, read its logs, apply security updates, take a backup. Every request is recorded with who asked and what came back.

Live FastAPI Docker SSH agent Two-factor PayPal

Open the site

SpecificationHosting

Region	London, data stays in the UK
From	£19 a month, no setup fee
Backups	Nightly, held off the server
Monitoring	Every five minutes
Access	Root over SSH, keys only
Status	Online

Game hosting

KernalMine

Dedicated Minecraft servers — London

A machine of your own rather than a slot on a box shared with twenty other worlds. Java or Bedrock, plugins and modpacks welcome, built by hand to the spec of the package and running the same day.

The control panel shows the actual server console instead of hiding it: start, stop and restart with a warning and a world save first, the last hundred log lines, who is online, whitelist and operators, and a backup you can take before installing a plugin you are unsure about. SFTP straight into the mods folder, because it is your server.

Live Java & Bedrock Modpacks SFTP Nightly backups

Open the site

SpecificationGame hosting

From	£5 a month, 2 GB
Largest	3 cores, 6 GB, 100 GB disk
Editions	Java, Bedrock, or bridged
Your files	SFTP to mods and plugins
Backups	Nightly, restored on request
Status	Online

More in the workshop

Portfolio · Growing

Andrzej Werner

Owner, and the engineer behind every project here.

I build systems that have to keep running when nobody is watching them.

Care rotas, market signals, a game world and a publishing pipeline have almost nothing in common on the surface. Underneath they are the same problem: state that must stay correct, jobs that must survive a restart, and a failure mode that has to be visible before it matters.

That is the thread through everything here — infrastructure that reports on itself honestly, including when the answer is that something did not work.

Background

Over 12 years in IT. Full-stack developer in a software house, then engineering at the UK's largest managed service provider — before leaving to help build Beyond IT, as a partner, into one of the best MSPs in the country.

Away from the keyboard: modifying cars and track days, and time with my family and my little boy. The work is aimed at making a change in the world, not just shipping software.

Credentials

BSc (Hons) Computer Forensics
Certified Ethical Hacker (CEH)
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Security, Compliance & Identity Fundamentals
Cisco CCNA · Cisco CCNP
Cyber Essentials

Available for

Consulting, contract work, licensing or acquisition enquiries — to confirm.

Get in touch

Start a conversation.

support@kernaltech.co.uk

Company details

Kernal Tech — Sole Trading

Elsewhere

Coming soon