Services

I work with newsrooms, NGOs, and individual investigators on the technical layer of source protection and OPSEC.

What I do

Source-protection infrastructure

Setup and audit of secure-drop systems for journalistic outlets:

Self-hosted intake (no SaaS, no cloud, no Cloudflare)
Hardware-key cryptography (YubiKey-bound certificates, the source never holds long-term keys)
Mixnet routing layer (Onion Courier, Sphinx)
RAM-only handling on the receiver side
Forwarding workflows with audit trails the editorial board can verify

Replicates and extends the SecureDrop model with modern primitives. The end user (your source) does not need to install Tor Browser, GnuPG, or learn keyrings — only run a pre-built binary.

OPSEC reviews for at-risk individuals

For journalists working in war zones, on organized crime, or on authoritarian regimes:

Threat modeling specific to your beat
Device hardening (Linux, Android via GrapheneOS)
Compartmentation of identities (legal vs operational)
Communication discipline coaching
Emergency procedures (device-loss, border crossings, custody)

This is one-on-one work. I do not produce generic checklists.

Backend infrastructure for privacy-aware projects

Custom Go services for organizations that need self-hosted, verifiable infrastructure — message routing, forwarding pipelines, content-addressed storage, integrations with existing privacy tools.

Recent work: see /tools.

Talks and training

Half-day or full-day workshops, in English, French, or Italian:

“Source-side OPSEC for sensitive reporting”
“Mixnets vs VPNs: what does the threat model actually require?”
“Modern alternatives to PGP without losing OpenPGP-compatibility”

What I do not do

Web development for marketing purposes
Surveillance products of any kind, including “for research”
Work for police, military, intelligence services, or their contractors
Anything that would make a worse-than-current internet for the median user

How to engage

Reach me through any of the channels at /contact. For first contact, plain email is acceptable. We move to encrypted channels before discussing anything operational.

Pricing

Setup engagements: project-based, scoped and quoted in advance. Typical range €1500 – €4500 depending on scale and travel.

OPSEC reviews: half-day from €350, full-day from €700.

Pro-bono slots are available for: independent journalists working without a publisher, NGOs documenting human-rights abuses, defendants in press-freedom cases. Just ask.

Payment in EUR (SEPA), Monero, or Bitcoin. No cards, no PayPal.