# Flux8Labs > Flux8Labs is a software studio and digital agency based in Jaipur, Rajasthan, India. Founded by Bhavyansh Yadav and Mohit Phogat. The studio builds AI-powered systems, web platforms, browser-based tools, and developer security infrastructure for businesses and the public. Known for privacy-first browser tooling (most tools run entirely in the browser — no uploads, no tracking), AI automation for real-world operations, ekmire — a developer security SaaS for detecting secrets, injection risks, MCP tool poisoning, and AI-generated code vulnerabilities — and Minyut — an embeddable RAG chatbot SaaS for businesses. - Main site: https://flux8labs.com - Tools hub: https://tools.flux8labs.com - Blog: https://flux8labs.com/blog - Contact: https://flux8labs.com/contact - GST: 08BGHPY0904K1Z1 - Offices: Jaipur, Rajasthan & Gurugram, Haryana, India --- ## Blog - [How to Vet a Web Dev Agency: Ask What They've Shipped]: /blogs/how-to-evaluate-a-web-development-agency — Agency positioning post: why we point people to our own live products (ekmire, Minyut, Flux8Shield, GoPDF, GoVid) instead of a portfolio, and the real questions worth asking any agency before hiring. - [Flux8Shield: What 65,000 Passive Security Scans Taught Us]: /blogs/flux8shield-passive-website-security-scanner — Engineering build log: how our passive-only scanner checks 40+ factors (headers, TLS, exposed .env/.git files, CORS, cookie flags) with zero exploits sent, the abuse-driven rate limit decision, and what 65,000+ scans revealed about common misconfigurations. - [Building Minyut: An Embeddable RAG Chatbot in One Script Tag]: /blogs/building-minyut-embeddable-rag-chatbot-saas — Engineering build log: chunking strategy (600-token fixed-size with overlap), HuggingFace all-MiniLM-L6-v2 embeddings, pgvector on Supabase ap-south-1, Shadow DOM widget isolation, and the BYOK pricing model at $3/month. - [Running FFmpeg in the Browser: How We Built GoVid]: /blogs/ffmpeg-wasm-browser-video-compressor-govid — Engineering build log: how we run the FFmpeg binary via WebAssembly entirely in the browser to compress MP4, MOV, AVI, MKV, and WebM with no server, no upload, and real-time progress — including the SharedArrayBuffer and Web Worker gotchas. - [How We Automated PDF Purchase Orders for a ₹60Cr Manufacturer]: /blogs/ai-purchase-order-automation-indian-manufacturer — Build log: Gmail API + GPT-4 + Tally pipeline that automated PDF purchase order processing for Pankaj Fabricators, a Jaipur precision manufacturer supplying BHEL, Crompton Greaves, and Thales Portugal. --- ## Products - Products overview: https://flux8labs.com/products - Ekmire product page: https://flux8labs.com/products/ekmire - Minyut product page: https://flux8labs.com/products/minyut --- ## ekmire — Developer Security SaaS ekmire is Flux8Labs' flagship SaaS product. A three-layer developer security platform that detects secrets, injection attacks, prompt injection, MCP tool poisoning, and AI-generated code vulnerabilities at write time (CLI/MCP server), commit time (git pre-commit hook), and runtime (Rust reverse proxy). Powered by a crowd-sourced, Ed25519-signed rule bundle, a pgvector intelligence layer, and an AI semantic analysis layer. Indie-priced. All detection features available on the free tier. - URL: https://ekmire.com - Dashboard: https://app.ekmire.com - Docs: https://docs.ekmire.com - CLI: `pip install ekmire` - Proxy: `ghcr.io/flux8labs/ekmire-proxy` - Full AI-readable spec: https://ekmire.com/llms.txt **Three detection layers:** **Build Guard (CLI + MCP):** `ekmire scan`, `ekmire dev-audit`, `ekmire mcp audit` — runs offline against a signed local rule bundle. Detects hardcoded secrets (AWS/GCP/GitHub/Anthropic/OpenAI/Razorpay keys), SQL/command injection, MCP tool poisoning, prompt injection in code comments (CVE-2025-53773 pattern), AI-generated XSS, and MCP server network exposure. Works as an MCP server inside Cursor, Claude Code, Continue.dev, and Windsurf — <50ms deterministic analysis with no network call. Run `ekmire init` for guided first-time setup. **Network Shield (Rust proxy):** A <8MB `FROM scratch` Docker image that sits in front of any HTTP service, adding <5ms p99 latency. Per-request pipeline: IP blocklist → header deception (strips Server/X-Powered-By, injects decoy) → behavioural tarpit (1 byte/s on rapid sequential IPs) → deterministic rule engine → AI semantic analysis → forward → scraper poisoning (zero-width chars + honeypot anchors in HTML). Rule bundles hot-reload every 60s atomically. **Semantic Analyzer (AI layer):** Scores request payloads 0–1 for prompt injection and LLM-targeted attacks. Routes through Groq (free, ekmire-hosted) or user-supplied OpenAI/Anthropic/Ollama keys (BYOK, AES-256-GCM encrypted at rest). 