Custralis

Java + Spring Boot (Security, Data, Web). Specialism: application security (OWASP) and GDPR by design. Databases: PostgreSQL, MySQL, MongoDB, Redis. Full-stack: TypeScript, React, Next.js, Docker.

Container and Kubernetes security, microservice architecture trade-offs, and strict nonce-based CSP with cookieless analytics — keeping secure-by-default current.

A privacy-first website built with enterprise-grade rigour: no cookies, no third-party trackers, server-log analytics, a strict nonce-based CSP with reporting, plus write-ups on the how.

Happy to talk web and app security, privacy by design, GDPR or OWASP, and to collaborate with European SMEs that want security built in from the start, not bolted on.