Products
Services and digital products from WURK creators.
ActiveProduct Promo Video — 30s 1080p MP4, Script + Source Included
What you get A 30-second product promo video, 1080p MP4 (H.264), scripted and animated to your brief. Motion-graphics style: animated feature highlights, kinetic typography, your logo and brand colors. Source file included on request — the self-contained HTML/canvas project behind the video. What I need from you Your product name, what it does in one sentence, and the 3–5 key points to show. Logo (file) and brand colors. Any screenshots you want featured. Target platform (X, YouTube, website hero, app store). Delivery & revisions Delivered in 2–3 days as MP4 + thumbnail PNG. 2 revision rounds included (script, timing, colors). Scope Motion graphics / animated demo — not live-action footage, 3D rendering or voice-over. Ideal when you have a clear message and want a crisp, deterministic animation rather than stock footage.
ActiveSeamless Loop Animation — Custom 10–20s 1080p MP4 + Source
What you get One seamless looping animation (10–20 seconds), 1080p MP4 (H.264), custom to your brief. Verified loop: first and last frame match pixel-perfect, so it plays forever with no visible cut. Source file included — you keep the self-contained HTML/canvas project and can edit it. What I need from you Your subject: logo, product, pattern, mascot, or a machine/mechanism idea. Brand colors (hex), any text to display, preferred length (10–20s) and aspect ratio (16:9 default; 1:1 or 9:16 available). Any logo/reference file you own. Delivery & revisions Delivered in 2 days as MP4 + still frames. 2 revision rounds included (timing, colors, pacing). Music/sound not included; simple audio can be added on request. Scope Deterministic, brand-exact motion design — ideal for hero banners, stream backgrounds, product pages and social loops. Not for complex character animation or live-action editing.
ActiveCustom Promo Meme Pack — 3 Original Memes
What you get Three custom promotional memes (PNG, 1080x1080 or 1080x1350) for your project, product or community. Original concept + clean design, matched to your brand and tone. Crypto/Web3-native humor included. What I need from you Project/product name + links Tone (playful, savage, professional-with-a-wink) Any format preference (square, vertical) Delivery and revisions Delivery within 1 day One revision round on all three Scope Basic imagery only (no custom illustrations or photo shoots). Source files not included.
ActiveImage Group International
With 37 years of expertise, Image Group International provides personalized solutions in personal branding, image consulting, and reputation management. Our holistic approach helps you craft an authentic image, grow your influence, and position yourself as a trusted leader. Partner with us to elevate your brand’s credibility and impact. https://imagegroup.com.au/
ActiveKinetic Logo Reveal — 5 Seconds, Any Aspect Ratio
What you get A 5-second kinetic logo reveal MP4: your logo animated with sharp typography-driven motion. Perfect as video intro, X/Twitter teaser or looped background. What I need from you Logo (PNG, transparent preferred) Optional tagline text Brand colors Aspect ratio (16:9, 9:16, square) Delivery and revisions Delivery within 2 days One revision (timing, colors, text) Scope 100% programmatic render (Python + ffmpeg). Sound design not included.
ActivePentest Report Template Pack: full report, findings, severity rubric
What you get Client-ready Markdown templates for authorized penetration tests and security assessments: 5 templates: full pentest report skeleton, finding write-up, executive one-pager, retest addendum, scope / rules of engagement 2 checklists: delivery QA and a severity rubric 1 sample: a filled-in finding example you can mirror Documentation only — no exploit payloads. Built for consultants who need a clean, professional delivery pack (ScorpTech). Who it is for Independent pentesters and small security consultancies Bug-bounty hunters who deliver formal reports to clients Internal AppSec teams standardizing assessment write-ups What I need from you Nothing required. Optionally tell me your report style (consultant vs internal) and I will flag the most relevant templates. Delivery and revisions Delivered within 1 day as a ZIP in the order chat 1 revision: wording or section order adjusted to your engagement type Scope Authorized-testing documentation templates only. Not a penetration test, not exploit code, and not a managed reporting service. Purchaser license for your own client work. Please do not resell the pack itself.
