Open Source as Trust

Because trust requires transparency. When you deploy AI infrastructure, you need to verify what it does, not just trust the vendor's marketing. Open source lets you read the code, audit the behavior, run your own security scans, and fork it if the vendor disappears. We open-source because it's the only model consistent with our Anti-Consultancy philosophy: own everything, depend on nobody.

Windsurf (Codeium) was acquired and the product direction shifted overnight. Users who had built workflows around the platform had no recourse, their tools were controlled by a company that no longer prioritized their use case. With open source, this can't happen. The code exists independently of the company. If NimbleBrain disappeared tomorrow, every tool we've built would still be available, forkable, and maintainable.

The opposite. Open source is more auditable, which means vulnerabilities are found and fixed faster. Proprietary code relies on 'security through obscurity,' which is not security at all. With open source, your security team can audit the code before deployment. With proprietary tools, you're trusting the vendor's word.

NimbleBrain provides support for our open-source tools through engagements. But the tools don't require our support; they're designed to be self-sufficient. Documentation, community, and the code itself are the primary support channels. If you want NimbleBrain's help, it's available. If you don't, the tools still work.

Yes. Every tool is designed to run on your infrastructure. mpak, Upjack, Synapse, all can be self-hosted. No phone-home requirements, no license servers, no usage tracking. This is what ownership means: you control where the code runs and what data it touches.