Kevin Kameni · Val-de-Marne, France
Master's student in cybersecurity at ESGI, information security apprentice at Cap2i, and a developer of products with real users. Everything you will see here is live, on a server I run myself.
Services online
01 — Two hats
At Cap2i, I assist the information security officer: SIEM rollout, workstation and EDR upkeep, GDPR processing register, disaster recovery drills, and writing the security policy for clients in the nuclear and defence sectors.
At home, I design and ship products end to end: an app on the App Store, a SaaS with payments, Discord bots used every day. I host them, monitor them and harden them myself.
Each feeds the other: I know what an attacker looks for when I write a line of code, and I know what a bad configuration costs when I review one at work.
02 — Products
No mock-ups: every screenshot below was taken on the production site. Click, it's open.
01 / 04
The wish list that keeps the surprise.
Everyone keeps a list, friends and family reserve without the person knowing, blind Secret Santa, birthday reminders. First an installable web app, then a native iOS app published on the App Store, both on the same API. Gifty+ adds an assistant that finds the gift idea.
02 / 04
Your apprenticeship search, handled.
A SaaS for students still looking for a work-study contract: company profiles built from the French Sirene registry, applications written then followed up, campaign report. Pay as you go with credits. Before every update, the engine re-runs a benchmark of 47 real companies.
03 / 04
The GDPR and security audit an SME owner can take alone, in ten minutes.
Eighteen plain-language questions, a score per category, an action plan that starts with what protects the most. On the home page, a free analysis of the visitor's website. Built with Anton Gustave within the Kapex studio: he owns the offer, I own the design, development and hosting.
04 / 04
A real-time auction game, between friends.
You bid on words and situations, by theme, with briefs and a reverse auction to spice up the end. Multiplayer games synchronised to the second, numbered bidding paddles, an audible hammer, custom word lists, narration generated during the game. “Night auction house” redesign in October 2026.
03 — Background
Three weeks at work, one week in class: that has been the work-study rhythm since 2023. First support and telephony for a major bank, now the security of an information system.
Cap2i · Sartrouville (78)
Axians Outsourcing Paris · Guyancourt (78), on site at Crédit Agricole
ESGI · Paris
IUT d'Auxerre (89), France
04 — Under the hood
Everything shown here runs on a single machine that I set up, hardened and monitor. No turnkey platform: nginx, Docker, systemd, and one Let's Encrypt certificate per service. The status below is measured from the server itself.
Checked every five minutes, from the server itself.
Debian, nginx, Docker, systemd, Let's Encrypt, ufw, fail2ban, OVH et Hetzner, DNS, SMTP.
SvelteKit, Node.js, SQLite, Swift 6 / SwiftUI, Python (Discord bots, FastAPI, Flask), Stripe, WebSocket, Playwright, language model integration.
Cisco (CCNA), Stormshield, Windows Server et Active Directory, PowerShell, SIEM LogPoint, Splunk, Wazuh, EDR, Wireshark, Kali Linux, RGPD, ISO 27001, PRA / PCA.
05 — On the side
Tools for myself, school projects, games for parties. All of it runs on the server too.
Companion for the 2026 World Cup: odds and predictions via API-Football, one team drawn per player, leaderboard between friends.
Server economy and betting: casino, shop, fixed-odds or pari-mutuel bets, paired with Isagi for the matches. Shared wallet with Kaede.
Music, moderation, dashboard and alerts: the server's utility bot, run as a systemd service.
Notes taken on the fly, turned into structured, versioned, editable summaries where the assistant marks what it added. Invitations and sharing. 323 automated tests.
Home-made uptime monitor: checks every service, alerts via Discord and e-mail, keeps clients' databases alive, produces reports.
The website for the October 31st party: RSVPs, photo album, murder mystery with live control room, werewolf game on the living-room TV.
Remote administration tool in Python: TLS-encrypted communication, multiple agents, command-line interface and web dashboard.
Raising employees' cybersecurity awareness through play: quizzes, leaderboard, simulated phishing campaigns with GoPhish.
Relay moves files and text between my devices. PunchTrack tracks boxing and strength sessions for a coach and his student, offline first.
06 — For clients
With Anton Gustave, we founded Kapex: he handles the client relationship and the offer, I design and build. Showcase websites, business tools, automations, with a security mindset from the first meeting.
07 — Contact
Work-study, freelance mission, a product to build or plain curiosity about the server: write to me, I answer fast.
