01. DevSecOps Projects & Selected Works
CERBERUS
PROBLÈME / PROBLEM
Azure AKS infrastructure without admission control: unscanned IaC (Terraform), root containers (UID 0) permitted, unverified software supply chain (zero SBOM, zero signing).
SOLUTION & IMPACT
IaC Terraform scanned by Checkov (azurerm v4, 0 misconfigurations). Kyverno admission policy blocking 100% root containers (UID 0) + NetworkPolicies. Full SPDX SBOM (293 packages via Syft), Cosign signature verified. DAST OWASP ZAP scan completed with no critical alerts within the tested scope. Aligned with NIST SP 800-190 & CIS K8s.
APERÇU & SCHÉMAS TECHNIQUES / PREVIEWS
AEGIS
PROBLÈME / PROBLEM
Node.js/PostgreSQL development pipeline without automated security gates: exposed Git secrets, undetected SQL injections (non-parameterized), and vulnerable npm dependencies reaching production.
SOLUTION & IMPACT
Shift-Left CI/CD pipeline with 4 sequential gates (< 3 min): Gitleaks v8 (0 secrets detected), Semgrep SAST (SQL injections fixed with $1 parameterization), Snyk SCA (100 npm packages audited), Trivy (multi-stage Alpine image < 100 MB, non-root USER node). Formal risk register compliant with NIST SP 800-190.
APERÇU & SCHÉMAS TECHNIQUES / PREVIEWS
MÍTƆN
PROBLÈME / PROBLEM
No secure local platform for real estate and hotel listings in Benin: no integrated digital payment, no listing verification, no personal data compliance (APDP).
SOLUTION & IMPACT
Full solo development (Flutter app, Vercel serverless backend, admin dashboard) in early access in Cotonou with real users. KKiaPay Mobile Money integration (MTN & Moov) — server-side validation + secured webhooks. Scripted DB access rules, AI document validation, APDP & GDPR compliance.
APERÇU & SCHÉMAS TECHNIQUES / PREVIEWS
Corporate Web Platform
PROBLÈME / PROBLEM
Corporate platform with no defined frontend architecture: unoptimized rendering, no scalable component system, unstructured state management.
SOLUTION & IMPACT
Frontend architecture built with Next.js & TypeScript: optimized SSR rendering, code-splitting, modular and reusable component system. Stack: Next.js, React, TypeScript.