Software
Web applications, SaaS products and internal tools — from database schema to the interface someone actually clicks.
- Web apps
- SaaS
- Internal tools
- APIs
Currently building Murmell
Omar Farouk Lasfar Engineer. Builder. Founder.
Engineering student in Networks & Telecommunications at UTT. Founder and lead developer at BrainSec, a software and cybersecurity studio I run with my cousin. I build things that end up in front of real users.
Murmell
Build software in the same room.
01/ 06
The problem
Developers now run several AI coding agents against the same repository. They collide — two agents rewrite the same file, work gets duplicated, and nobody can see what any of them is doing.
0agents
0repository
0conflicts
- File reservationAn agent claims a file before it edits. The others wait instead of overwriting.
- Parallel cloud executionEvery project runs on its own isolated machines, not on your laptop.
- Shared canvasThe whole team sees the same terminals, cursors and live preview in real time.
- Bring your own keysYou connect your own agent subscriptions. No token resale.
The goal is for AI-native development to feel less like supervising a crowd and more like having an engineering team that talks to itself. Built with BrainSec — in active development.
Five layers of the same problem.
Artificial intelligence
AI-assisted workflows, agent tooling and automation built to remove real hours of work — not to add a chatbot.
- Agent tooling
- Automation
- AI integration
Cloud
Cloud fundamentals and architecture on AWS, deployment pipelines, and getting things to run somewhere other than localhost.
- AWS
- Architecture
- Deployment
Cybersecurity
Security audits, hardening, network and infrastructure security. The part of the work you only notice when it was skipped.
- Audits
- Hardening
- Network security
Infrastructure
Linux, TCP/IP, network architecture and systems programming — threads, synchronisation, the layer under the product.
- Linux
- TCP/IP
- Systems programming
The studio, and what
came out of it.
Murmell is covered above. These are the other two things I spend most of my time on.
02Active
BrainSec
brainsec.frFounder & Lead Developer · Paris & Troyes
The software and cybersecurity studio I co-founded with my cousin, Moss'Ab Mirande-Ney. We build custom software, web applications, SaaS, automation and AI integrations for clients who have a real problem to solve — and we run security and database audits on top.
I lead the technical side: audit, pentest and hardening work, and assembling the engineering team for each project. Almost everything on this page, I built with him.
- Custom software
- Web & SaaS
- AI integration
- Security audits
- Database audits
- Technical consulting
03
Live
Hanta Tracker
hanta-tracker.appCo-built with BrainSec · security, infrastructure & compliance
A real-time public health platform built around one question: during an outbreak, where does a normal person go for information they can trust? It aggregates official bulletins — WHO, ECDC, CDC, RIVM, Santé Publique France, UKHSA, RKI, PHAC — into a single readable picture.
Interactive map, reported cases, an epidemiological timeline and every source cited. I took it from proof of concept to production on the security, infrastructure and compliance side.
- Real-time data
- Interactive maps
- Source verification
- Infrastructure
- Public information
Where the fundamentals
came from.
Systems, network and language work built during my computer science degree. Not products — but the low-level parts are still the reason the rest holds together.
01Network Simulation
Frame transmission between devices, Ethernet handling, MAC address tables and switch logic — written from scratch.
C · Networking
022048 Multiplayer
Multiplayer 2048 in C with POSIX threads, mutexes and inter-process synchronisation.
C · POSIX threads
03Fire Station Management
Desktop application managing crews, missions and interventions against a SQL backend.
C# · .NET · SQL
04Yams — Full Stack
Browser front end talking to a C# REST API over JSON, with the full scoring engine server-side.
C# · JS · REST
05Battleship
Desktop Battleship with a strict MVC separation and a Swing interface.
Java · Swing · MVC
06Mobilization
Educational serious game simulating a year of student life, built as a typed React app.
TypeScript · React
07Dragon Quest
Turn-based combat game used to work through inheritance, polymorphism and design patterns.
Java · OOP
08AuditMaster
Serious game on university audit management — three months of design and development.
Godot 4 · GDScript
09Library Android App
Native Android client consuming an external REST API, with state handling and offline-tolerant UI.
Java · Android
How I got here.
Now2026 → 2029
Engineering Degree — Networks & Telecommunications
Université de Technologie de Troyes (UTT) · expected 2029
Cybersecurity, cloud, network architecture, infrastructure and software engineering. The degree I chose because it sits exactly where the things I build actually break.
NowOngoing
Founder & Lead Developer — BrainSec
BrainSec · Paris & Troyes
Co-founded with my cousin. Custom software, web and SaaS, AI integration, cybersecurity and database audits. I run the technical side.
NowOngoing
Building Murmell
murmell.com · with BrainSec
A cloud workspace where multiple AI coding agents work the same repository in parallel, coordinating file access instead of overwriting each other.
May 2026
Hanta Tracker goes live
hanta-tracker.app
Real-time outbreak information platform. Picked up by Pokaa, L'Est Éclair and Canal 32 within weeks of launch.
Apr — Jun 2026
Software & Database Development Intern
ZenConseil · Strasbourg · 14 April → 30 June 2026 · completed
Database development, administration and maintenance inside a professional technical team, contributing to real projects on a real codebase.
2024 — 2026
Computer Science background
BUT Informatique · IUT Robert Schuman — Université de Strasbourg
Java, C, C#, web, SQL, networks and Android. Two years of writing things at a low enough level that nothing about the higher levels stayed mysterious.
2025
Certifications
Continuous learning
- Introduction to Cloud ComputingAmazon Web Services
- Machine LearningGoogle
- Python ProgrammingUdemy · 31.5 h
- Cybersecurity AwarenessHP LIFE
What I actually
work with.
Rated honestly. Core means I've shipped real work with it. Working means I'm productive but still learning the edges.
Languages
- C
- Java
- C# / .NET
- SQL
- JavaScript
- TypeScript
- Python
- PHP
Core Working
Web
Tools
Systems & networks
Cloud
Security
Languages spoken
- ArabicNative · C2
- FrenchFluent · C1
- EnglishFluent · B2
- SpanishBasic · A2
People noticed.
Coverage of Hanta Tracker, in the French regional press.
Pokaa18.05.2026
« Hantavirus : à 19 ans, un Strasbourgeois lance un site pour suivre l'évolution du virus »
Read the article
L'Est Éclair13.05.2026
« Un site d'un étudiant aubois répertorie les cas d'hantavirus »
Read the article
Canal 3204.06.2026
« Hanta-tracker.app, l'application signée par un étudiant de l'UTT »
Watch the report
I learn by
building.
I study Networks & Telecommunications engineering at UTT, in Troyes. The studying isn't really the point — what matters is what gets built with it.
I started at the bottom of the stack: C, threads, Ethernet frames, MAC tables, the parts of a system nobody sees until they fail. Then databases and full-stack work, then an internship maintaining production databases at ZenConseil in Strasbourg. Somewhere in there my cousin Moss'Ab and I stopped waiting for permission and started BrainSec — a studio where we build software, automation and security work for people who actually need it.
Nearly everything since has been built with him. Hanta Tracker turned an unfolding outbreak into something a non-specialist could read, and the regional press picked it up. Murmell is the one I'm most invested in right now — a cloud workspace where several AI coding agents can work the same repository in parallel without destroying each other's work.
Cybersecurity, cloud, infrastructure, AI and distributed systems interest me for the same reason: they're the constraints that decide whether a product survives contact with real users. Everything else is a detail you can look up.
And I'm just getting started.
Let's build
something.
A product, a security problem, an infrastructure mess, or something that doesn't exist yet — if it's serious, I want to hear about it.