Core Principles
A few core principles govern how we build tools at LCI Security. They are invariants and every decision we make has to survive them.
- Tools should be simple and composable.
- Tools should be priced reasonably.
- A single purchase is not consent for marketing.
- Your data belongs to you.
These are not aspirations we hope to grow into, but are already built into the products you can buy from us today and into the way we sell them.
1. Tools should be simple and composable
A tool should do one thing and do it well, and it should produce results other tools can consume. Tools built this way hold up under unexpected runtime conditions and under attack.
Nerine does exactly three things: it reads one or more test files, runs the tests, and writes a structured log file. Even the test files are limited to three commands: compare, modify, and extract. Anyone can read a Nerine test and know what it does, and Nerine drops into any workflow that can read a file and write a log.
2. Tools should be priced reasonably
We put our prices directly on the site. No form, no call with a salesperson. Because we are a small shop with no hungry investors to feed, we don't have to charge outrageous prices. Each product is priced for the customer it was built for: the hobbyist, the consultant, or the enterprise.
3. A single purchase is not consent for marketing
When you purchase software from us you are not consenting to a long-term relationship. No follow-up emails, no marketing emails, no "time to renew" emails. The only email message you will ever get is the receipt from our payment processor, and only if you gave them an address. Our website has no analytics, UTMs, per-channel links, or referrer tagging. If the software is worth renewing, you will renew it without a reminder from us.
4. Your data belongs to you
Our software never sends your data back to us: no telemetry, no customer data, no usage data, not even a license check. Our software works offline and makes only the network calls it was built to make. License keys are verified offline, with Ed25519 signatures checked against a public key compiled into the binary. You never create an account to buy, renew, or run our software.
What this means for you
Together these principles add up to software that answers to you and not to us. It runs on your machine, on your network, on your schedule. If you have a valid license, it keeps working when our site is down, when your lab has no route to the internet, and when you have forgotten we exist. You know the price before you ever talk to us. Your inbox stays quiet after you buy. Your data stays where you put it. You get a tool that does its job and then gets out of your way.