We build sovereign cybersecurity and AI platforms for West African institutions.

Senintel is in production with first government tenants, and BugSecure Africa is live alongside it — sovereign digital intelligence and adjudicated bug bounty on one multi-tenant OAuth 2.1 stack, deployed in Senegal, 100% infrastructure-as-code. Kulinda Research compounds on the same foundation.

Talk to the founders

$4.2BWest African cybersecurity market. No local-first competitor.IDC, 2024

Dakar HQ

Paris satellite

Production proof

Already shipping. Already measured.

200k+lines of production code

16modules shipped

8.7/10ISO 25010 score

5integrated capabilities

OSINT · Leaks · Kali · IA · Collab

Founders

Engineering for the line where platforms break.

25+ years compounding inside regulated tech and industry. Now, in service of one platform. From Dakar.

Combined credentials

25+ years cumulativeMulti-tenant · FedRAMP / SOC 2 readySANS GIAC × 4 · OSCP · PNPTMulti-cloud · AWS + AzureEnterprise MCP / A2A architect100% IaC · Terraform / CDKTF

Platform Engineering & AI

Led by Bilal · Paris ↔ Dakar

Staff Platform Engineer turning AI POCs into fault-tolerant production systems for regulated industries.

Key achievements

Enterprise GenAI platforms
Multi-tenant platform infrastructure
Enterprise MCP / A2A architect

Stack

AWS + Azure (multi-cloud)MCP SDK + OAuth 2.1 / OBOTerraform · CDKTF · azapiECS Fargate + Container AppsOpenTelemetry + Azure MonitorTypeScript / Python / React 19

From

SanofiCriteoVeepeeMadBoxDassault SystèmesTradePlusAI

Contactadmin@21times2.com

Cybersecurity Architecture

Led by Mbaye · Paris ↔ Dakar

Cybersecurity architect from nuclear-grade environments — defensible architecture, offensive testing, AI security.

Key achievements

Defensible security architecture
Offensive testing & Red Team
AI security architecture

Stack

MITRE ATT&CKZero Trust ArchitectureIAM / PAMAzure / AWSANSSI / NIST / LPMPython + Bash

From

Orano-FramatomeThalesRATPSwiss LifeBNP ParibasAlmerysArjowigginsDigital Security

Contactcontact@kulinda-sec.com

Factory

One factory. Multiple verticals.

KLDS is a factory that ships sovereign verticals. Senintel and BugSecure Africa are live. Kulinda Research is next.

Shared foundation

The same TypeScript / OAuth 2.1 / multi-tenant stack that ships Senintel also ships BugSecure Africa and Kulinda Research. Auth, billing, observability, audit trails, and tenant isolation are written once.

Vertical, not horizontal

Each vertical wraps the foundation in a domain-specific surface — CVSS reward grids and mobile-money payouts for one, GenAI extraction templates for another. Generic SaaS does neither well.

Compounding, not parallel

The third vertical doesn't start from zero. It starts at the line where the platform ends and a new domain begins. That is the leverage. That is the bet.

Foundation capabilities

Multi-tenant isolation (FedRAMP-ready)OAuth 2.1 + OBOPer-tenant Aurora · ECS · S3Credit-based billing engineImmutable audit trailsWAF v2 + KMS encryption100% IaC · Terraform / CDKTF

Architecture

Vertical surfaces

What customers see. Each vertical owns its own domain.

Senintel

liveOSINT · Kali · Dehashed · multi-tenant

BugSecure Africa

liveAdjudication · signed certificates · binding appeal

Kulinda Research

pitchVertical AI · 4 pillars · first pitch in flight

Methodology

Repeatable production. Every vertical comes out of process analysis, not technical guesswork.

BPA · Business Process AnalysisDDDM · Data Driven Decision Making

Shared foundation

Written once. Shipped on every vertical.

AuthBillingAuditObservabilityTenant IsolationIaC

Infrastructure

Multi-cloud · per-tenant resources · 100% IaC

AWSAzureAuroraECS FargateContainer AppsS3CloudFront

Trust

Built by engineers from

SanofiCriteoOranoThalesRATPBNP ParibasSwiss Life

SANS GIAC × 4OSCP / PNPT / OSWP

Products

Three verticals. One foundation.