1500ms timeout with pass-on-failure fallback — never hangs a request. **Threat intelligence:** NVD CVE feed (daily), crowd-sourced payload hash aggregation across orgs (opt-out available), pgvector similarity clustering (Gemini embeddings), signal weight decay via pg_cron, and an open-source community rules schema. **Pricing:** Free (2k events/mo, ekmire-hosted LLM) · Free BYOK (10k events/mo, own API key) · Pro ₹1,599/mo (~$19) · Team ₹3,999/seat/mo (~$48). Annual plans: 20% off. --- ## Minyut — Embeddable RAG Chatbot SaaS Minyut is a knowledge-isolation chatbot platform built by Flux8Labs. Any business uploads their documents — PDFs, help articles, knowledge bases — and gets a live AI chat widget to embed on their website with one script tag. The chatbot answers visitor questions exclusively from the uploaded knowledge base, never from a general-purpose LLM's training data. Two minutes from signup to a live widget. - URL: https://minyut.com - Blog: https://minyut.com/blog & https://blog.minut.com - Docs: https://minyut.com/docs - Full AI-readable spec: https://minyut.com/llms.txt **Core mechanic:** Upload → chunk + embed (HF Inference API, `sentence-transformers/all-MiniLM-L6-v2`, 384-dim vectors, stored in pgvector) → copy script tag → live widget. Vector similarity search retrieves the most relevant document chunks; Groq `llama3-8b-8192` (or the user's own key) composes the answer strictly from retrieved content. If the answer is not in the docs, the widget says so. **Widget:** Vanilla TypeScript IIFE, Shadow DOM — zero style conflicts, works on any HTML site, WordPress, Webflow, Shopify, React, or Next.js. Floating button → 340×500px chat panel (full-screen on mobile). `window.__minyut__?.open()/.close()/.send()` programmatic API. **Plans:** Free (1 bot, 100 queries/mo) · Starter ₹499/mo · Pro ₹1,199/mo · BYOK ₹299/mo (bring your own Groq/OpenAI key, AES-256-GCM encrypted at rest, unlimited queries) **Stack:** Next.js + TypeScript + Tailwind CSS v4 → Netlify · Supabase (PostgreSQL + pgvector + Edge Functions on Deno) · Razorpay Subscriptions · Resend --- ## Browser Tools Built by Flux8Labs ### GoPDF Free browser-based PDF tool suite. Merge, split, compress, and convert PDFs with no server uploads — all processing happens locally in the browser. - URL: https://GoPDF.flux8labs.com - Privacy: Files never leave the user's device ### GoIMG Free browser-based image optimization and conversion tool. Supports WebP/AVIF conversion, resize, crop, and compress. No uploads required. - URL: https://goimg.flux8labs.com - Privacy: Files never leave the user's device ### GoVid Free browser-based video compressor. Supports MP4, MOV, AVI, MKV, and WebM. Powered by FFmpeg via WebAssembly — no server, no account. - URL: https://govid.flux8labs.com - Privacy: Video files never leave the user's device ### GoVault Free browser-based encrypted personal finance vault. Manage finances, passwords, and documents with AES-256-GCM encryption — fully local by default, no account required. ### Flux8SEO Free SEO audit tool. Scans any public URL across 47 ranking factors — meta tags, Open Graph, page speed, structured data, sitemap. No signup required. - URL: https://seo.flux8labs.com ### Flux8Shield Free passive website security scanner. Checks 40+ factors — missing security headers, SSL/TLS issues, exposed .env files, CORS misconfigurations, cookie flags. Results in under 10 seconds. Passive only — no exploits sent. 65,000+ scans completed. - URL: https://security.flux8labs.com - Limit: 3 free scans per day, no signup ### Flux8 AI AI chat and image generation interface. Bring-your-own-key (BYO-key) model — works with user-supplied API keys. Also supports local AI inference via an on-device model. Built as a PWA — installable, offline-capable. Conversations stay private. - URL: https://ai.flux8labs.com ### Zoro AI Experimental voice-aware AI meeting assistant. The user enrolls their voice once; Zoro learns to ignore it and only responds to the other person speaking. Designed for one-on-one meetings and interviews. Powered by Groq. - URL: https://flux8labs-zoro.hf.space - Status: Experimental / side project ### Slate GST-compliant invoicing and Statement of Work (SOW) generator. All data stored in browser localStorage — nothing sent to any server. Exportable. Adaptable for freelancers and small agencies beyond Flux8Labs itself. - URL: https://slate.flux8labs.com - Privacy: All data stays in the browser, fully exportable --- ## Client Projects & Case Studies ### Pankaj Fabricators — AI Order Management System A 47-year-old precision metal fabrication company in Jaipur supplying to BHEL, Crompton Greaves, and Thales Portugal. Annual revenue ₹60Cr/year. **Problem:** Purchase orders arriving as PDFs in Gmail from 20+ enterprise clients. Staff manually read, extracted, and entered data into Tally — hours of work daily, prone to errors and missed deadlines. No