Security tooling
Defensive tools for examining software before it is trusted.
ReleasedHammerhead v0.1.0
Released Hammerhead v0.1.0
Security, developer, and local-first software.
Talarurus is an independent software organization. Its first release, Hammerhead, audits potentially untrusted software repositories on your own machine.
Hammerhead
Audit model
Runs locally
Featured product
Audit a repository before you depend on it.
Hammerhead is defensive security tooling for auditing potentially untrusted software repositories. It is local-first, written in Go, and reports findings in three separate classes.
Local-first
Audits run on your own machine, where the repository already is.
SafeWalker architecture
Hammerhead is built around a security-focused SafeWalker architecture.
Security, Hygiene, Info
Hammerhead separates its findings into three classes: Security, Hygiene, and Info.
Terminal reports
Read results directly in your shell as part of a manual review.
JSON reports
Structured output for scripts and other tools.
Written in Go
A single command-line tool, used by hand or from your own automation.
Areas of work
Three areas. One release so far.
Talarurus builds in three areas. Hammerhead is the first release. Work in the other areas will be published when it is ready.
Developer tooling
Focused tools for the day-to-day work of building and maintaining software.
No public release yet
Local-first software / AI
Software, including AI, that runs on hardware you control and keeps your data there.
No public release yet
Principles
How Talarurus builds software.
Defensive by design
Security is the starting assumption. Hammerhead is built around a security-focused SafeWalker architecture.
Local control
Software that runs where your code and data already are: on your own machine.
Understandable output
Results should be clear enough to act on, for people and for tools.
Focused tools
Each tool has a defined job and a clear boundary.
About
An independent software organization.
Talarurus was founded in 2026 to build security, developer, and local-first software.
It takes its name from Talarurus, a genus of armored dinosaur.
Follow the work.
Find Talarurus on GitHub, or get in touch at ammaar@talarurus.com.