The Firm That Solved ClawHavoc Before ClawHavoc Happened.

ClawBastion is two people: Jordi and Jamie. Northlake, TX. We do two things at an obsessive level: we harden AI agent deployments so they can’t be weaponized, and we build websites that put DFW businesses on page one of Google before their competitors know what hit them.

No agency. No freelancer bench. No offshore team they “forgot to mention.” When you hire ClawBastion, you get the two people who answer the phone, write every line of code, and stake their reputation on every deliverable. That’s not a limitation — it’s the moat.

Jordi Architecture, security, engineering
Jamie Arvizu, M.S. Client ops, genomics research, regulatory compliance
Entity: 2J Tech Ventures LLC
DBA: ClawBastion
Location: Northlake, TX (DFW corridor)
Status: Accepting founder clients
Stack Details
Stack: NemoClaw / OpenClaw / OpenShell
Hardware: RTX 4090, 128GB RAM, NVMe
Local model: Nemotron-3-Nano-4B (115 tok/s)
Large model: vllm (local inference)
The Founders

Complementary Obsessions. Zero Overlap.

Jordi — Technical architect. Background in cinema (composition, pacing, the discipline of making every frame earn its place) and logistics systems (zero-margin-for-error supply chains where a single dependency failure cascades). That combination produces a specific kind of engineering: technically precise, architecturally deliberate, with a security posture that treats every permission as a potential attack surface. Jordi deployed NemoClaw when the documentation was barely written, filed the first upstream bug fix (Issue #481), and wrote the sandbox policy from scratch. When ClawHavoc hit in February 2026, the containment layer was already running. That’s not luck — it’s the difference between building for the threat model you see coming and building for the one that’s already here.

Jordi owns everything that runs on a computer: security architecture, infrastructure, web development, local inference, pricing.

Jamie Arvizu, M.S. Genomics — Client operations. B.S. Biotechnology from Universidad del Este (Ana G. Méndez University System, Puerto Rico), Graduate Certificate and M.S. in Genomics from Saint Joseph’s University. Lab technician at Kimera Labs (biotech), then Senior Research Associate II at the University of Miami’s Hussman Institute for Human Genomics — core benchwork on the PSEN1 G206A variant in Alzheimer’s disease research, generating the raw experimental data for peer-reviewed publications accepted mid-2025. Most recently Microbiologist II at ACT Laboratories (regulated cannabis testing QA/compliance). GLP and GCP certified, CITI credentialed in human subjects research and responsible conduct of research.

That career arc — biotech lab → genomics research → regulated testing → client operations — isn’t decorative. It’s the reason healthcare and biotech prospects take the first meeting. When Jamie discusses HIPAA SRA cycles, IRB protocols, or GLP compliance with a practice administrator, she’s drawing on years of actually running those procedures — not summarizing a blog post. That’s a qualification filter that eliminates competitive comparison before it starts.

Jamie is your first call. She’ll know your project status without looking it up.

The partnership works because neither of us does what the other does well — and neither of us pretends to. That’s rare. Most firms hide the gap with account managers. We eliminated it with complementary expertise.

Philosophy

Discipline Over Enthusiasm. Process Over Promises.

The same rigor that goes into a kernel-level security policy goes into a $499 small business website. That’s not a slogan — it’s an engineering decision. We don’t have a “premium tier” where we try harder and a “basic tier” where we cut corners. There’s one standard: production-ready, or it doesn’t ship.

For AI security clients: Jordi has hands-on NemoClaw deployment experience — Landlock LSM, seccomp syscall filtering, network namespace isolation, YAML policy enforcement — battle-tested on our own hardware before it touches yours. We were running the containment stack before ClawHavoc made it obvious everyone needed one. That judgment — knowing what to lock down before the advisory drops — is what you’re buying. Not just the installation.

For DFW business clients: Hand-coded websites, not templates. Core Web Vitals optimized, not “we’ll get to performance later.” Local SEO architected from the first commit, not bolted on after launch. Jamie ensures the client experience matches the build quality — monthly reports, honest timelines, and a team that picks up the phone because there are only two of us and we both care whether it works.

What We Won't Do

The Lines We Don't Cross.

We don’t subcontract. We don’t quietly outsource the parts we can’t handle to someone on Fiverr. We don’t deploy OpenClaw agents without hardening them first. We don’t hand you a Squarespace template and call it custom development.

If a project needs more people than us, we’ll say that directly and point you to someone honest. No surprises halfway through. No scope creep where the faces change but the invoice doesn’t.

The client roster is deliberately small. We’d rather build three projects that become case studies than take fifteen and rush through all of them. Compounding reputation beats compounding revenue — Warren Buffett understood that, and so do we.

Location

Northlake, TX. We Walk the Streets We Serve.

We’re in the DFW north corridor — Northlake, right off I-35W. Local business clients get in-person meetings when they want them; we’ll come to your shop, meet at your counter, walk your parking lot with you. Our neighborhood champion approach means you’re not hiring a remote vendor — you’re hiring the firm that already knows your street.

AI security clients work with us remotely. Your deployment doesn’t care where we sit.

ClawBastion is a DBA of 2J Tech Ventures LLC, registered in Texas.

Talk to the Founders →