Quentin
Vedrenne

Open-source, zero-knowledge secret manager I designed, built, and ship as both a Rust web app (whisper.quentinvedrenne.com) and a multi-platform CLI distributed on npm (whisper-secrets). Two products on one Rust core: one-time URL-based secret sharing, and a CLI that encrypts your team's .env client-side before it ever touches the network. Published on npm via OIDC Trusted Publishing with SLSA provenance, integrated with Slack, Discord, and a Raycast extension merged upstream into raycast/extensions. Self-hostable, with a hexagonal Rust architecture, full GitHub Actions CI/CD, and a public Slack community.

Open-source per-app volume mixer for the Mac menu bar, which I designed, built and ship (mixbar.quentinvedrenne.com) — a slider for every application making sound, plus one-click output-device switching. macOS has no API for per-app volume, so MixBar captures each app's audio with Core Audio process taps, applies your gain and mixes it back out in real time. It needs no kernel extension and no virtual audio driver, and at default volume it stays completely out of your audio path. Free, MIT-licensed, and distributed as a signed and notarized .dmg for macOS 15+.

A Raycast extension that removes a macOS application and the files it leaves behind — caches, containers, preferences, launch agents, privileged helpers — after showing you exactly what it found and why. Most uninstallers delete anything whose name resembles the app, which is how people lose unrelated data. This one is built the other way round: every match carries its evidence, weak evidence stays unselected, and nothing is deleted — it goes to the Trash. Submitted to the Raycast store (PR open on raycast/extensions).

My day job — founding engineer at Edamame Technologies, a device-security startup. I build the serverless React + Rust platform that lets CISOs analyze device security postures and enforce access control on GitHub, Azure, and Google through custom policies — and I lead the 4-engineer team shipping it.

A finger picker and team maker for iPhone and iPad, submitted to the App Store as Who's First: Finger Picker. Everyone puts a finger on the screen; after a short countdown the app picks one — or splits the group into two balanced teams. It is a deliberately small app built properly: a FingrCore package that imports neither SwiftUI nor UIKit, every external thing behind a port, and a test suite that plays whole rounds with a fake clock and a deterministic random source. No ads, no purchases, no accounts, no third-party dependencies.

An iOS take on Scopa, the card game Italy plays at the kitchen table. Play the phone, pass it around the table, connect the phones in the room, or play strangers on a ranked ladder where everybody gets the same daily deal. Swift 6 and SwiftUI on top of dependency-free Swift packages, with a single Cloudflare Worker behind the online parts. Four completely different ways to play a table — hot-seat, Multipeer, Game Center, relay rooms — all drive the same coordinator through one transport port.

End-to-end serverless CRM built on AWS — a Go REST API on Lambda + API Gateway + DynamoDB, a Vite.js SPA served via CloudFront/S3, and Cognito for auth — with the entire infrastructure defined as code in CloudFormation and shipped through a GitHub Actions CI/CD pipeline. Zero servers to manage, observability via a CloudWatch dashboard.

Production SaaS platform (kleasy.fr) that lets a business spin up a 360° cloud switchboard in one click — for cold-calling campaigns, employee numbering, and customer support. Built as part of the founding engineering team, my contribution covered the React front-end and Go/gRPC microservices behind the call-routing, contacts, and shared call-log features, deployed on Kubernetes.

Full-stack application (front, back, database) deployed on a multi-node GKE cluster, with the entire infrastructure provisioned by Terraform and shipped through a self-hosted GitLab CI/CD pipeline — kaniko image builds, Helm-installed Traefik ingress with HTTPS, and RBAC-scoped staging access for developers.

This site — the second iteration of my personal portfolio (v2.0), rebuilt from scratch on Next.js 14 with the App Router. Static-exported and shipped on Cloudflare Pages, fully typed in TypeScript, styled with Tailwind, and animated end-to-end with Framer Motion. Designed to keep the bar high every time someone lands here.

The first iteration of what eventually became Whisper. A web app + browser extension for sharing a password through a self-expiring link, with a Node.js API and cron-based cleanup. It worked, but it wasn't zero-knowledge — that gap is exactly what pushed me to redesign the whole thing in Rust as Whisper, with client-side encryption, a CLI, and team .env workflows.

An IFTTT/Zapier-style automation platform built from scratch. Users connect third-party services, then compose an "AREA" by wiring an Action from one service to a REAction in another — the platform watches the triggers and fires the reactions automatically. React SPA, Node.js/Express API, fully containerized with docker-compose.

A NetVibes-style personal dashboard: users subscribe to services, then build their own page out of configurable widgets, each polling fresh data on its own timer. React front-end, Node.js/Express API, containerized with docker-compose and deployed to a VPS with pm2.

Native Android client for Imgur written in Kotlin. Sign in with your Imgur account, then browse, search, filter, upload, and favorite photos — a complete consumption-and-publishing flow against the Imgur REST API, built with a classmate as a two-person team.