<!-- generated from about/index.html by admin/build/gen_markdown.py — do not edit by hand -->

*[open-source.sgit.ai](/index.md) · site v0.2.2 · canonical: https://open-source.sgit.ai/about/index.html*

> Dinis Cruz — founder of The Cyber Boardroom, MyFeeds.ai, RiskMandate.ai, VoiceDebrief.ai and the sgit.ai network (commercialised through sgraph.ai); former OWASP Board member and organiser of the OWASP Summits; creator of the O2 Platform. This site is the open-source strategy those companies run on, written from the experience of running it — with the author's interests declared.

---

# Dinis Cruz

This site is my position on open source — what it is for, how to practise it, and the history that supports it. It is written from the experience of building, open-sourcing and running security software and companies, and it is **the strategy those companies actually run on**: everything they ship is open source, and so are their investor materials.

## The record

| Role | What it involved |
|---|---|
| **Founder, [sgit.ai](https://sgit.ai)** | Encrypted vaults with git semantics — clone, commit, branch and merge files encrypted before they leave your machine — under Apache-2.0, and the [network of nineteen sites](https://sgit.ai/network/index.html) of which this is one. Each site publishes its argument before its implementation, so the commitments are checkable. |
| **Founder, [sgraph.ai](https://sgraph.ai)** | Where the strategy turns into revenue: the commercial home of **SG/Send**, the secure file-sharing service built on the open-source sgit layer, and the place that sells access to **SG/Vaults** — hosted sgit vaults. The code stays Apache-2.0; what is sold is the running, maintained, certified service, which is [exactly where this site says the commercial line belongs](../views/index.md#not-the-moat). |
| **Founder, [MyFeeds.ai](https://investor.myfeeds.ai/)** | Role-aware cybersecurity briefings built on semantic knowledge graphs — CISO, engineer and board views of the same news, with source attribution. **100% open source, serverless, no vendor lock-in.** The seed pitch, use of funds and unit economics are [published in the open](https://investor.myfeeds.ai/). |
| **Founder, [The Cyber Boardroom](https://thecyberboardroom.com)** | An AI-powered platform for the conversation between technical security teams and the board — bridging the two with knowledge-graph technology. Apache-2.0, with the community edition, the website and the automation in public repositories. |
| **Founder, [RiskMandate.ai](https://riskmandate.ai)** | The business risk layer for autonomous systems. The newest of the startups, alongside VoiceDebrief. |
| **Founder, [VoiceDebrief.ai](https://voicedebrief.ai)** | Voice recordings into transcripts and debriefs, entirely in the browser — no account, and nothing uploaded to a server. The ["ask for keys at run time, store nothing"](../founders/index.md#week) habit from the founders' page, shipped as a product. |
| **Former OWASP Board member** | And organiser of the OWASP Summits — [Lisbon 2011 and Woburn 2017](../owasp/index.md#summits), the working-session format with *"no spectators, only participants"* that the Open Security Summit series went on to build on. Current open-source work still ships under the `owasp-sbot` organisation, with `MGraph-DB` publicly credited to the OWASP community. |
| **Creator, the O2 Platform** | The OWASP static-analysis engine of 2010–2012, and the first of a line of open-source tooling that continues in the `osbot-*` and `mgraph-*` families, `memory_fs`, `Issues-FS` and `sgit-ai` — [all Apache-2.0, all on PyPI](../practice/index.md#published). |

## Built in the open, including the parts most companies keep closed

The argument on this site is that [open source is a strategy rather than a charity](../views/index.md), and the strongest evidence I can offer for it is that I run companies on it. That extends past the code:

- **The code** is Apache-2.0. **The working documents** — roughly 1,100 of them — are CC BY 4.0. **The published essays** at [docs.diniscruz.ai](https://docs.diniscruz.ai) are CC BY 4.0 as well — decided on 6 September 2026, after that repository's licence file was found to say CC0; the file follows. [Two licences, three layers, and what each is for →](../practice/index.md#reading)
- **The investor materials are public.**[MyFeeds.ai's investor relations site](https://investor.myfeeds.ai/), its [source repository](https://github.com/the-cyber-boardroom/MyFeeds-AI__Investor_Relations), and [The Cyber Boardroom's investment repository](https://github.com/the-cyber-boardroom/cbr-investment) are on GitHub rather than behind a data room. If technology is not the moat, neither is the pitch deck.
- **This site's own source** — every page as markdown, the build tooling, the briefs it was written from — is [in the repository](https://github.com/SGit-AI/SGit-AI__Website__Open-Source), and the estate is run through [its own stress test](../survivability/self-audit.md) with the result published.
- **The advice is published too.**[Owning the code, or opening it](../founders/index.md) is the reasoning from a strategy session with another founder, released CC BY so that it applies to every founder asking the same question.

## Interests declared

I run companies whose strategy this is, and which sell maintenance, quality and certification rather than code — [the market this site describes](../views/villagers.md) is one I intend to be in. Read the argument knowing that. Two things are built in to keep it honest:

- **The history is checkable without trusting me.** Every claim in [the six corrections](../history/index.md) and [the timeline](../history/timeline.md) carries its source and date, and several of them cut against the story that would flatter the argument. [The numbers this site declines to publish](../history/numbers.md) are the ones that would have helped it.
- **The tool works without me.**[The stress test](../survivability/stress-test.md) is answerable from public artefacts and runs entirely in your browser; nothing is sent anywhere. And rather than publish verdicts on named competitors, [it is run on my own estate](../survivability/self-audit.md), in public, with what each leg would take to change.

## Reach me, or correct me

[↗ LinkedIn](https://www.linkedin.com/in/diniscruz) is the fastest route. Corrections and requests for this site are tracked in the open on [the comms board](../admin/comms.md), and [the repository](https://github.com/SGit-AI/SGit-AI__Website__Open-Source) takes issues and pull requests. If you find something wrong here, I would rather know.

[← The documents](../documents/index.md)[Admin & engineering →](../admin/index.md)

---

*This page is released under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).*