I'm a full-stack developer with a security-first mindset. I design and ship production web applications across the stack — then stress-test my own work the way an attacker would.
Mobile payments app with a full auth system — scrypt password hashing, HMAC-signed session cookies, rate limiting — plus wallets, transfers, and an admin dashboard.
Cybersecurity firm site with a free browser-side security toolkit: password strength analyzer, k-anonymity breach check, hash generator, security headers analyzer, and more.