I build web applications and the tooling to test them — shipping products, then breaking them to make them safer.
Responsive, dynamic web applications built around your brand, with clean interfaces and solid functionality.
Next.js · React · TypeScript · Tailwind CSS · Framer Motion · Redux Toolkit · shadcn/ui
Finding vulnerabilities before attackers do, and building the protections that keep data and systems safe.
Burp Suite · Nmap · Metasploit · Wireshark · ffuf · SQLmap · Hydra · Python
Scalable server-side architectures, APIs and database schemas that keep complex applications reliable.
Node.js · Express · Prisma · MongoDB · PostgreSQL · Redis · Docker · REST APIs
Optimized code and assets for fast load times and a smooth, accessible experience on every device.
Core Web Vitals · Lighthouse · Caching · Code Splitting · Image Optimization · SSR / SSG
Notes on DevOps, full stack development and malware research.
A lab walkthrough of classic remote thread injection, the telemetry it leaves behind, and a Sigma rule that flags it.
Sep 20, 2026 · 8 min read
How inline (trampoline) hooks redirect a function while keeping the original reachable — the core trick behind game trainers, API monitors and EDR hooks.
Oct 8, 2026 · 7 min read
Dependency audit, static analysis and secret scanning on every pull request, without slowing the team down.
Aug 14, 2026 · 6 min read