I build and integrate secure, production-ready backend APIs and full-stack web systems.

Full-Stack, Backend API & Integration Developer

Freelance · Remote · International clients · 2023 - Present

• Built and deployed production-ready web applications using React, TypeScript, FastAPI, Django, Laravel, PostgreSQL, MySQL, Docker, Nginx, and Linux servers.
• Deployed Vox Estate Agent, a FastAPI + React application, on a Linux VPS with Nginx, systemd process management, HTTPS, and production server configuration.
• Delivered AI Product Image Similarity Search for a German client through the AutoHubPlatform GitHub organization, using AI image embeddings and containerized deployment practices.
• Built and deployed SECHIVE, a multi-page React/TypeScript website for a physical security firm, under the SECHIVEE GitHub organization on GitHub Pages.
• Worked with OpenAI APIs, WebSockets, multi-tenant SaaS patterns, CI/CD through GitHub Actions, and Linux server administration.

Security Researcher

Independent · Web & API Security · 2024 - Present

• Conduct scoped web and API bug bounty testing with a focus on recon, attack-surface mapping, controlled validation, and responsible disclosure.
• Test for broken access control, authorization logic flaws, insecure object references, privilege boundary issues, and business logic weaknesses.
• Produce clear, reproducible reports with evidence quality focused on triage and remediation.
• Build practical automation to reduce false positives and improve testing efficiency.
• Develop public proof through redacted case studies and open-source security tooling.

FolioVista Books

Founder · Digital Publishing · Live Production Platform

FolioVista Books demonstrates product ownership, technical publishing, public deployment, production operations, and direct customer communication.

Open live platform

Vox Estate Agent

Full-Stack / API

FastAPI, React, AI integration, chat, text-to-speech, and property management.

View GitHub repository

Miando — MT5 Forex Data Integration

Backend / Integration

Windows MT5/MQL5 integration with Dockerized Python and PostgreSQL on Linux.

View GitHub repository

Users & Vehicles Forms API

Backend / API

Django 5, Django REST Framework, token authentication, middleware, structured logging, and tests.

View GitHub repository

Django on AWS EC2

Backend / Cloud

Django data application and AWS EC2 deployment documentation.

View GitHub repository

Django Notifications

Backend / Events

REST APIs, WebSockets, Channels, Celery, Redis, email notifications, and tests.

View GitHub repository

FastAPI Bookstore

Backend / API

RESTful CRUD and filtering API built with FastAPI.

View GitHub repository

Laravel E-commerce Admin

Backend / Admin

Laravel, Jetstream authentication, MySQL, Docker, Blade, and catalog administration.

View GitHub repository

Broken Access Control Case Study

API Security

Disclosure-safe IDOR/BOLA methodology, evidence handling, and remediation.

View GitHub repository

Linux VPS Security Cases

Security Operations

Hardening, incident response, network troubleshooting, and Bash automation.

View GitHub repository

SECHIVE

Frontend

React, TypeScript, Vite, and a multi-page physical-security website.

View GitHub repository

Reactify

Frontend

React component patterns, Context API, hooks, feature flags, toasts, and a portal modal.

View GitHub repository

Case Study 1: Private Program Access-Control Finding

Authorized testing in a private bug bounty workflow with object-level authorization validation.

• Focus: authorization boundary checks on account-owned objects.
• Method: controlled account testing with reproducible evidence and strict redaction.
• Outcome: report submitted with clear reproduction and remediation guidance; triage status duplicate.
• Signal: demonstrates discipline in reporting and technical validation quality.

Case Study 2: Redacted Recon and Fuzz Pipeline

Recon plus fuzz automation flow for authorized target assessment and endpoint behavior analysis.

• Focus: exposure mapping, endpoint probing, and fuzz-based edge case validation.
• Authorization focus: object-level access checks and workflow state validation in controlled testing scenarios.
• Method: DNS and CT recon, orchestrated fuzz runs, and result triage.
• Tooling: recon.py, recon_fuzz_orchestrator.py, selenium_socks_simple_fuzz.py.
• Outcome: prioritized findings and reusable evidence bundles for remediation.