I build platforms —
then I try to break in.
Full-stack developer and founder at Nuvéxis, shipping production SaaS for the hospitality industry. Independent security researcher on HackerOne in the hours between.
DESCEND THROUGH THE WORKProducts, in production
Two SaaS platforms I designed and built end-to-end — not demos, real businesses running on them today. Source is private; each link below is a full case study with real screenshots and the engineering decisions behind them.
NUVÉXIS Hotel OS
A multi-tenant hotel property management system — reservations, folios, housekeeping, and payments, plus a super-admin control plane for every hotel account on the platform.
Read the case studyNUVÉXIS Restaurant OS
A cloud-connected restaurant operating system — POS, kitchen display, waiter app, and a central control tower, sold to full-service restaurants and multi-branch groups.
Read the case studyTools, open for reading
Small, dependency-conscious libraries and CLIs, written to be read as much as run. Each one tested for real — including the bugs the tests actually caught.
ratelimit-ts
Dependency-free rate limiting — token bucket and sliding-window-counter algorithms behind one pluggable storage interface.
Pythonlitetask
A durable, SQLite-backed task queue with zero external dependencies — no Redis, no broker, safe under concurrent workers.
Pythonreconlite
Passive subdomain discovery and concurrent live-host probing, collapsed into one command.
Pythonapiscan
Reads an OpenAPI/Swagger spec, runs live read-only security checks against every endpoint it declares.
Security research
Outside of building, I hunt for vulnerabilities through HackerOne-hosted programs — web application and API security, within each program's defined scope. Fewer, higher-quality reports over volume; nothing goes in a write-up until the impact is verified and reproducible.
- 01Recon — map the target, confirm what's in scope
- 02Manual + tool-assisted testing of the attack surface
- 03Verify real, reproducible impact — reject false positives
- 04Clear write-up: proof of concept, steps, severity
@findyourway
Independent researcher profile — reports, scope, and disclosure history.
View profileAbout & contact
Full-stack developer and founder, building scalable SaaS products and modern web applications.
Based in London. I work primarily in TypeScript, React, Next.js, Node.js, and PostgreSQL — and reach for Python when the job is a script or a security tool rather than a product. Everything above is real, shipped work: the products are live, the tools are tested, the HackerOne profile is mine.