# ADA AI

> With Claude we take on infrastructure and software work of any size. We are strongest on our own ground, from L1 to L7: Proxmox and Ceph clusters, the networks under them, and moves from VMware to Proxmox. We have worked these layers as a duo since 2012: that is how we know what to ask, and how to check the answer against your running systems.

This site as plain text, in English, for people and for language models. It says nothing the site does not.

Every machine answers. We know what to ask.

Read-only first. One approval per change.

- Founded: September 2026
- Based in: Breda, the Netherlands
- Chamber of Commerce: KvK 42162759
- © 2026 ADA AI · Breda, the Netherlands · KvK 42162759 · VAT ID NL005548208B55
- Works in: English, Turkish, Dutch
- 2012: as a duo in virtualization, software-defined storage and networking
- Oct 2025: with Claude, every working day
- We do not train models.
- Every example on this site is marked illustrative.
- Claude is a trademark of Anthropic, PBC. ADA AI is an independent company and is not affiliated with or endorsed by Anthropic.
- No trackers. One cookie remembers your language, only if you pick one.

## What we do

- [From the cable to the code.](https://ada-ai.nl/en/#what-we-do): Below are our own layers, from L1 to L7, and the software we build around them. Larger work means more phases, never fewer checks. In every layer the split is the same: Claude reads and drafts, we judge and check against your running systems, and you approve every change. Infrastructure work starts with a health check.
- [Cabling, NICs and servers](https://ada-ai.nl/en/#what-we-do): Cabling plans, NIC choice and server hardware, through to how each NIC is virtualized for your VMs. We check what the switch sees on each port, not what the label says.
- [Networks](https://ada-ai.nl/en/#what-we-do): Switching and LACP, routing, VXLAN overlays and software-defined networking, firewalls and redundant uplinks. We check what the device is running, not what the config says it should run.
- [Storage and virtualization](https://ada-ai.nl/en/#what-we-do): Proxmox and Ceph clusters, expansions and upgrades that keep quorum. VMware to Proxmox in waves, each with a way back that we test before the wave runs. Predictable workloads brought back from public cloud onto your own hardware. We ask what the second failure does, not only the first.
- [Services and redundancy](https://ada-ai.nl/en/#what-we-do): The databases, proxies and identity services inside your VMs, and the failover around them. A failover nobody has tested does not count.
- [Security and incidents](https://ada-ai.nl/en/#what-we-do): What answers from outside your allowlist, which filters are actually applied, and incident response when something is already wrong. We test an allowlist from outside it, never from inside.
- [MCP servers and Claude Code rollout](https://ada-ai.nl/en/#what-we-do): We build MCP servers that give Claude read-only access to your systems. We roll out Claude Code to your team, with a rules file that holds your estate's facts and your red lines. Every write waits for a named person's approval.
- [Software development](https://ada-ai.nl/en/#what-we-do): Internal tools, automation and the software around your operations, built with Claude Code from a written brief. Our instruments and this site are built the same way. Tests check what the software must and must not do; we decide what ships.
- [Health check](https://ada-ai.nl/en/#what-we-do): Fixed scope, read-only, price agreed up front.
- [Project](https://ada-ai.nl/en/#what-we-do): Migrations, builds, MCP servers and software, in phases, each with a way back.
- [Retainer](https://ada-ai.nl/en/#what-we-do): Monthly hours for operations, upgrades and capacity, with the same gate on every change.

## How we work

- [We ask. We check. You approve.](https://ada-ai.nl/en/#how-we-work): Searching the web was once a skill worth hiring for. Today the skill is talking to machines: the right question, the right context, and knowing which answers to distrust. For the past year we have done it with Claude. A search engine returns pages; Claude returns a plan or a command, and only someone who knows the layer underneath can judge whether it is safe to run. This is how we judge it.
- [Measure](https://ada-ai.nl/en/#how-we-work): Claude collects configuration, logs and metrics with read-only access. We read the output ourselves before anyone forms an opinion.
- [Plan](https://ada-ai.nl/en/#how-we-work): We put the findings to Claude with your estate's facts and our rules, and check every answer against the live system. What survives, we write as a step with a check and a rollback.
- [Approve](https://ada-ai.nl/en/#how-we-work): You see each step, its check and its way back. You approve one step at a time; an approval does not carry over.
- [Change and verify](https://ada-ai.nl/en/#how-we-work): Only the step you approved runs: through the machine, or by our hand for anything physical. We check the result and record it, including when it fails. If the check fails, we roll back.
- [Hand over](https://ada-ai.nl/en/#how-we-work): You keep the scripts, the runbooks and the rules file. No lock-in.
- [Claude answers. We answer for it.](https://ada-ai.nl/en/#practice): A rules file per estate: It holds your estate's facts and its red lines. Claude reads it before we ask anything. Scoped tools: We give the machine scoped tools: read-only by default, every write behind your approval, every call logged. What the machine never gets: Passwords and keys never enter the machine's context. They go straight to the command that needs them and never reach a log. This is how we run our own systems.

