ApiNetwork

Infrastructure. Security. Development.

Since 2003 we design and operate the digital infrastructures of companies. Network architecture, cloud hosting, custom development — we master every layer of the stack. Our philosophy: open source, automation, zero compromise on security. Based in Paris, we support SMEs and large accounts in their digital transformation.

23+

years of experience

50+

managed services

100+

sites hosted

99.9%

uptime guaranteed

Discover our services

Our Services

From the initial audit to ongoing operations, we cover the entire lifecycle of IT infrastructure. Every engagement is built on proven open source technologies and a rigorous methodology.

Audit & Compliance

Complete network mapping, hardware and software inventory, vulnerability analysis. Active Directory and GPO compliance, audit of network equipment and workstations. We deliver a costed action plan with prioritised recommendations and full documentation of your infrastructure — topology, flows, identified risks.

NmapAnsibleActive DirectoryGPOOpenWrtUniFiSynology

Cloud & Hosting

High-availability infrastructure on Kubernetes (K3s) clusters with load balancing, auto-scaling and automatic failover. We operate our own bare-metal servers in a Paris datacenter as well as hybrid OVH/Hetzner architectures. Every deployment is reproducible through Infrastructure as Code — Ansible, Helm, ArgoCD. 24/7 monitoring with Prometheus/Grafana alerting.

K3sDockerArgoCDAnsiblePrometheus

Custom Development

Web applications and APIs built to last: clean architecture, automated tests, CI/CD pipeline. From a Python/Django backend to a Svelte/Astro frontend, including Telegram bots and IoT integrations, we build exactly what your business needs. No throwaway frameworks, no technical debt — code your team can maintain.

PythonDjangoAstroSvelteFastAPI

Managed Services & Network

Full management of your IT estate: workstations, servers, network equipment. We deploy and maintain your routers, switches, WiFi access points (UniFi, OpenWrt) and site-to-site VPN interconnections. Active Directory, GPO, DHCP, DNS — every building block is documented, monitored and backed up. On-site within 4h across the Paris region.

UniFiOpenWrtBGPWireGuardActive Directory

Our Approach

Four fundamental pillars guide every engagement, from the initial audit to ongoing operations.

Open Source First

We systematically favour open source solutions — Linux, Kubernetes, WireGuard, PostgreSQL. No vendor lock-in, no opaque licences. You keep full control of your infrastructure and can audit every line of code that runs it.

Total Automation

Every repetitive operation is automated: deployments, backups, certificate rotation, security updates. Infrastructure as Code, CI/CD pipelines, self-healing monitoring. Humans step in to design and decide, not to execute.

Security by Design

Security is not a layer bolted on afterwards — it is built in from the design stage. Network segmentation, least-privilege principle, systematic encryption, continuous auditing. Every component is hardened to CIS benchmarks and ANSSI recommendations.

Living Documentation

Every infrastructure we deploy is exhaustively documented: network topologies, recovery procedures, operational runbooks. The documentation evolves with the system — it is versioned, tested and always up to date. Your team can take over at any time.

How it works

A proven four-step process, from first contact to day-to-day operations.

01

Audit & Diagnosis

Complete mapping of your existing setup: infrastructure, applications, network flows, attack surface. Identification of risks and quick wins. Delivery of a detailed report with prioritised recommendations.

02

Architecture & Planning

Design of the target architecture with well-argued technology choices. Detailed migration plan, cost estimate, dependency identification. Joint sign-off before any deployment.

03

Deployment & Migration

Progressive rollout with testing at every step. Data migration with integrity validation. Production cutover with automatic rollback on anomaly. Zero downtime thanks to blue-green and canary strategies.

04

Operations & Evolution

24/7 monitoring, automated backups, security updates. Monthly performance and security report. Continuous evolution based on metrics and your business needs. Your infrastructure grows with you.

0 Years in business
99.9% Uptime
<4h Response time

Technical Stack

The technologies, vendors and manufacturers we master and deploy every day — selected for their reliability, performance and durability.

Virtualisation & Cloud

XCP-ngProxmoxVMwareKVMHyper-VOVHcloud

Containers & Orchestration

KubernetesK3sDockerHelmArgoCDLonghorn

Network

CiscoMikroTikUbiquiti UniFiArubaFortinetpfSense

Storage & Backup

SynologyQNAPTrueNASCephVeeamVelero

Systems & Directory

DebianUbuntuWindows ServerActive DirectorySamba ADPowerShell

Mail & Collaboration

PostfixDovecotRspamdRoundcubeExchangeNextcloud

Automation & CI/CD

AnsibleTerraformGitea ActionsGitLab CIWireGuardBorg

Web & Hosting

TraefikNginxApacheLet's EncryptDrupalWordPress

Development

PythonDjangoFastAPIRustSvelteKitNode.js

Databases

PostgreSQLMariaDBMySQLRedisMongoDBSQLite

Monitoring & Security

PrometheusGrafanaLokiCrowdSecWazuhUptime Kuma

Our Apps

Internal tools that became products — built to solve real problems, forged in production, available to our clients.

ApiWifi

Administration console for OpenWrt WiFi access points. Real-time dashboard, custom firmware, automatic VLAN/roaming, per-client and per-device metrics.

ApiGuard

Network security console for Synology DSM 7 — optimised WireGuard fork, tunnel management, connection monitoring, real-time alerting. Native DSM interface with deep system integration.

DSM 7WireGuardPython

API Code Bot

Telegram bot creation platform powered by Claude Code — conversational interface, automated code generation, one-click deployment. Multi-user architecture with per-workspace isolation.

TelegramClaudePython

BtP Player

Native digital signage player in Rust+Makepad — replaces Xibo with hardware GPU rendering, WebSocket relay server, multi-screen synchronised playlists. Sub-10ms latency for emergency scenarios.

RustMakepadWebSocket

ApiMonitor

Custom monitoring stack — high-performance ring buffer, real-time scrolling marquees, multi-source aggregation (Prometheus, SNMP, API). Built for NOCs with permanent wall display and intelligent alerting.

PrometheusGrafanaPython

Arcade

A collection of retro games playable straight in your browser. Revisited arcade classics — because you can run serious infrastructure and still have fun.

Play

Let's talk about your project

Tell us about your need — security audit, cloud migration, custom development or full managed services. We get back to you within 24h with a first analysis.

Request an audit