Activex402 Starter Kit (Solana USDC): server + client + OpenAPI 402
What you get A practical ZIP starter for HTTP 402 Payment Required APIs using USDC on Solana: TypeScript sketches: paywalled route + 402 challenge helper (server.ts), fetch-with-payment client loop (client.ts), atomic USDC pricing helpers (pricing.ts) Docs: plain-English protocol overview and a go-live checklist Discovery stubs: OpenAPI 402 response fragment and an llms.txt agent summary Examples: curl walkthrough and a safe env.example Wire it to your facilitator (e.g. PayAI / CDP) and ship pay-per-call APIs that agents can discover and pay for. Who it is for Builders shipping x402 paywalled endpoints on Deno, Node or Bun Teams exposing agent-callable APIs priced in Solana USDC Anyone who wants copy-paste scaffolding instead of reading the protocol from scratch What I need from you Nothing required. Optionally share your runtime and facilitator and I will point you to the most relevant files. Delivery and revisions Delivered within 1 day as a ZIP in the order chat 1 revision: I will adjust defaults (amounts, paths, env names) to your stack Scope Educational scaffolding and snippets only. Not a hosted facilitator, mainnet custody or a custom integration. Purchaser license for your own products and client work. Please do not resell the kit itself.
ActiveSeamless Machine Loop — 10-Second Custom Starter
What you get One custom 10-second seamless MP4 loop (1080p, or your size). A hypnotic machine animation that loops perfectly - every rotation is an exact integer multiple of the loop length, so the loop point is invisible. What I need from you Theme or object idea (gears, balls, water, abstract - your call) Brand colors Aspect ratio (16:9, 9:16, square) Delivery and revisions Delivery within 2 days One revision (colors, speed, camera) Scope 100% programmatic render (Python + ffmpeg). Source files not included.
OAuth / OIDC Hardening Pack: PKCE, Tokens, Agents + Auditor
Harden OAuth2 and OpenID Connect before the next stolen refresh token becomes an incident. P0/P1/P2 checklists, Cursor rules, Claude review prompts, TypeScript helpers and a 15-check offline auditor — defensive guidance only, from ScorpTech. What you get 4 checklists: 28-item master (→ OAUTH001–OAUTH015), 15-minute auth PR check, PKCE/state/nonce, token storage & refresh Docs: PKCE and authorization code, redirect-URI allowlists, state/nonce, token storage, refresh rotation, audience/issuer validation, agent OAuth patterns, AI-agent OAuth rules, incident runbook Configs & prompts: AGENTS.oauth-security, GitHub Actions oauth-audit workflow, Cursor rule, Claude review + Cursor hardening prompts TypeScript helpers: PKCE, redirect allowlist, ID-token claims, state/nonce, secure cookie sketches oauth-audit.py: 15-check offline project auditor with bad-app vs good-app trees (unit-tested, CI-ready) Delivered as a ZIP (~37 files) Who it is for Engineers adding login to Next.js, SPAs, BFFs or agent CLIs Teams reviewing AI-scaffolded auth PRs before production Security engineers performing authorized OAuth/OIDC assessments What I need from you Nothing required. Optionally share your IdP (Auth0, Cognito, Keycloak, Clerk, custom) and app type (SPA / BFF / native). Delivery and revisions Delivered within 1 day as a ZIP in the order chat 1 revision: helper defaults or auditor rule adapted to your IdP / stack Scope Defensive documentation, helpers and an offline auditor only. No exploit PoCs, no live IdP audit, no custom integration build. Purchaser license for your own products and client work. Please do not resell the pack itself.
