Skip to content
Quentin Forand
France · remote

Quentin Forand

Cybersecurity & product engineering. Founder of Little Omega.

I build and run small, useful software end to end — the product decisions, the API, and the infrastructure underneath it. Today that means three products shipped and operated by one person.

quentin@forand.fr LinkedIn GitHub

What I'm building

Little Omega is a one-person software company. Three products in production — each one mine end to end, from the API to the certificate.

Engarde

Security awareness that changes behaviour

engarde.cc

Security training and phishing simulation for companies that have no CISO. Built on the premise that awareness is not behaviour — everyone already knows phishing is bad, and it keeps working anyway.

Companies of 20–200 people, France and EU

  • Phishing, vishing and landing-page simulation, recording what people did rather than what they typed — no simulation ever captures a password
  • A skills catalogue that measures behaviour against named targets instead of quiz scores
  • An AI security officer reachable in Slack and Teams, on a channel-agnostic core
  • TypeScript
  • Koa
  • MongoDB
  • RabbitMQ
  • Svelte

Linteo

A permanent identity for your Conseil Syndical

linteo.fr

One email address and one phone number that belong to the building rather than to whoever currently sits on the council — so the contact details on every document survive the next election.

Copropriétés and their conseils syndicaux, France

  • Group mailboxes where a member's personal address is never exposed to a résident
  • An archive that keeps the thread when the people on it change
  • Membership identity that resolves aliases to one person instead of two
  • TypeScript
  • Koa
  • MongoDB
  • Google Workspace
  • Svelte

loginwith

EU-native authentication and directory sync

loginwith.app

SSO, directory sync and an identity API for European SaaS — so a company can offer enterprise login without routing its customers' identities through a US provider.

European SaaS teams

  • OIDC and SAML SSO with per-tenant configuration inherited from the organisation
  • Directory sync pulling users and groups from the tools companies already run
  • A TypeScript SDK and hosted login pages
  • TypeScript
  • Koa
  • MongoDB
  • OIDC
  • SvelteKit

And the thing they run on

The company I have run since 2019 — today a one-person software business shipping its own products on infrastructure I design, deploy and operate myself.

  • Three products in production, each with its own API, web front end and deployment pipeline
  • Shared platform: Traefik, Docker Compose, SOPS-encrypted environments, GitHub Actions building and deploying every service
  • Every layer, from the Let's Encrypt certificate to the billing integration
  • Docker
  • Traefik
  • GitHub Actions
  • SOPS

Before that

Fifteen years of backend work, most of it where being wrong was expensive — car-sharing fleets, emergency call centres, last-mile logistics.

  • 2026

    EAGR

    Full-stack developer

    An AI product for sales coaching and conversation analysis. I built the interfaces and admin tooling, and shipped a feature that classifies which selling methods were actually used in a meeting against the team's playbook — making the gap between the conversation and the plan visible.

  • 2025–26

    Oplit

    Senior full-stack engineer, back-end leaning

    SaaS for industrial planning. I designed Oplit Apps — the architecture that opens the product to extensions built by the team, partners or customers — including a public API separating integrations from the historical core, multi-tenant authorisation, short-lived JWT auth and the security boundaries between core, integrators and customer data.

  • 2024

    Callifly

    CTO & lead developer

    Cali, a voice-to-voice AI assistant for e-commerce brands. Working prototype in one week, first customer signed within two months: an LLM agent over RAG on the catalogue and brand voice, speech-to-text and text-to-speech, transcript analysis, conversational safety layers and a Shopify integration.

  • 2022–24

    Cyrius

    CTO

    A SaaS platform for employee cyber-risk awareness, built at Station F. I took the product from no-code to an in-house stack, raised on the Shadow IT feature, and recruited and led the founding engineering team — five engineers in a month.

  • 2019–22

    Trusk

    Team lead, then engineering manager

    Last-mile delivery of large parcels, integrated with retailers such as IKEA. I grew the team from 4 to 15, owned the order-fulfilment squad, and introduced the craftsmanship practices that took production incidents to near zero and tripled delivery pace.

  • 2018–19

    ClicRDV · SoLocal

    Back-end developer

    White-label appointment booking. Reserve with Google, a rewrite of the core availability algorithm, and two-way synchronisation with Google Calendar and Office 365.

  • 2017–18

    IER · Bolloré

    Software engineer

    The on-board computer in the Autolib' electric car-sharing fleet — Paris, BlueCity in London, BlueLA in Los Angeles. Migrated it to a new GPS provider with traffic and alternative routing, and re-architected the stack.

  • 2014–17

    Europ Assistance

    Software analyst & architect

    Rebuilding critical systems for the holding and its affiliates — a twenty-year-old C++ core, half-migrated to C#, live in thirteen countries — along SOLID and KISS lines.

  • 2011–15

    Tillid

    Co-founder & co-manager

    A web agency founded with fellow Epitech students, originally to fund a robotics project the school had no budget for. It ended up carrying our final-year project — on computer security.

Teaching

Assistant, junior professor, lecturer, trainer, jury, mentor. Never a full-time job, never interrupted either — and the reason security awareness is the problem I ended up working on.

Education

  • CAPES NSI

    2024

    Passed the French national teaching qualification in Numérique et Sciences Informatiques.

  • Epitech

    2009–14

    Five years in Lyon then Paris, Master's level, entirely project-based. The ones that stuck: Eternity II attacked with variable neighbourhood search, image layer extraction by mean-shift clustering, and an arbitrary-precision calculator written in week four.

  • Stockholm University

    2012–13

    Fourth year abroad at DSV — programming paradigms, multimodal interaction, security and forensics, cognitive psychology.

  • Lycée Édouard Branly

    2009

    Baccalauréat S, sciences de l'ingénieur.

Stack

Backend
  • TypeScript
  • Node
  • C#
  • C++
  • PHP
  • Python
Data
  • MongoDB
  • MySQL
  • Redis
  • Oracle
Frontend
  • Astro
  • Svelte
  • Vue
  • React
Infrastructure
  • Docker
  • Traefik
  • GitHub Actions
  • SOPS