## Infrastructure Health Check

- [Infrastructure Health Check](https://ada-ai.nl/en/#health-check): We run it on your estate, read-only, and change nothing. A fixed-scope review of your Proxmox, Ceph, VMware or network estate. Claude reads and drafts, we judge every finding, and you get the report and the plan.
- [What the machine reads](https://ada-ai.nl/en/#health-check): Servers: Hardware health and firmware levels, through the management controller (BMC). Clusters: Quorum, HA state, and version drift between nodes. Ceph: Health, PG and OSD state, fill and balance, and the capacity trend. VMware: Hosts, VMs, datastores and their networks, read through vCenter: the inventory a move to Proxmox starts from. Backups: Job results for the last 30 days. Not restore tests. Network: Switch and firewall configuration, including where each filter is actually bound, and link aggregation (LACP) and loop protection on both ends of each link. Exposure: What answers from outside your allowlist, tested from outside it. The probe needs your written OK on scope and source addresses.
- [What we need](https://ada-ai.nl/en/#health-check): Accounts you create for us and revoke when we are done, all read-only: an audit role on Proxmox and Proxmox Backup Server, a vCenter user, a Ceph key, a user on your switches and firewalls, and a BMC account. We never ask for an administrator password.
- [What leaves your estate](https://ada-ai.nl/en/#health-check): What leaves your estate is agreed in writing before the check starts: which output reaches Claude, what we mask, and that passwords and keys never reach Claude.
- [What you get](https://ada-ai.nl/en/#health-check): Findings ranked by risk, each with the output line it came from; A plan in which every step has a check and a rollback; A walk-through call with your team
- [Where it stops](https://ada-ai.nl/en/#health-check): It changes nothing, tests no restores, and is not a penetration test. If you want us to carry out the plan, each step waits for your approval.

## The servers were clean. The code was not.

- [Acme Corp (name changed). Work by the founding couple, Q3 2026. All figures measured.](https://ada-ai.nl/en/#case): At Acme Corp, a multi-tenant web platform, passwords stolen elsewhere opened at least 10 real user accounts: 374 successful logins in 908 attempts. From those sessions an attacker pulled other tenants' records through an endpoint that never checked who owned the record. We worked with Claude Code, read-only first. We asked the logs where the theft came from: commercial VPN and hosting ranges only. 36 minutes into the work we blocked the attacker's addresses at the application and the load balancers, and temporarily closed the leaking endpoints. Every VM we scanned came back clean. We asked the code which endpoints took the tenant ID from the request body: 50. We put one ownership guard into 229 files: 0 false positives in 219 legitimate requests after the patch. We made direct calls to internal paths return a 404. Every change had a backup and a way back. Login and verification codes needed a rate limit, but nginx had been built without the module, so we swapped in the official package binary of the same version, live, with USR2. Not one request dropped during the swap.
- [36 min](https://ada-ai.nl/en/#case): from the start of our session to the attacker blocked
- [0 of 94,000+](https://ada-ai.nl/en/#case): attacker requests that got through after the block
- [16 of 16](https://ada-ai.nl/en/#case): VMs clean in a read-only scan: no new users, no web shell, no unexpected file changes
- [4 of 5](https://ada-ai.nl/en/#case): root causes closed in under three hours, in the code and in nginx; we handed the fifth to Acme Corp's own team
- [Ask for a health check](https://ada-ai.nl/en/#health-check): On your estate we start the same way, read-only, and every change waits for your approval. The health check reads your infrastructure; for code or an incident, book a call.

## Instruments

- [Machines you can question.](https://ada-ai.nl/en/#instruments): Each instrument runs one of our checks on an example estate: you ask, the machine answers, and you check its answer. Cabinet 3D is in testing and not public yet. In a health check, the same checks run on your estate, read-only.
- [Cabinet 3D](https://ada-ai.nl/en/#instruments): In testing: Ask a rack what happens when feed A fails. Built with Claude Code from a written brief; 59 tests check its behaviour. They caught an out-of-band cable routed through the wrong switch; six visual review rounds caught what the tests could not. No approval, no change, enforced by a test. Scripted run: no language model runs in the instrument.
- [The long way from A to B](https://ada-ai.nl/lab/enigma/): Lab · built with Claude Code: A 3D Enigma I you can type on. Plugboard, rotors, reflector and the daily key sheet are all modelled, and every keystroke is traced through thirteen stages. It has nothing to do with infrastructure. It shows how far we take a machine apart before we say we understand it.
- [Planned](https://ada-ai.nl/en/#instruments): Fabric, to ask your switches what is actually plugged in, and a failure-domain lab, to ask a Ceph pool what it survives.

