$ whoami --verbose

Kade Ondo

Lead Interface Engineer

I've spent the last seven years building the boundary between fake and real command-line tools. Started as a front-end engineer, fell into terminal emulation work while designing security education platforms, and never left. Every interface I touch has to respect how actual shells behave — prompts, exit codes, stderr redirects, the whole thing.

Before NullPrompt, I led interactive terminal design for a handful of CTF platforms and security education startups. That taught me something hard: a sloppy fake terminal breaks trust instantly with people who actually use shells eight hours a day. They see the wrong prompt format and stop believing everything else.

Now I lead terminal-simulation and command-line design here. Most of the work is learning what real Kali Linux does, what real Bash does, and then scripting interfaces that feel indistinguishable — because the users we build for can tell the difference in milliseconds.

$ cat background.log

Credibility in the terminal

Terminal education platforms

Designed interactive shell environments for three major security education companies. Built curriculum interfaces where students actually learn real command syntax inside simulated environments that respect Bash conventions.

CTF event design

Worked with CTF organisers to build fake terminals and challenge interfaces that teach real skills. The best fake is the one players forget is fake halfway through solving the challenge.

Open-source terminal emulation

Contributed to xterm.js and related PTY simulation libraries. Spent time in the weeds of how terminals actually render, handle escape sequences, and behave under load.

Community speaking

Given talks at security meetups and infosec community events on 'designing fake shells that teach real skills'. Emphasis on the discipline required: studying actual Linux before you script anything.

$ cat philosophy.md

The discipline of fake terminals

A fake terminal only works if it respects real command syntax, real error behaviour, and real pacing.

That sounds simple. It is not.

Before we script any simulated output, before we decide what a root prompt looks like or how a fake `man` page should respond, we study actual Kali Linux. We read the Bash manual. We look at real terminal behaviour under load, real timing, real failure modes. We watch people who actually use shells eight hours a day interact with our work.

Sloppy fakes break trust instantly. A wrong exit code, a prompt that doesn't match `PS1` conventions, a command that should hang and doesn't — security teams and CTF players see these things. They're trained to see them. And the moment they spot a fake detail, they stop believing the rest of the interface.

Our philosophy: study the real thing until you understand it better than most people who use it casually, then build the fake with the same discipline you'd apply to a production shell. The interface should not feel like a simulation; it should feel like the shell just decided to run on the web.

$ dpkg -l | grep stack

Technical stack

xterm.js

Terminal rendering engine. Powers the visual output and handles escape sequences correctly.

Custom PTY simulators

Scripted pseudo-terminal environments that behave like real pseudo-terminals, with proper input/output handling and session state.

JavaScript / TypeScript

Command scripting logic, user input parsing, and client-side interface state. Keeps the experience responsive and offline-capable.

WebGL / Canvas

ASCII art rendering and CRT-style visual effects. Scanlines, phosphor glow, and authentic terminal aesthetics.

Node / Rust backends

When projects need server-scripted responses or session persistence, we build response engines in Node or Rust for speed and reliability.

Git + conventional commits

All project code versioned with discipline. Every commit message explains the intent; every branch has a clear purpose.

$ cat recognition.txt

Seen in the wild

Work from NullPrompt Studio has been featured in security-education community case studies and referenced by CTF organisers as a standard for interface design. We've been invited to speak at community-run infosec meetups on the craft of building fake terminals that actually teach real skills.

The studio's interfaces have been used in training programmes by security teams learning to interact with Kali Linux and other pen-test frameworks. Feedback is consistent: students stop noticing the interface and start focusing on the learning, which is exactly the point.

We're referenced in write-ups by event organisers who care about interface design as much as they care about challenge difficulty. Because a well-crafted fake terminal is an invisible tool — it gets out of the way and lets the actual learning happen.

Built with sitectrl.ai

Built with sitectrl.ai