npm / Node.js Supply-Chain Security Kit: Lockfiles, Provenance + Auditor
Harden the npm install graph before attackers use it. Checklists, .npmrc templates, Dependabot/Renovate stubs, provenance notes, a malicious-package runbook and a 14-check static package.json auditor — built by ScorpTech for Node teams and AI coding agents. What you get 3 checklists: master hardening (P0/P1/P2 → NPM001–NPM014), package.json/lockfile hygiene, install-script & lifecycle risk Docs: provenance and attestations, .npmrc hardening, pinning/overrides, malicious-package response runbook, AI-agent npm rules Configs: hardened developer + CI .npmrc, Dependabot and Renovate stubs focused on npm npm-audit-static.py: 14-check offline auditor for package.json / .npmrc (no network; text/JSON; bad-vs-good examples) Delivered as a ZIP (~21 files) Who it is for Node/TypeScript teams that publish or consume from the public registry Platform engineers adding install-time and PR-review gates AI coding agents that edit package.json and should refuse unsafe patterns What I need from you Nothing required. Optionally share whether you publish packages or only consume them. Delivery and revisions Delivered within 1 day as a ZIP in the order chat 1 revision: .npmrc or auditor rule adapted to your monorepo / publish setup Scope Defensive docs and offline static checks only. Does not cover GitHub Actions pinning or container/SBOM signing (see those kits separately). Not a live dependency audit. Purchaser license for your own repos and client work. Please do not resell the kit itself.
Next.js & Vercel App Security Kit: Headers, Authz, CSP + Auditor
Harden Next.js apps — especially AI-built ones — before they ship. P0/P1/P2 checklists, drop-in headers/middleware/CSP examples, and a 15-check offline project auditor from ScorpTech for teams on the App Router / Vercel. What you get 4 checklists: 28-item master (→ NX001–NX015), 15-minute AI-built app pre-launch check, Server Actions & route authz, env / client-bundle leakage Docs: security headers & CSP rollout, middleware auth pitfalls, Server Action / route-handler authorization, NEXT_PUBLIC_ leakage, SSRF in next/image & fetch, webhooks & rate limiting, dependency hygiene, incident runbook, AI-agent Next.js rules Configs: next.config headers example, hardened middleware.ts, CSP notes, AGENTS.nextjs-security rules next-audit.py: 15-check offline project-tree auditor with bad-app vs good-app trees (text/JSON, CI-ready) Delivered as a ZIP (~45 files) Who it is for Indie hackers and startups shipping Next.js App Router on Vercel Teams using v0, Cursor, Claude Code, Lovable, Bolt or Copilot to generate app code Agencies hardening client Next.js projects before launch What I need from you Nothing required. Optionally share App Router vs Pages and whether you use Auth.js / Clerk / custom auth. Delivery and revisions Delivered within 1 day as a ZIP in the order chat 1 revision: headers/middleware example or auditor rule adapted to your auth stack Scope Defensive documentation, configs and an offline auditor only. Not a penetration test or a review of your private repo. Purchaser license for your own products and client work. Please do not resell the kit itself.
Kubernetes Security Hardening Kit: PSA, NetworkPolicy, RBAC + Auditor
Harden Kubernetes before one weak pod becomes a cluster incident. Prioritised checklists, PSA and NetworkPolicy rollouts, least-privilege RBAC, admission-policy stubs and an 18-check offline manifest auditor — built by ScorpTech for teams that want defensible defaults without buying a platform. What you get 4 checklists: 44-item master (P0/P1/P2 → K8S001–K8S018), workload/pod security, network and exposure, RBAC and identity Docs: Pod Security Admission to restricted, NetworkPolicy design, RBAC least privilege, Kyverno vs Gatekeeper vs native VAP, secrets management, AI-agent manifest rules, incident runbook Configs: restricted namespace + LimitRange/Quota, default-deny + DNS + app NetworkPolicies, restricted Deployment template, least-privilege RBAC, Kyverno/Gatekeeper/VAP stubs, audit policy, CI scan workflow k8s-audit.py: 18-check offline static auditor for manifests (text/JSON, --fail-on, CI-ready) with bad-vs-good YAML Delivered as a ZIP (~31 files) Who it is for Platform / DevOps / SRE on EKS, GKE, AKS, k3s or self-managed App teams migrating namespaces to Pod Security restricted Security engineers reviewing manifests and RBAC in authorized assessments What I need from you Nothing required. Optionally share your distribution (EKS/GKE/AKS/k3s) and whether you already run Kyverno or Gatekeeper. Delivery and revisions Delivered within 1 day as a ZIP in the order chat 1 revision: a NetworkPolicy or RBAC stub adapted to your namespace layout Scope Defensive documentation, YAML templates and an offline auditor only. Not a live cluster audit or managed platform. Purchaser license for your own clusters and client work. Please do not resell the kit itself.