## How this site is built.

- [How this site is built.](https://ada-ai.nl/en/#colophon): The same way we work on your estate: Claude Code drafts from a written brief, tests check what the page must and must not say, and we decide what goes live. Three parts of it are on this page: who decides, what the page is allowed to load, and the files machines read.
- [A person decides](https://ada-ai.nl/en/#colophon): When decisions pile up, our agent stops and writes a decision form with a recommended answer for each item. In one form we answered 23 of 26 decisions and went against the agent's recommendation on 4.
- [What this page loads](https://ada-ai.nl/en/#colophon): Nothing from third parties. A Python script generates it from one file per language, and a single Cloudflare Worker serves it with a content security policy that starts with default-src 'none' and allows no outside connections. The Enigma demo is the exception: it loads three.js and its fonts from outside hosts.
- [Check it yourself](https://ada-ai.nl/en/#colophon): `curl -sI https://ada-ai.nl/en/ | grep -i content-security-policy`: The page's content security policy: default-src 'none', and no outside host. `curl -s https://ada-ai.nl/en/ | grep -oE '(src|href)="https?://[^/"]+' | sort -u`: Every address the page loads or links to with a full URL: only ada-ai.nl itself. `curl -sI https://ada-ai.nl/en/ | grep -ci set-cookie`: 0: the server sets no cookie. The language cookie is set in your browser, and only when you pick a language. `curl -sI https://ada-ai.nl/lab/enigma/ | grep -i content-security-policy`: The Enigma demo's policy, with the outside hosts it loads three.js and its fonts from.

## About

- [A family company, small on purpose.](https://ada-ai.nl/en/#about): ADA AI was founded in Breda in September 2026 by a couple who have worked on infrastructure as a duo since 2012, layer by layer: networks from L1 to L7; the NIC, from choosing the physical card to virtualizing it; the services inside the VMs and their redundancy; and security incident response. Machines have always answered us. A management port answers a probe with a reset or with silence. A Ceph cluster answers HEALTH_WARN. A bridge that unexpectedly elects itself root is telling you nobody else speaks its protocol. We learned what to ask a machine where mistakes are expensive: in cabinets, on switches and during incidents. Claude is the newest machine in that conversation, and the first we can talk to in plain language. With Claude, the two of us take on infrastructure and software work of any size; we are strongest in our own layers, from L1 to L7. We ask Claude; Claude reads your servers with read-only access. You talk to the people who do the work, and they talk to the machines.
- [M. Tokgözoğlu](https://ada-ai.nl/en/#about): The founding couple: A duo since 2012 in virtualization, software-defined storage, hyperconverged infrastructure, VXLAN and software-defined networking. With Claude every working day since October 2025.

## Contact

- [hello@ada-ai.nl](mailto:hello@ada-ai.nl): Tell us what you run and what keeps breaking. You talk to the two of us, not to a bot. A 30-minute call is enough to tell whether a health check fits or what a project needs. We reply within one working day.
- [+31 6 21507900](tel:+31621507900)

## Pages

- [English](https://ada-ai.nl/en/): Every machine answers. We know what to ask.
- [Türkçe](https://ada-ai.nl/tr/): Her makine cevap verir. Ne soracağımızı biliyoruz.
- [Nederlands](https://ada-ai.nl/nl/): Elke machine geeft antwoord. Wij weten wat we moeten vragen.
- [Legal details and privacy](https://ada-ai.nl/en/legal/): Legal details; Privacy statement; Cookies; Security
- [Yasal bilgiler ve gizlilik](https://ada-ai.nl/tr/legal/): Yasal bilgiler; Gizlilik beyanı; Çerezler; Güvenlik
- [Juridische gegevens en privacy](https://ada-ai.nl/nl/legal/): Juridische gegevens; Privacyverklaring; Cookies; Beveiliging

## Optional

- [llms.txt](https://ada-ai.nl/llms.txt): This site as plain text, in English, for people and for language models. It says nothing the site does not.
- [robots.txt](https://ada-ai.nl/robots.txt): What crawlers may read.
- [sitemap.xml](https://ada-ai.nl/sitemap.xml): The language pages and the legal pages.
- [security.txt](https://ada-ai.nl/.well-known/security.txt): Where to report a security problem.