// Protect your data, your servers, your users.
Cybersecurity
A data leak or an intrusion can cost a non-profit or a small business its reputation, its cash flow and the trust of its members. I work with organisations that cannot afford mistakes: security audits, vulnerability remediation, infrastructure hardening and GDPR compliance. Trained by ANSSI, Stormshield administrator, with over 15 years in environments with the highest security requirements.
Security audit & application penetration testing
A methodical analysis of your application or website: injection flaws, authentication weaknesses, data exposure, server configuration. You receive a clear report, prioritised by severity, with concrete fixes — not an unreadable 80-page document.
Linux, nginx & SSH hardening
Server configuration to security best practices: password-less SSH, firewall, service isolation, HTTP security headers, modern TLS. Your infrastructure becomes a far more costly target to attack.
Encryption & secrets management
Encrypted backups (AES-256-GCM), proper handling of keys and application secrets, separated environments. Your data stays unreadable even if a disk or a server is stolen.
GDPR compliance
Personal data mapping, record of processing activities, data minimisation, retention periods, sovereign hosting within the European Union. Pragmatic compliance, sized to the real scale of your organisation.
// faq
Frequently asked questions
Are security audits only for large companies?
No. Non-profits and small businesses are now the most frequent targets, precisely because they are less well protected. The audit is scaled to your budget and to your actual level of risk.
Does my data stay in Europe?
Yes. I host on a VPS located in the European Union (Frankfurt), with no transfer outside the EU, in accordance with the GDPR.
How long does an audit take?
A first audit of a modest-sized website or application generally takes from a few days to two weeks, including the report and recommendations.
// other services