Quentin
Vedrenne

Open-source, zero-knowledge secret manager I designed, built, and ship as both a Rust web app (whisper.quentinvedrenne.com) and a multi-platform CLI distributed on npm (whisper-secrets). Two products on one Rust core: one-time URL-based secret sharing, and a CLI that encrypts your team's .env client-side before it ever touches the network. Published on npm via OIDC Trusted Publishing with SLSA provenance, integrated with Slack, Discord, and a Raycast extension merged upstream into raycast/extensions. Self-hostable, with a hexagonal Rust architecture, full GitHub Actions CI/CD, and a public Slack community.

My day job — founding engineer at Edamame Technologies, a device-security startup. I build the serverless React + Rust platform that lets CISOs analyze device security postures and enforce access control on GitHub, Azure, and Google through custom policies — and I lead the 4-engineer team shipping it.

End-to-end serverless CRM built on AWS — a Go REST API on Lambda + API Gateway + DynamoDB, a Vite.js SPA served via CloudFront/S3, and Cognito for auth — with the entire infrastructure defined as code in CloudFormation and shipped through a GitHub Actions CI/CD pipeline. Zero servers to manage, observability via a CloudWatch dashboard.

Production SaaS platform (kleasy.fr) that lets a business spin up a 360° cloud switchboard in one click — for cold-calling campaigns, employee numbering, and customer support. Built as part of the founding engineering team, my contribution covered the React front-end and Go/gRPC microservices behind the call-routing, contacts, and shared call-log features, deployed on Kubernetes.

Full-stack application (front, back, database) deployed on a multi-node GKE cluster, with the entire infrastructure provisioned by Terraform and shipped through a self-hosted GitLab CI/CD pipeline — kaniko image builds, Helm-installed Traefik ingress with HTTPS, and RBAC-scoped staging access for developers.

This site — the second iteration of my personal portfolio (v2.0), rebuilt from scratch on Next.js 14 with the App Router. Static-exported and shipped on Cloudflare Pages, fully typed in TypeScript, styled with Tailwind, and animated end-to-end with Framer Motion. Designed to keep the bar high every time someone lands here.

The first iteration of what eventually became Whisper. A web app + browser extension for sharing a password through a self-expiring link, with a Node.js API and cron-based cleanup. It worked, but it wasn't zero-knowledge — that gap is exactly what pushed me to redesign the whole thing in Rust as Whisper, with client-side encryption, a CLI, and team .env workflows.

An IFTTT/Zapier-style automation platform built from scratch. Users connect third-party services, then compose an "AREA" by wiring an Action from one service to a REAction in another — the platform watches the triggers and fires the reactions automatically. React SPA, Node.js/Express API, fully containerized with docker-compose.

A NetVibes-style personal dashboard: users subscribe to services, then build their own page out of configurable widgets, each polling fresh data on its own timer. React front-end, Node.js/Express API, containerized with docker-compose and deployed to a VPS with pm2.

Native Android client for Imgur written in Kotlin. Sign in with your Imgur account, then browse, search, filter, upload, and favorite photos — a complete consumption-and-publishing flow against the Imgur REST API, built with a classmate as a two-person team.