About
Pieter Donche
Engineer, pentester, operator
By day I run the cyber-security department of a Belgian industrial company. Under DonIT I build, test and run software for SMEs that don’t have an IT department and don’t want to pay big-consultancy rates for someone who has never run infrastructure themselves.
Based in Eppegem, working across Belgium.
Why I do this
Why I do this
SMEs deserve the same engineering discipline large companies get, at a price that makes sense. Not a watered-down version, not a template with your logo on it — the real thing, scoped to what you actually need.
This site, as a demo
This site, as a demo
This website is the kind of thing Pillar 1 delivers: Astro on Cloudflare Workers, no cookies, no trackers, self-hosted fonts, strict Content-Security-Policy, HSTS preload. Target: A+ on securityheaders.com and Mozilla Observatory. Check it yourself.
Principles
How everything here gets built
Privacy & sovereignty by default
EU services wherever possible, GDPR as a baseline rather than an afterthought, and end-to-end encryption wherever the data is worth protecting. Data minimisation is a design decision, not a legal footnote. This site is the proof: no cookies, no trackers, no third-party scripts, hosted on Cloudflare Workers.
You own everything
Everything I deliver is yours: the code, the repository, the data, the domain. No proprietary platform you can’t leave, no monthly fee to keep what you already paid for. If you want to take it to another engineer tomorrow, you can.
Serverless where it makes sense
Serverless infrastructure means no servers to patch, no hosting invoice, and global performance out of the box. Where an application genuinely needs a server, I run it in EU datacenters — and say so up front.
AI-native, engineer-reviewed
I build with AI assistance and I’m open about it: it’s faster and the code is more consistent. Every line is reviewed by someone who pentests software for a living, and every project is structured so AI can keep maintaining it later without heroics.
Stack
Stack I work with daily
- Cloudflare (Workers, Zero Trust, Access, Gateway)
- Okta / Entra ID
- SentinelOne-class EDR
- SIEM
- Docker
- Postgres
- Go
- Python
- TypeScript
- React
- Claude / LLM tooling
- MCP