This site (Smidjan)
PublicNext.js
This portfolio itself: Next.js 16, React 19, TypeScript, next-intl (FR/NL/EN), with particular attention paid to security (CSP, rate limiting, hardened headers).
Next.jsReactTypeScriptnext-intl
Technical evidence, not promises
Projects & achievements
What I build, I document and secure. Some projects are public on GitHub, others stay private: every status is stated honestly, nothing dressed up.
Flagship project
Open source · written in GoClawkWerk — CyFun / NIS2 audit tool
A self-assessment tool I am building to help SMEs prepare for the CyFun framework, the Belgian foundation of NIS2 compliance.
Context
Walloon SMEs now need to position themselves against NIS2. The CyFun framework (CyberFundamentals, Centre for Cybersecurity Belgium) offers a clear framework, but adopting it takes time and a method. That is what this tool prepares: a structured diagnostic, ahead of any official certification process.
Method and guarantees
- Aligned with the CyFun framework
- Read-only: the tool never modifies the audited systems
- Explicit audit scope, defined before each session
- Credentials are never stored
- Tamper-proof audit log of every action
- Every proposed remediation is validated by a human
- No data is retained after the audit
Result
A clear report, leading to prioritised remediation, then to a progressive hardening of the system.
Important: this tool is an assisted self-assessment and preparation, not an official certification. CyFun certification is issued exclusively by BELAC-accredited bodies.
Proprietary tool, developed solo. Internal architecture and code are not public: technical details on request.
Other projects
What I build
Two states, one page: what runs today, and what is still under construction. Nothing is presented as finished before it is.
Au Fil des Saveurs
PublicNext.js 15
Multilingual online shop (FR/NL/DE/EN) for an artisan biscuit bakery — a fictional brand used as a demonstration. Stripe payment with signed webhooks, subscriptions, gift cards, B2B quotes and an admin back-office; TOTP two-factor authentication, rate limiting and GDPR-compliant account deletion. Live, covered by 64 test files.
Next.js 15TypeScriptPostgreSQL / DrizzleStripeAuth.js
ClawkWerk
PublicGo
CyFun (CCB) / NIS2 audit tool written in Go: read-only, agentless, built for Belgian SMEs. A structured compliance diagnostic, with no intrusive install.
GoCyFun / NIS2CLIRead-only
ConvertPDF
PublicC#
Windows desktop application that converts documents between PDF, Word, Excel and HTML, and transcribes audio to text locally with Whisper. Deliberately a prototype: the MVVM architecture and conversion work, several features announced in the interface still need implementing.
C#.NET 10WPFMVVMWhisper
I regularly publish and expand my projects.
Follow progress on GitHubA question about one of these projects?
I answer with the same transparency as on this page: what's done, what's in progress, what stays private.
Fast responseFull transparencyBased in Wallonia