# Engineering that helps teams ship.

> Magma Moose is a development studio: platform, cloud, network and security engineering, and open-source developer tools like Diatreme, Chargate and Brimyr.

Canonical: <https://www.magmamoose.com/> · Last updated: 2026-09-23

*development studio · services & tools*

Magma Moose is a development studio. We take on platform, cloud, network and security engineering for teams that ship, and we build open-source developer tools of our own, like **Diatreme** for releases, **Chargate** and **Brimyr** for gating what a pull request changes, and **Draventis** for testing what you deployed.

- [Work with us](https://www.magmamoose.com/services/)
- [Explore the tools](https://www.magmamoose.com/#products)
- [GitHub](https://github.com/MagmaMoose)

*the work*

## What we do, and what we give away.

### [Services](https://www.magmamoose.com/services/)

platform, cloud, network & security engineering

Hands-on, from architecture to production. We make your systems faster, safer and more reliable. Run it end to end for you, or alongside the engineers you already have.

what we do

- Platform engineering & DevOps
- Cloud engineering
- Infrastructure as code
- Network engineering
- Security engineering
- Monitoring & observability

### [Diatreme](https://www.magmamoose.com/diatreme/) (live)

release orchestration

One GitHub Action for the whole release spine: semantic versioning, releases and changelogs, signed release commits, provenance-verified Docker promotion, and CycloneDX SBOMs. The same workflow for any versioning tool, on GitHub.com or Enterprise.

.github/workflows/release.yml:

```yaml
- uses: MagmaMoose/diatreme@v2
  with:
    environment: prod
    environments: '["prod"]'
```

### [Dün Mir](https://www.magmamoose.com/dunmir/) (live)

MikroTik fleet monitoring

Agentless monitoring for MikroTik fleets: the router dials out over HTTPS, so nothing is installed on the box and nothing listens for a connection. Encrypted backups and config history, sealed to a key only you hold. Free for one device.

RouterOS terminal:

```
# paste once — the router checks in to you
/system scheduler add name=dunmir \
  interval=1h on-event=dunmir-checkin
```

### [Chargate](https://www.magmamoose.com/chargate/) (live)

security & lint gating

A security and lint gate built on MegaLinter that fails a pull request only on the findings it introduces. Pre-existing findings never block, and the full SARIF always ships to DefectDojo, Dependency-Track or the GitHub Security tab.

.github/workflows/security.yml:

```yaml
- uses: magmamoose/chargate@v2
  with:
    fail_on: high  # net-new only
```

### [Brimyr](https://www.magmamoose.com/brimyr/) (live)

patch-coverage gating

Point it at any repo: it detects the ecosystem, runs your tests with coverage, and gates the pull request on the coverage of the lines it changed. Legacy debt never blocks. Chargate's twin, quality assurance to its security.

.github/workflows/coverage.yml:

```yaml
- uses: magmamoose/brimyr@v1
  with:
    threshold: '80'  # patch coverage
```

### [Draventis](https://www.magmamoose.com/draventis/) (early)

scheduled security testing

The offensive-security half. Static analysis reads your code; Draventis tests what you actually deployed. OWASP ZAP and Nuclei run against your running targets on a schedule, and the findings land in DefectDojo.

targets.yaml:

```yaml
defaults:
  policy: baseline  # prod-safe
  schedule: nightly
```

## Take the tools. Keep the change.

Diatreme, Chargate, Brimyr and Draventis are open source and Apache-2.0 licensed.

### Open at the core

Every Magma Moose tool is open source and free to run. Read it, fork it, trust it. No key required to ship with it in production.

### Built because we wanted them

Our open-source tools fill gaps we kept running into in the industry, things we wanted and could not find. We build them to our own standard and give them away.

### Nothing held back

The open-source version is the whole tool. No features fenced off, no trial clock, no paid tier waiting to unlock what you already need.

## Built in the open. Follow the forge.

Diatreme, Chargate, Brimyr and Draventis are free and open today. And when you want your platform faster, safer and more reliable, that is what we do best.

- [Work with us](mailto:hello@magmamoose.com?subject=Engineering%20services)
- [Follow on GitHub](https://github.com/MagmaMoose)

## Links

- [Open source: Diatreme docs](https://docs.magmamoose.com/diatreme/)
- [Open source: Homebrew tap](https://github.com/MagmaMoose/homebrew-tap)
- [Company: Contact](mailto:hello@magmamoose.com)
- [Company: LinkedIn](https://www.linkedin.com/company/magmamoose)