Three tools, and the gap that started each one.

End-to-end encrypted file and message transfer. The server holds neither the content nor the keys, and the archive uses MLA, an open format published by ANSSI, the French national cybersecurity agency.

Who it is for

Any organisation that has to send a sensitive document to a client, an auditor or a regulator, and for which an email attachment and a consumer service are not acceptable answers.

Why it got built

The need showed up on engagements, at organisations sending health records and bank statements by email for want of anything better. Nothing available held both confidentiality and actual daily use, so it got built.

A decontamination station for removable media. An unknown drive is isolated, its contents read without ever being mounted by the kernel, and a clean output drive is rebuilt from what passed.

Who it is for

Sites where a USB drive is still the only way in and out: industry, healthcare, operators, environments with no open network.

Why it got built

Built on usbsas, released as free software by the CEA, following ANSSI recommendations on decontamination stations. Designed, integrated and assembled on Reunion Island.

Detecting attacks against language models, agents and MCP servers: injected instructions, context exfiltration, and tool calls that do more than they were asked to.

Who it is for

Organisations that have just wired a model to internal data and now have to answer for it.

Why it got built

The work comes out of AI security engagements and feeds back into the review practised there. It is not for sale, no release date is announced, and progress is readable in the public notebooks.