Direct naar inhoud

Work you can verify yourself

Most of my assignments are confidential. That's fair enough — you wouldn't want me putting your name on my website without asking either.

But confidentiality about clients is no reason to show nothing. Below is work that is public: platforms running live, code you can read, and a security analysis that's publicly verifiable. Each project states what you're entitled to conclude from it.

SAIG Academy

What this proves

That I know the regulation well enough to teach it — and that I ship a production platform with a working payment flow.

A training platform on European cyber legislation: NIS2 and the Cyber Security Act, the AI Act, DORA. Eight modules, in four languages, with payment processing and invoicing. I wrote and fact-checked the content, and built and deployed the platform myself.

View the platform →

The sovereign stack, in production

What this proves

That I run what I advise. The regulator is welcome to inspect my systems on site.

Nextcloud for documents, Authentik for single sign-on, Gitea for code, plus monitoring, alerting and a backup topology with offsite replication. Not a demo setup: this is the infrastructure my own company and my clients rely on every day. Anyone who wants to see what such an environment looks like under real use is welcome to come and take a look.

Security audit on an open-source project

What this proves

Independence you can verify, rather than a word on a website.

I carried out a white-box security analysis on enclosed, an open-source tool for encrypted notes. The findings were responsibly disclosed to the maintainer, and the proposed improvements are public as pull requests. Anyone can review the code and the reasoning for themselves.

View the pull requests →

EASEO CMS

What this proves

That my client work is maintainable enough to exist as open source.

A content management system that originated in a client project and was later extracted into an independent, version-controlled package. It now runs across multiple client sites, with a fixed release cadence and documented migration paths for every breaking change.

WeFact MCP

What this proves

That I build working integrations and turn them into a commercial product.

A connector that lets AI assistants work safely with the invoicing software WeFact — creating invoices, looking up debtors, reading subscriptions. Born out of my own admin, grown into a paid product under a dual licence: open source for those who want it, commercial for those who need support.

Need something similar?

Book a 30-minute call. We'll discuss your situation and I'll see whether I can help.

Book a call →