Senintel is operational. BugSecure Africa is live. Kulinda Research is in design.

Senintel

Operational

Sovereign digital intelligence for African institutions.

Five pillars — OSINT across 300+ social platforms, breach detection over 12 billion records (Dehashed), containerized Kali Linux terminal (27+ tools), AI investigation agent (Claude), encrypted collaboration chat. Multi-tenant with JWT RS256 and immutable audit. Dedicated SaaS or on-premise deployment in Senegal.

For CISOs, SOC teams and investigation units at banks, telcos and government agencies in West Africa.

In production. First government tenants active.

senintel.sn/dashboardLive ops · last 24h

17,607Intelligence

463Tool exec

14Tools

3Active inv

Breakdown

3,413emails4,509urls1,947usernames5,159subdomains

Top tool·dehashed-search · 74 exec

BugSecure Africa

Operational

Adjudicated bug bounty for African enterprises.

The bug bounty platform for Francophone Africa, and the only one where severity itself can be appealed. FCFA throughout, French first.

For CISOs of banks, telcos, fintechs and public agencies in West Africa.

Live. Public programmes are open, and the first one is our own.

Open BugSecure Programmes Leaderboard

bugsecure.senintel.sn/adjudication/certificatesLive adjudication · last 3

BSA-2026-041IDOR on /api/transactions/:id

7.5CVSSHIGHBSC-2026-0041450 000FCFA

BSA-2026-040Stored XSS in admin notes

6.1CVSSMEDIUMBSC-2026-0040180 000FCFA

BSA-2026-039Auth bypass via stale JWT

8.1CVSSHIGHBSC-2026-0039720 000FCFA

Certified·paid directly by the organisation

Kulinda Research

Pitch

Vertical AI for research institutions. Documents → actionable intelligence.

Four pillars — extraction, generation, editor, semantic search. Three adaptive extraction engines (text, complex tables, vision AI) at 95%+ precision. Template-driven document generation cuts authoring time by 60%. Multi-model (GPT-4, Claude). GDPR, audit trail, PII detection, RBAC × 5, sovereign deployment.

For research institutes, public-health agencies, and international funders operating across Africa — anchored on scientific publications, epidemic surveillance, and regulated documentation.

First pitch in flight. Pricing tiers defined: Pilot 15 K€/mo · Institut 35 K€/mo · Enterprise 60 K€/mo.

BugSecure Africa

The detail lives on BugSecure.

Two things set BugSecure apart, and both are documented in full on its own site.

Severity decides the money. So we made severity appealable.

A researcher argues severity, an assessor who is not the paying company sets it, and either side can appeal to a second assessor whose decision binds. The amount then follows the organisation's own published reward grid, on a signed certificate anyone can verify.

How it works, in full

We never hold the money.

The company pays the researcher directly, against our certificate. Nothing passes through us, which is why operating this way needs no BCEAO agrément. Licensed custody is planned, subject to authorisation, and none of it exists today.

Regulatory posture, in full

Geographic phases

Senegal first. Then West Africa. Then all of Africa.

Phase 12026

Live · operating

Senegal

Live. Our first market is the regulatory ground we know best.

Dakar HQNon-custodial by designSenintel liveBugSecure liveKulinda pitch

1City · Dakar HQ

3Verticals in motion

2Products live

Phase 22027

Target · opening

Côte d'Ivoire · Bénin · Mali

UEMOA, OHADA, shared mobile money rails — the platform extends without rewrites.

UEMOAOHADAMobile money destinationsFrench-only surface

Phase 32028+

Planning · declared

Anglophone Africa

Bigger markets, on the foundation we'll have proven.

NigeriaKenyaSouth AfricaEN/FR bilingual

For

Who buys.

Security researchers

Published programmes, severity set by an independent assessor, and the whole award paid to you directly. Submit in French, from anywhere on the continent.

African enterprises

Banks, telcos, fintechs, public agencies. Local compliance. Local pricing. Local support.

Strategic partners

Universities, CERTs, regulators. Co-built training programs and hosted CTF events.

Contact

Talk to the founders.

admin@senintel.sn

Dakar HQ14.69° N · 17.44° W

Paris satellite48.85° N · 2.35° E