Software Engineer · Web Pentester · Founder of SINDA
🟢 Available for freelance, remote or part-time work
I have designed or co-built 5 live platforms, including Safre Académie (250+ users) and OrientBot (7 paying customers at launch), reviewing every form and every API with an attacker's eye. Your product could be next.
- 💻 Software engineer with a Bachelor's degree in computer science and telecommunications (INSTI Lokossa). I build web and mobile platforms that run in production.
- 🛡️ Second year of a Master's in Information Systems Security (MASSI, PIGIER Benin), specializing in web penetration testing: OWASP Top 10, Burp Suite, code auditing.
- 🚢 I ship what I build myself: Dockerized services on Linux VPS, CI/CD pipelines on GitHub Actions, reverse proxies with automatic HTTPS, and security scans built into every pipeline.
- 🏢 Founder & CEO of SINDA SARL, a digital engineering group and B2B/B2G SaaS publisher. Our platforms bring students, schools, companies and ministries together around three decisive moments: choosing a path after the Baccalaureate, managing internships, and running schools.
- 🌍 Based in Godomey, Benin 🇧🇯
| 5 | live platforms I designed or co-built |
| 7 | paying OrientBot customers at launch, out of 184 landing page visitors |
| 250+ | users on Safre Académie, an e-learning platform delivered as a freelance project |
| 10+ | team members across 4 divisions at SINDA |
| Project | What it is | My role | Stack |
|---|---|---|---|
| StageConnect | Internship management SaaS for universities and companies, 2026-2027 pilot | Idea, architecture, entire frontend, security, 1,100+ tests | Next.js · FastAPI · Supabase |
| OrientBot | AI guidance advisor for Beninese high school graduates | Idea, MVP, architecture, AI & payment integrations | Next.js · Supabase · OpenRouter · Kkiapay |
| SchooLine | Multi-school management platform, 4 apps (M&T Tech) | Lead developer, 622+ tests, load tested on 30 schools | NestJS · Next.js · PostgreSQL · Redis |
| Safre Académie | E-learning platform, 250+ users (freelance) | Architecture, backend, secure video streaming | Next.js · Express · Supabase · FedaPay |
| BudgetVox | Voice-first budgeting app with an AI correction loop | Designed and built solo | Flutter · FastAPI · Supabase · Deepgram |
| M&T Tours | Tour booking platform for a South African client (M&T Tech) | Entire frontend, 5 languages | React · Inertia.js · Laravel |
| Project | What it is | Key figures |
|---|---|---|
| HackerLab 2026 | Benin's national CTF run by ASIN. Captain of team ByteMeIfYouCan, handle 0xAr3s | 93 flags and 4 first bloods on my own (8th on the BloodBoard, 5th individually) · team 11th with 13,319 points* |
| ConformAI-BJ | Master's thesis: APDP compliance filings and an AI-supervised security pre-audit. The AI suggests, a human decides | STRIDE model with 22 threats · 19 explicit permissions · PostgreSQL Row-Level Security · 271 tests |
* Final ranking before the team's disqualification: a teammate shared a flag with another team without telling the rest of us. Details in the case study.
➡️ All case studies on aresgn.sinda.pro/en/realisations
I deploy and run my platforms in production myself, on Linux VPS (Contabo, Ubuntu), from the first docker compose up to the weekly security audit.
| Platform | What runs in production | How it ships |
|---|---|---|
| StageConnect | FastAPI API, background worker and Redis (password, AOF persistence, health checks) | GitHub Actions builds the image, pushes it to GHCR, deploys to staging then production over SSH, with Slack notifications |
| OrientBot | 5 services: Fastify API, bot, BullMQ workers (LLM, TTS, PDF), dashboard, web app, plus a self-hosted BGE-M3 embedding server (Infinity) | One image per service on GHCR, Docker Compose on the VPS behind Traefik |
| SchooLine | NestJS backend, 4 role dashboards and Redis | I wrote the production stack: one Docker Compose file behind Caddy, 5 subdomains with automatic Let's Encrypt HTTPS, only ports 80/443 exposed, plus a rollback runbook (server deployment done by an M&T Tech colleague) |
| wa-catalog | WhatsApp bot, admin back-office and seller portal | Containers on Dokploy, persistent volume for WhatsApp sessions, headless Chromium tuned for containers |
| Safre Académie | Express API (frontend on Vercel) | Multi-stage Docker image running as a non-root user, on the VPS |
Self-hosted CI: I run my own Woodpecker CI on the Contabo VPS for StageConnect, so builds no longer depend on GitHub Actions minutes. GitHub only sends webhooks and receives commit statuses; the server sits behind an Nginx HTTPS reverse proxy, its gRPC port stays private, and every pipeline step runs in its own container under a dedicated rootless Docker user with CPU and memory caps, isolated from the production Docker.
Pipelines I write:
- Quality gates: Ruff, mypy, import-linter, Vulture, unit, integration and end-to-end tests, coverage reports, PostgreSQL Row-Level Security suites run against a real database.
- DevSecOps: Gitleaks (secrets), Bandit, Safety and pip-audit (dependencies), OWASP ZAP DAST on staging after each deployment and every week, Locust load tests.
- Operations: GitHub environments (staging / production), scheduled cron jobs, a weekly maintenance workflow that opens its own PR, health endpoints monitored from the admin dashboard.
DevOps: Docker & Docker Compose · GitHub Actions · Woodpecker CI (self-hosted) · Rootless Docker · GHCR · Dokploy · Traefik · Caddy · Nginx · Let's Encrypt · Linux VPS (Contabo) · Redis · Vercel
Security: OWASP Top 10 · Burp Suite · OWASP ZAP · Wireshark · Ghidra · pwntools · MITRE ATT&CK · Gitleaks · Bandit · pip-audit · Row-Level Security
🇫🇷 French (native) · 🇬🇧 English · 🇪🇸 Spanish
Freelance project, remote or part-time role: email me (preferred channel), or reach me on WhatsApp for a quick chat.
Universities and companies: join the StageConnect 2026-2027 pilot to digitize internship management.