I build cybersecurity tools and AI agents.
Featured in The OSINT Newsletter, Indicator, The OSINT Rack, MISC and awesome-osint.
Work
WayTrace Demo, 1:46 Digging through a site's past via the Wayback Machine. “A useful, well-executed idea.” Craig Silverman, co-founder of Indicator
Give it a domain. WayTrace goes through the site's pages archived by the Wayback Machine and pulls out what was once published there: emails, phone numbers, names, subdomains, API keys left in the code, analytics and ad IDs, crypto wallets. In all, 48 types of information, each dated from first to last appearance and linked to the archived page it comes from. The site itself is never contacted. Free and open source.
Real case: the same rare ad account ID appeared on one site in 2014 and on another, with no apparent connection, in 2024. WayTrace found it on both, and that tied the two sites together.
FastAPI, aiohttp, selectolax, SQLite FTS5, Docker waytrace.orgGitHub
RegulAIte, AI compliance agents A compliance expert that has read every document you have.
Give it internal policies and regulations, ask “are we DORA-compliant on third-party risk?”, and it returns a table: each requirement, the matching clause, the gap if there is one. Built end to end by a team of three, then taken from prototype to production at a CAC 40 company, on its own servers.
Python, Qdrant, Celery, LLM/RAG GitHub
Writing
“Wayback Machine comme terrain d'enquête” MISC special issue no. 38, 2026, OSINT feature, in French
MISC is the leading French-language magazine on information security. In its OSINT special issue, I explain how WayTrace works and when to use it: recovering what a site deleted, dating a trace, linking two identities across web archives.
A Method for Sovereign and Resilient Enterprise AI Master's thesis, 2026
My master’s thesis, on a question every company now faces: how to adopt AI without depending on a single vendor or exposing its data. It lays out a five-phase method, from threat prevention to value creation.
Previously
Advens, cybersecurity consultant
Technical point of contact and project lead for 20+ enterprise clients: governance and risk for AI products, cyber due diligence on acquisitions, technical audits, and close support to CISOs, up to crisis exercises with the executive committee.
Mercedes-Benz (Athlon MBAG), deputy CISO and DevSecOps, 3 years
Migrated the infrastructure from on-prem to Azure, automated deployments (Terraform, CI/CD), ran the PKI and incident response.
Trained at Oteria Cyber School and École 2600.
Oteria Cyber School, master's degree, Expert en cybersécurité. Intelligence and cyber threats track: CTI, geopolitical intelligence and OSINT. Completed alongside my role at Advens, with a thesis on sovereign and resilient enterprise AI.
École 2600, bachelor's in cybersecurity. Offensive and defensive security, after an intensive selection bootcamp (the Piscine): penetration testing, systems and network analysis, hardening.