Case Study · Solo-Built Platform
Glass is in active Beta development — this is a living platform

The Glass Platform

A self-hosted, AI-native operating system for a managed service provider. Over 25 independently deployable microservices and background daemons, a local LLM intelligence layer, a multi-tenant XDR security engine, dual remote access, and a unified single-pane UI — designed, written, and operated end to end.

40+
Docker containers
11
Specialized dashboards
97%
Est. commercial parity
160K+
Lines of code
Interactive Tour

See Glass in action

Walk through the platform's key screens — from the unified dashboard to AI ticket intelligence, the 3D facility viewer, and the security command center.

Architecture

A monolith UI orchestrating 25+ services & daemons.

The PHP core serves the unified experience and orchestrates everything over internal HTTP. Authentication is centralized in an identity service (JWT RS256 + OIDC + MFA), each domain owns its own data, and cross-module lookups are resolved by HTTP hydration — never by reaching into another service's tables.

  • Event-driven — Redis pub/sub & Streams broadcast domain events across services.
  • Profile-based deploys core, rmm, security, all Compose profiles.
  • Polyglot by design — Go daemons for SLA/RMM/telephony/CRM, Python for AI, Symfony/Platform for billing, PHP for core domain logic.
request flow
// Ticket created → AI pipeline
POST /api/v2/tickets
   │
   ├─▶ glass-tickets  // persist + state machine
   │      │
   │      ├─▶ ai-worker  // Dual-LLM screen
   │      │     sandboxprivileged
   │      │     ↳ intent, urgency, entities
   │      │
   │      └─▶ pgvector   // top-3 similar (RAG)
   │
   └─▶ redis pub/sub  // glass.tickets.createdsla-monitor · webhooks · chat
The Ecosystem

25+ Microservices & Daemons

Each is independently deployable, versioned, and owns its schema. Hover any card.

CRU-Glass

Core monolith — 11 dashboards, ticket UI, admin, AI report builder, 3D facility viewer.

The main hub. The screens everyone logs into — the dashboards, menus, and controls that tie the whole system together.
glass-core

Auth & identity — JWT RS256, SSO/OIDC, MFA, 7-tier RBAC, settings manager.

The bouncer. Handles secure sign-in — passwords, two-factor codes, single sign-on — and controls who's allowed to see what.
glass-tickets

PSA/ITSM — lifecycle state machine, rules engine, time tracking, paired with Go SLA daemon.

The help desk. Tracks every customer request from "reported" to "resolved," with reminders so nothing slips through the cracks.
glass-assets

CMDB — asset lifecycle, dynamic 0–100 health scoring, warranties, RMA claims.

The inventory. Every computer and device you manage — its age, health, and warranty — so you know what you have and when to replace it.
glass-sentinel

XDR & security ops — Wazuh SIEM on DMZ, multi-tenant isolation, blocklists, posture tracking & sandboxed remediation.

The security brain. Watches for threats across every customer, blocks known bad actors instantly, and safely runs the fix when something's found.
glass-strix

Automated penetration testing — continuous attack simulation, vulnerability scanning, and automated CVE audits.

Automated pentesting. Regularly tests your defenses against the latest security exploits to find weaknesses before hackers do.
glass-rmm

RMM & remote access — MeshCentral + RustDesk OSS dual remote access, auto-checkin tokens, interactive terminal, patch management.

Remote control. Lets technicians see and control customers' computers with dual engines and an interactive command shell.
glass-invoice

Native billing engine — SolidInvoice-powered PostgreSQL billing, recurring subscriptions, quotes, and payment gateway integration.

Invoicing & billing. Creates quotes and invoices directly in Glass with zero monthly per-seat fees or QuickBooks lock-in.
glass-unifi

Telephony & audio — UniFi Talk, Android Call & Meeting Audio Pipeline with local Whisper ASR & Pyannote speaker diarization.

Phones & meeting audio. Transcribes voicemails and meetings locally on GPU, separating speakers and attaching transcripts to tickets.
glass-chat

Real-time messaging — WebSocket, WebRTC voice/video, call transcription (Go binary handling 10k+ concurrent connections).

Team & client chat. Built-in messaging and video calls for staff and customers — with automatic transcripts of every call.
glass-cyber

Cybersecurity training & testing — interactive awareness modules & quizzes, phishing-simulation testing, per-user risk scoring.

Security training. Interactive courses plus fake phishing tests that teach staff to spot scams — and score who needs more practice.
glass-procurement

Procurement — purchase-order lifecycle, supplier catalog, computed totals tied to the CMDB.

Purchasing. Manages buying equipment — purchase orders, suppliers, and costs — all tied back to your inventory.
glass-crm

CRM — campaigns, .docx merge, queue dispatch with SKIP LOCKED, Redis Streams (compiled Go daemon).

Contacts & marketing. Keeps track of your customers and sends targeted email campaigns with high-throughput queueing.
glass-ai-worker

AI worker — Dual-LLM sandbox, pgvector RAG, Pydantic-enforced LLM outputs on local DGX Spark.

The AI engine. Reads tickets, finds similar past cases, and screens untrusted input through a guardian model before taking action.
glass-email

Email — Exchange ingestion, AI triage & noise scoring, push notifications.

Smart inbox. Reads incoming email, flags what's urgent versus junk, and turns real requests into help-desk tickets automatically.
glass-superops

PSA sync & native replacement — retired in production at Sterling Innovations (dropping catalog search from 3,429 ms to 30.5 ms).

Native speedup. Replaced legacy SuperOps cloud dependency in production with native PostgreSQL indexing for 110x speedup.
Signature Engineering

The parts I'm proudest of

A few pieces of Glass that go beyond what off-the-shelf platforms attempt.

Dual-LLM privilege isolation & dynamic routing

Untrusted text is screened by a sandbox model for prompt injection before the privileged automation model (glass-dev:latest) or reasoning engine (deepseek-r1:70b) ever processes it — powered by hardware-aware dynamic model routing on Blackwell unified memory.

NLP → SQL report builder

A plain-English prompt becomes a validated SQL query against 80+ tables, executed safely and rendered as a report — no query language required from the user.

Dual Remote Desktop & Terminal

RustDesk OSS + MeshCentral integrated dual remote access with auto-checkin tokens and a native multi-shell interactive terminal (CMD/PowerShell/Bash) with full scrollback.

110x Catalog Search & Database Performance

Eliminated commercial SaaS lag by migrating to PostgreSQL with pgvector, dropping asset and catalog query times from 3,429 ms down to 30.5 ms.

Android Call & Audio Diarization

Audio pipeline ingests mobile and UniFi Talk recordings, performing local Whisper ASR and Pyannote speaker diarization to attribute dialogue directly inside tickets.

Defense-in-depth security & Strix

Wazuh SIEM/XDR on DMZ, automated Strix pentesting & vulnerability mapping, SSO/OIDC + MFA, CRU CA mTLS, and sandboxed bubblewrap script execution.

This is the kind of work I do.

Glass is one person's answer to "how much platform can you actually build and run?" If that resonates, I'd love to talk.

Pricing is preliminary and subject to change at any time.