Engineering mission-critical software systems from low-level Linux to cloud.
X3m Industries is an expert software firm operating on a dual-engine model: we build and ship high-performance in-house products, and partner with CTOs and engineering leaders to tackle demanding software architecture, systems engineering, and distributed platforms.
Direct engagement with senior leadership, no junior intermediaries.
From Linux kernel DRM/Wayland to distributed Go/Rust backends.
In-house product innovation combined with advisory consulting.
Specialized software engineering for demanding problems.
We do not provide generic staff augmentation. We deliver senior-level technical direction, specialized systems execution, and architecture solutions directly to leadership teams.
Software & Systems Architecture
Comprehensive architectural reviews, system redesigns, and scalability assessments for mission-critical software. We eliminate architectural bottlenecks and ensure high reliability under extreme loads.
- Architecture audits & technical due diligence
- Monorepo & multi-package system architecture
- Event-driven & distributed messaging design
- Migration strategies from legacy monoliths
Linux Kernel & Systems Engineering
Rare low-level systems expertise spanning the Linux graphics stack, DRM/KMS, Wayland compositors, embedded environments, and hardware integration for specialized devices and appliances.
- Wayland compositor & DRM/KMS debugging
- Linux kernel subsystem tracing & diagnostics
- Native systems programming in Rust & C/Go
- High-performance IPC & embedded device stacks
High-Throughput APIs & Cloud Infrastructure
Engineering robust, high-performance backends and real-time APIs built with Go and Rust. Protocol Buffers, ConnectRPC, and type-safe contracts deployed natively on GCP and Vercel.
- ConnectRPC, gRPC & Protobuf protocol design
- CloudEvents & pub/sub streaming architectures
- GCP serverless & containerized deployments
- Database modeling & optimization (MongoDB, Redis)
Fine-Grained AuthZ & Identity Systems
Enterprise-grade authentication, SSO, and relationship-based access control (ReBAC). Implementing Zanzibar-style authorization with SpiceDB for complex multi-tenant platforms.
- SpiceDB & Google Zanzibar authorization schemas
- OAuth 2.0 / OIDC & Better-Auth integration
- Multi-tenant SSO, SAML & role delegation
- Security posture & zero-trust access audits
Fractional CTO & Technical Leadership
High-leverage advisory for executive leadership. We help CTOs and Directors evaluate engineering strategy, set developer standards, establish monorepos, and accelerate execution without hiring bloat.
- Engineering strategy & roadmap alignment
- Monorepo architecture (Nx, Bun workspaces)
- Hiring bar evaluation & engineering team enablement
- Vendor & technology selection due diligence
Engineered across the stack. Battle-tested in production.
We practice what we consult. From upstream Linux desktop compositors and eBPF kernel networking to high-conversion commercial digital platforms, our work reflects uncompromising architectural precision.
COSMIC Desktop Subsystems
Upstream contributions in Rust to the next-generation COSMIC desktop environment and D-Bus bindings. Implemented BlueZ agent message forwarding and passkey/PIN dialog interaction flows for Wayland-native Bluetooth keyboard pairing.
Cilium eBPF Cloud Networking
Upstream contributions in Go to the Cilium kernel-level networking, security, and observability engine. Enhanced bugtool diagnostics, identity listing introspection, and daemon monitoring telemetry.
- #4264 bugtool: make archive output configurablemerged
- #4259 Fix: cilium monitor allows invalid argumentsmerged
- #4252 Split debuginfo into separate filesmerged
- #4250 Add "docker info" output to bugtoolmerged
- #4243 Add "cilium identity list" output to bugtoolmerged
- #919 cilium: Change Consumable LabelList to LabelArraymerged
Payload CMS MCP Operations
Upstream contribution to the official Payload CMS Model Context Protocol (MCP) plugin. Implemented full multilingual localization support and singleton globals handling for autonomous AI agents.
Antigravity Linux Distribution Pipeline
Automated, cryptographically GPG-signed packaging pipeline and Linux distribution mirrors (DNF/RPM and APT/DEB) for Google's Antigravity AI IDE and agent runtime across x86_64 and aarch64, featuring FreeDesktop integration and OAuth URL protocol handlers.
ImgForge Media Engine
Performance and encoding contributions to the ImgForge image microservice in Rust and libvips. Restored cache colourspace integrity in watermark overlays, added WebP save suffix encoders, and source format fallbacks.
Education Academy Platform
High-conversion digital education and course commerce platform. Engineered complex accreditation logic (Pro-Q-Kine), financial checkout and automated payment workflows via Mollie, Flemish Government VLAIO KMO-Portefeuille subsidy compliance, and O(N) optimized real-time catalog filtering.
Praktijk De Puzzel Platform
Engineered a deterministic, ultra-fast healthcare practice architecture achieving perfect 100/100 Google Lighthouse scores across all categories, strict WCAG AA/AAA keyboard and portal accessibility, and rich JSON-LD semantic entity SEO graphs.
hybrid-gpu-wayland-freeze
A deep-dive investigative suite and technical reproduction repository isolating a multi-layer display lockup across NVIDIA proprietary drivers, GNOME Shell, Wayland DRM/KMS, RPM Fusion, and systemd suspend targets.
Deep technical domain expertise across the full stack.
We operate across languages, hardware boundaries, and distributed systems. Our experience is backed by decades of production execution and real-world system debugging.
Languages & Runtimes
- Go (Golang)
- Rust
- TypeScript
- Node.js
- Bun
Systems & Low-Level
- Linux Kernel Subsystems
- Wayland Compositors
- DRM / KMS
- Embedded Linux
- Hardware Interfacing
Distributed APIs & Protocols
- ConnectRPC
- Protocol Buffers (Protobuf)
- gRPC
- CloudEvents
- REST & GraphQL
Web & Mobile Applications
- Next.js (App Router, RSC)
- React
- Expo (React Native)
- Tailwind CSS
- React Email
Auth, Identity & Security
- SpiceDB (Zanzibar ReBAC)
- OAuth 2.0 & OIDC
- Better-Auth
- Enterprise SSO / SAML
Cloud & Infrastructure
- Google Cloud (GCP)
- Vercel
- Linux Servers
- CDN & Edge Routing
- Containerization
AI & Intelligent Systems
- Agentic AI Systems
- Model Context Protocol (MCP)
- Google ADK
- Tool Calling Architecture
Tooling & Monorepo Strategy
- Polyglot Monorepo Architecture
- Nx DevTools
- Bun Workspaces
- Automated CI/CD Quality Gates
Senior-level execution. No agency overhead.
X3m Industries was founded on a simple premise: complex software systems require deep, hands-on architectural mastery, not bloated teams of junior consultants learning on your dime.
Founded and technically led by Steven Ceuppens, we operate as an elite engineering boutique. We engage selectively with engineering directors, CTOs, and innovative tech companies who need decisive technical clarity, flawless execution, and battle-hardened systems insights.
Whether we are conducting deep kernel and compositor tracing, redesigning distributed streaming pipelines, or architecting in-house products, every line of code and architectural blueprint is held to the highest standard of technical excellence.
Boutique Precision Model
Steven Ceuppens directly leads and oversees technical engagements, ensuring high impact from day one.
When scaling is required, we activate a curated network of senior domain specialists in systems, auth, and cloud.
Ready to solve your most demanding software challenges?
Whether you need an urgent architecture review, specialized low-level systems consulting, or dedicated engineering for a greenfield platform, we are ready to help.
Reach out directly with an overview of your project, timeline, and architectural requirements.