Consulting
I've been working as an IT consultant since 2018, for companies, professional firms and technical teams. I follow projects from analysis to deployment, and I always leave enough documentation for the system to stay manageable without me.
Security and AI courses
Hands-on courses, built around the level and the tools of the people attending: we work on real examples, not slides.
- Cybersecurity The most common threats for a company, phishing and credential management, web and mobile application security, practical labs for developers.
- Artificial intelligence How language models work, what they can do and where they get things wrong, sensible use of AI tools in everyday work, integrating AI into software for development teams.
Courses can be a few hours long, to introduce a topic to all staff, or longer programmes for technical teams.
AI solutions
AI is useful when it solves a specific problem and you can measure how well it does. That's always where I start.
- Assistants for company documents (RAG) Manuals, procedures, datasheets and archives become searchable in natural language, with answers that cite their source and can be checked.
- AI on your own servers Installing and configuring language models on the company's hardware, for those who don't want to, or can't, send their data to outside services. From sizing the machine to getting it up and running.
- Integration into business processes Extracting data from documents and emails, classifying requests, assistants for internal support, connecting to management software and tools already in use.
- AI-based software development Custom applications and tools, from prototype to production, tested on real cases before release.
An example An AI assistant for my Lexus CT200h's workshop manual: search over more than 28,000 passages of the manual, answers with cited sources and web search for known faults.
Systems administration
Design, installation and maintenance of infrastructure, both for new setups and for existing systems that need tidying up.
- Linux and Windows servers, Proxmox virtualisation, containers.
- Company networks, firewalls, VPNs for remote access.
- Backups and recovery plans, verified with periodic tests.
- Monitoring, updates and infrastructure documentation.
Security testing
Security assessments of Android applications and web services, to find problems before someone else does.
- Android app analysis: how the app talks to its servers, how it stores data on the device, what sensitive information, such as keys and server addresses, can be extracted from the app itself.
- Testing of websites, portals and APIs: authentication, session handling, access control, data exposure.
- A final report with the issues found, ordered by severity, and concrete guidance on how to fix them.
- A second check after the fixes, to confirm the issues have actually been resolved.
Getting started
- First meetingTo understand the problem, the data involved and the constraints.
- Written proposalGoals, timeline and cost, in black and white.
- Work and handoverWith documentation, so the system stays manageable afterwards.
Have a project or a technical question?