Case studies
selected

The company managed listings, availability and requests via WhatsApp and Excel spreadsheets. The previous site was a static brochure: every change required external technical intervention, with unpredictable costs and timelines.

I built a modern website with clear communication about how the rental service works and an integrated private management panel: the owner can add, edit or delete listings, update prices and availability, upload photos, all independently, from any device, without touching code.

Zero dependency on technicians for daily management. The site updates in real time and works 24/7 to bring in new clients, while the owner focuses on their actual work.

The agency had neither an online presence nor its own technical infrastructure. They needed a site that communicated their brand coherently and explained complex topics like phishing in a clear, accessible way, without reading like a technical manual.

I built the site aligned with their branding, with copy designed to communicate phishing and cybersecurity risks simply to non-technical audiences. In parallel I configured their dedicated server from scratch: hardening, access control, firewall, and prepared the software needed for their daily operations.

A credible and recognisable online brand, with a solid and secure technical infrastructure to build on. From website to server, everything ready to work.

A manual vulnerability assessment requires hours of repetitive work: collecting data, cross-referencing CVEs, writing clear reports. For SMEs it's too expensive to do regularly, and it often gets skipped until it's too late.

I designed and built sectra.dev: a platform that automates the entire assessment pipeline. Scanning the exposed surface, correlating with updated CVE databases, automatically generating readable reports with AI-suggested remediation priorities.

Analysis time is drastically reduced. Companies can afford periodic assessments without prohibitive costs, and always know where they're exposed.

A server exposed to the internet with default configuration is an easy target: open ports, root access via password, no brute force protection. It's just a matter of time.

I configured a dedicated server with a complete hardening layer: SSH access via cryptographic key only, root login disabled, fail2ban active on all exposed services, firewall with whitelist rules, non-standard ports and real-time log monitoring.

Zero intrusions. The server runs 24/7 with a minimal attack surface and every unauthorized access blocked and automatically logged.

Managing DNS, firewall rules and security settings on Cloudflare for multiple domains from the web dashboard is slow, repetitive and error-prone, especially when replicating the same configurations across different clients.

I built a tool that interfaces directly with the Cloudflare API to automate the most common operations: DNS changes and propagation, A/CNAME/MX record management, WAF rule activation, SSL/TLS configuration and Page Rules deployment, all from the command line or via configuration files.

Operations that used to take minutes of dashboard navigation are reduced to a single command. Configurations replicable across multiple domains in seconds, with no risk of manual errors.

A dedicated server going offline at 3am means hours of downtime before anyone notices and manually moves traffic to the backup.

I built a monitoring system that continuously checks the primary server status and, in case of failure, automatically calls the Hetzner Robot API to migrate the failover IP to the backup, then moves it back when the primary comes back online.

Automatic failover in seconds, no human intervention. The system runs as a systemd service, active 24/7.

WordPress powers over 40% of the web and is the preferred target of automated attacks. Most installations run with outdated plugins, weak credentials, wrong permissions and no active protection: an open door for anyone.

I performed a full installation audit: identification and removal of vulnerable plugins, credential strengthening, file and folder permission configuration, admin panel protection, HTTP security header implementation, disabling unnecessary features and cleaning up malicious code already present.

Attack surface drastically reduced. The site is clean, updated and protected against the most common attack classes, with an active maintenance plan to keep it that way.

A high-end rental service with international clientele had no online presence to match: the site conveyed little of the premium positioning and wasn't available in multiple languages, cutting off a significant portion of potential clients.

I designed a multilingual site with a premium visual experience, communication tailored for a high-end target audience and smooth navigation in multiple languages. Every design choice: typography, palette, imagery, is aimed at conveying exclusivity and trustworthiness.

An online brand consistent with the luxury positioning of the service, accessible to international clients in their language and capable of converting high-profile visitors into bookings.

Cybersecurity is perceived as a technical field. The result is that ordinary people and SMEs don't protect themselves because they don't understand the risks, or understand them too late.

I launched a YouTube channel where I explain cybersecurity concepts directly and concretely: how real attacks work, what to do to protect yourself, tools and mindset. No useless jargon, everything actionable.

Content that reaches a non-technical audience and leads them to make more informed decisions about their digital security.