Who am I?
I am a freelancer and have been supporting businesses with their cybersecurity needs. I have built up my technical expertise over more than 10 years, covering development, system administration and cybersecurity.
For more information, here’s my LinkedIn profile.
My years with Linux
I was still at secondary school, learning the C programming language for fun, when I installed my first Linux distribution, Ubuntu 12.04. It was so much more practical than Windows that I knew I’d never go back.
Professionally, I started out as a Web and embedded developer for six years, working with PHP, JavaScript and Rust. In the midst of all that, I also set up a fleet of connected devices running on Debian: automated system configuration, updates, fleet management (Puppet), and monitoring (Fluentd).
Then four years in cyber security: vulnerability management, Web penetration testing, code audits and configuration audits. I spent that decade working with various Linux distributions: Ubuntu, Debian, Manjaro, Arch Linux (btw). I set up servers, configured firewalls, troubleshot issues at midnight, and juggled three wiki pages at once just to install a system on an encrypted drive. That was my daily routine.
Then I discovered OpenBSD.
The switch to OpenBSD
Three years ago, I migrated my laptop and then my server to OpenBSD. It’s a system with a slightly different philosophy: simplicity, security by default, and impeccable documentation.
What I liked:
- A clear configuration; no more iptables configurations so complex that you end up installing a wrapper (ufw, for Uncomplicated FireWall)
- A built-in firewall (pf) that doesn’t need ten extensions to do the job
- A security philosophy that permeates the entire system
- Comprehensive and easy-to-understand documentation (Read The F…antastic Manual)
Today, there’s no going back.
My offerings
I offer three types of service:
Security audits and penetration tests: Web applications, infrastructure, code. I provide detailed reports with evidence of successful exploitation.
OpenBSD migrations and hosting: compatibility analysis, configuration (pf, httpd, relayd), deployment to production.
Process automation: Python and Rust tools to automate your repetitive tasks (Excel/Outlook emails, reports, integrations).
What I believe
- Security by default: if security measures exist, why not enable them by default?
- Security in depth: security isn’t just about using the latest version of PHP for your Web application; it’s a principle that applies across all layers of your application (up-to-date language and libraries, prepared SQL queries, etc.) as well as your infrastructure (reduced attack surface, W^X, ASLR, chroot, pledge, unveil, firewalls, IPS, etc).
- Your data belongs to you: no third-party cloud services, no SaaS providers that resell your metadata.
- Transparency above all: clearly stated pricing, acknowledged limits, promises kept.
My skills
- Operating systems: OpenBSD, Linux (Ubuntu, Debian, Manjaro)
- Networking: pf, httpd, relayd, vmm, reverse proxy
- Development: Python, Rust, PHP, Shell
- Security: Web penetration testing, code auditing, OWASP Top 10, hardening
Let’s work together
If you’re looking for someone who knows their stuff, who secures whatever they configure, and who speaks their mind, we should have a chat.
I also document my technical experiences on my blog OpenBSD Desktop .