Our Mission
About EvilBit Labs
Operator-grade security tools that just work, even when the Internet doesn't.
EvilBit Labs designs for real-world conditions: airgapped labs, classified networks, and systems that can't call home. Every release is built for professionals who need reliability, not marketing copy.
Founded by two veteran cybersecurity practitioners with a combined 25 years of experience in both offensive and defensive security, EvilBit Labs draws from work across the DoD, NASA, CISA, the Executive Branch, and critical infrastructure sectors.
We've built and defended systems that can't afford failure, and that discipline shows in our code.
We don't chase investors or growth charts. We focus on polish, transparency, and trust. No black boxes. No telemetry. No hidden strings.
Meet the Founders
Krystal (KryptoKat)
Security Strategist & Architect
Krystal has spent her career in defensive security within the DoD, protecting network assets at the highest level of the U.S. Federal Executive Branch.
She holds Bachelor and Master of Science degrees in Cybersecurity, along with the following certifications: CISSP, Security+, CCNA, and Splunk.
Her passion is defensive security, and she continues to expand her knowledge and capabilities as a dedicated cybersecurity practitioner.
Writes EvilBit Threat Digest: Blue team threat intelligence
Ken (UncleSp1d3r)
Co-Founder & Principal Toolsmith
Ken has spent 20+ years building and defending systems across NASA, the DoD, DHS, CISA, and the U.S. Executive Branch. His career spans systems administration, software development, cyber defense analysis, and technical leadership at the federal level. He competed internationally on the US-CERT CTF team.
He holds a Master of Science in Cybersecurity from Norwich University and a Bachelor of Science in Forensic Science and Technology from the University of Maryland. Certifications include CISSP, GSEC, GCIH, GCED, AWS Solutions Architect, and LPIC-1.
At EvilBit Labs, Ken writes the code, defines the engineering standards, and maintains the build pipeline. His focus is tools that are reproducible, transparent, and built for environments where "just spin up a container" is not an option.
Writes ZeroDay Field Notes: Red team threat intelligence
Partners in marriage, in life, and in cybersecurity, Krystal and Ken are both Norwich alumni who have been working together longer than most startups survive. They co-founded EvilBit Labs in 2020.
How We Use AI
AI doesn't write our tools. It helps refine them.
At EvilBit Labs, AI serves as a code reviewer and an intern, not an architect. It checks syntax, flags inefficiencies, and tests assumptions the way a diligent junior teammate would.
No AI has commit rights. No model touches private data. Every AI-assisted change is reviewed, tested, and verified by a human.
AI speeds the process, but integrity stays human.
Every community repo ships with an AI Policy: disclose your tools, own every line you submit, never ship code you cannot explain.
Read our AI Policy →Our Principles
The values that guide our work
- Operator-Centric
- We build for real-world needs. Every tool is shaped by firsthand experience from red teamers, blue teamers, and lab operators. We prioritize usability, clarity, and workflows that match how defenders actually work.
- Airgap-Friendly
- Our tools are designed to function fully offline, with zero reliance on cloud services, license servers, or external APIs. No surprise dependencies. No phone home. Just software that works in disconnected, high-security, and adversarial environments.
- Transparent by Design
- Open code, real docs, and behavior you can trust. We believe tools should be auditable, understandable, and modifiable. Transparency builds confidence for anyone who needs to debug, extend, or verify what's going on under the hood.
- Tested Under Pressure
- We test for the weird cases. Our focus is robust engineering that holds up under pressure, from flaky lab networks to real-world incidents. Predictable behavior matters more than fancy features, and graceful failure is part of the design.
- Human and AI Readable
- Our documentation, CLI help, and code comments are written to serve both humans and machines. Clear guidance for the operator and structured signals for AI tools and assistants.
- Your Stack, Your Choice
- We don't judge your stack. Whether you use grep or GPT, Vim or VS Code, Debian or Windows, we design our tools to support a wide range of workflows and platforms. The goal is interoperability, not control.