4 products on the anvil

Security software, forged for the AI era.

BPMforge is Bradford Matthews. I build PKI and threat modeling platforms, an NES and SNES emulator, and agent tooling that holds AI-written code to real quality gates.

brad@bpmforge: ~
try:
On the anvil

Coming soon

Products being finished for release. Source stays closed until each one is ready.

Coming soonGoReactApache 2.0

KryptKeeper

Guard your cryptographic trust. An enterprise PKI and crypto trust platform: run your own certificate authority, discover every certificate on your network, and manage the full lifecycle from one dashboard.

  • ACME, EST, SCEP, OCSP, CRL, CMP
  • Native ADCS replacement
  • HSM, Vault and cloud KMS keys
  • Post-quantum ready (ML-DSA)
kryptkeeper.io/dashboard
KryptKeeper dashboard showing certificate expiry over the next 90 days, 247 certificates, 18 expiring and 3 expired
Coming soonNext.jsFastifySTRIDE

ThreatForge

Threat modeling you can draw. Lay out your system on a canvas, mark trust boundaries, and get STRIDE threats suggested by AI as you build the model.

  • Drag-and-drop canvas
  • Mitigation tracking
  • Real-time collaboration
  • PDF, JSON, YAML, SVG export
threatforge.bpmforge.com
ThreatForge canvas with an online checkout architecture inside a trust boundary, and a threats panel listing 44 STRIDE threats with CVSS scores
Coming soonRustNESSNES

RetroForge

Accurate emulation, opt-in upgrades. A hybrid NES and SNES emulator whose enhancements switch on without ever changing the original hardware behavior.

  • 1,233 of 1,265 SNES titles boot
  • 1,234 of 1,281 NES titles boot
  • GPU rendering, anti-flicker
  • Ultrawide maps, Lua scripting
Read more →Bring your own ROMs
RetroForge · full-level reconstruction
RetroForge full-level reconstruction: console output on the left, and on the right the whole level decoded from ROM with the current viewport outlined
Coming soonRustTauri v2MIT / Apache 2.0

KPrust

KeePass-grade security, modern polish. An open-source, offline-first password manager built in Rust, for people who want a vault they control without a dated interface.

  • SSH and GPG keys in the vault
  • Keys forwarded to agents on unlock
  • Timeline history, one-click restore
  • Git-annex sharing and sync
kprust · vault
Open source

Shipped

Public on GitHub. New projects appear here once they go public and you approve them. See every release →

About

The person behind the forge

Bradford Matthews

Founder, BPMforge

I build security software and the tooling that keeps AI-assisted development honest. My work spans certificate infrastructure, threat modeling and secrets management, plus agent systems that check their own output before anyone else has to.

Draft bio: send me a few lines about your background
PKIThreat modelingAppSecRustGoAI agentsMCP