Services

What you get

• Custom web applications: stock management, back-office tools, customer portals, dashboards, internal apps.
• Websites with your own admin/CMS — no WordPress, no plugins, no PHP.
• Built on frameworks that are easy for AI to read and extend, so maintenance stays cheap forever.
• Hosted on serverless infrastructure (Cloudflare Workers) — fast, global, and no monthly hosting bill.
• Privacy engineered in: end-to-end encryption, data minimisation, EU-hosted services.
• You own the code and the repository. Always.

WordPress rescue

Still paying for hosting, plugin updates and a theme that broke in 2019? I take your WordPress site and turn it into a modern app on serverless infrastructure. No more ugly pages, no more PHP, no more paid hosting. Same content, better everything.

2a. Security assessment

Fixed scope, report and remediation plan.

• Active Directory health (PingCastle-style scoring and hardening plan).
• Microsoft Entra / M365 configuration review (Maester-style automated checks + manual review).
• Identity & access review: MFA coverage, conditional access, privileged accounts.
• Cloudflare / network edge configuration.
• Endpoint & patching posture.
• Deliverable: prioritised findings, risk rating, concrete remediation steps you can hand to any IT provider.

2b. Penetration test

Scoped, with rules of engagement, retest included.

• External perimeter, web application, internal / Active Directory.
• Deliverable: executive summary + technical report + retest of fixed findings.
• Penetration tests are delivered under a formal engagement framework with rules of engagement and insurance in place.

What you get

• MCP servers built for your tools and data — exposed securely via Cloudflare (portals, Access, scoped tokens), manageable, auditable.
• AI agents and workflows that do real work inside your company: ticket triage, reporting, data entry, monitoring.
• Secure-AI consulting: AI acceptable-use policy, risk assessment of AI tools, data-leak prevention, prompt-injection-aware architecture.
• Training: Coding with AI, securely — hands-on workshops for developers and IT teams.
• Helping you become AI-native: which tools, which plan, which guardrails.

What you get

• Custom security tooling: dashboards, integrations, “glue” between the tools you already pay for.
• Threat-intelligence pipelines that turn the daily CVE firehose into your actionable list. Example: a new critical vulnerability is published, your vulnerability scanner is queried automatically, and you receive the list of affected servers within minutes, not weeks.
• SIEM onboarding, detection engineering, alert enrichment and automated response.
• Cloudflare Zero Trust implementation: replace the VPN with Tunnel + Access + Gateway, device posture, SaaS protection.
• Asset & identity hygiene automation.

What you get

• IT Security Manager as a service — a fixed number of days per month to own your security roadmap, vendors and policies.
• SecOps engineer as a service — hands-on operations on your stack.
• NIS2 readiness and ISO 27001 gap analysis — where you stand, what to fix first, what to document.
• Strategy & product selection: EDR/MDR, SIEM, IAM (Okta / Entra), SASE/Cloudflare, firewalls — vendor-neutral, based on having run them.
• Incident response readiness: playbooks, tabletop exercises, tooling.
• Zero Trust and identity architecture.
• Training & awareness: secure coding with AI, CTF-style workshops, phishing-awareness programmes, security basics for non-IT staff.

NIS2

NIS2 is law in Belgium. If you're in scope — or supply someone who is — you need to show you manage risk, not just buy products. I run the gap analysis, prioritise what actually matters, and leave you with a roadmap your management understands and an auditor accepts.