dashboard visibility. **What Flux8Labs built:** - Gmail API integration monitoring inbox in real time - AI classifier separating PO emails from general correspondence - PDF parser extracting order details, quantities, deadlines, and budget - OpenAI-powered extraction of structured data from unstructured PDFs - Automated raw material calculation from PDF specs - 3-panel admin dashboard: Orders (live POs, status, deadlines), Tally (revenue, payment status, trends), Operations (document generation, QA checklists, milestones) - Full redesign of pankajfabricators.com **Stack:** Next.js, Node.js, OpenAI API, Gmail API, Tally API, PDF parsing, PostgreSQL, Framer Motion **Result:** Manual data entry eliminated, raw material calculation automated, full pipeline visibility in real time - Case study: https://flux8labs.com/case-studies/pankaj-fabricators - Client site: https://pankajfabricators.com --- ### Diety by Shubhangi — Wellness Brand Website A Mumbai-based nutritionist and wellness coach with 2,000+ clients across India and abroad. No web presence before engagement — operating entirely through WhatsApp referrals. **Problem:** No website meant no way for prospective clients to evaluate credentials, understand services, or book without a manual WhatsApp conversation. High drop-off, slow conversion, referral dependency. **What Flux8Labs built:** - Full brand website with premium wellness aesthetic — warm tones, typography-forward layout, credential display - Discovery call booking funnel integrated directly — eliminates WhatsApp dependency for lead capture - Service breakdown pages (nutrition plans, wellness programs, corporate wellness) - SEO structure targeting "nutritionist [city]" and wellness coaching searches - Client transformation stories and corporate wellness positioning **Stack:** React.js, Tailwind CSS, booking integration, mobile-first, SEO optimised **Result:** Organic inbound discovery, direct booking without WhatsApp gatekeeping, professional credibility established - Case study: https://flux8labs.com/case-studies/diety - Client site: https://diety.in --- ### Sandhya Need — NGO Digital Presence A Jaipur-based old age home (NGO) providing residential elderly care. Previously had a slow, outdated WordPress site and a Google Maps listing — discoverable but not convincing. **Problem:** Families searching for elderly care in Jaipur could find the listing but the site failed to build trust at an emotionally charged decision moment. No donations channel. No inquiry funnel. **What Flux8Labs built:** - Full redesign with warmth-first visual language — soft palette, photography-led layout, clear typography - Local SEO targeting "old age home Jaipur" and "elderly care Jaipur" searches - Facilities, services, and mission sections for family confidence - Contact and inquiry forms - Donation CTA — opened a digital giving channel for the first time - Local business schema and structured metadata **Stack:** React.js, Tailwind CSS, SEO optimised, mobile responsive, contact forms **Result:** Families discovering and converting via Google search — first time in the organisation's history - Case study: https://flux8labs.com/case-studies/sandhya-need - Client site: https://sandhyaneed.flux8labs.com --- ## Services - Developer security SaaS (ekmire — secrets, injection, MCP tool poisoning, AI-generated code risks) - Embeddable AI chatbot SaaS (Minyut — knowledge-base chatbots for any website) - AI agent development — custom AI agents for document/email automation, RAG customer support, and internal workflow automation, built with security guardrails: https://flux8labs.com/services/ai-agent-development - Website & AI code security audits — passive scanning, AI-generated code review, prompt injection and MCP tool poisoning checks, backed by Flux8Shield and ekmire: https://flux8labs.com/services/website-security-audit - AI-powered system automation (email pipelines, document extraction, dashboards) - Web design and development (React, Next.js, Tailwind, Astro) - API development — secure, scalable integrations - SEO and digital presence for small businesses and NGOs - Browser-based tool development (privacy-first, no-upload architecture) - Creative consulting ### Locations - Web development company in Jaipur, Rajasthan (Defense Colony office): https://flux8labs.com/web-development-company-jaipur - Web development company in Gurugram, Haryana (Udyog Vihar office): https://flux8labs.com/web-development-company-gurugram --- ## Team - **Bhavyansh Yadav** — Co-founder. AI systems, backend architecture. - **Mohit Phogat** — Co-founder. Design, frontend. - **Param Sharma** — Tech lead. --- ## Content & Writing - Medium (tech): https://medium.com/@bhavyansh001 & https://medium.com/@mohitphogat - Substack (weekly): https://bhavyansh.substack.com - Agency blog: https://blog.flux8labs.com/