Consultation
Clarify your idea, priorities, and the best path forward.
Hey, I'm Michael
Full-stack developer freelancer & Web Application Security.
I help ambitious teams and Startups design, secure and ship clear, resilient web applications that are built to last.
Tools of the trade
Built with a practical, security-first stack.
-
Python
-
Django
-
Railway
-
Kali Linux
-
Burp Suite
-
Metasploit
-
React
-
Tailwind CSS
-
Git
-
GitHub
-
Figma
-
Canva
-
Stitch
-
Frontend
-
Linux
-
Nmap
-
OpenVAS
Everything you need, from one team, on a fixed deadline
Web Designing
Create clear, thoughtful interfaces that people enjoy using.
Website Development
Build fast, responsive websites that support your business.
Web App & Progressive Web App
Develop reliable digital products for modern user journeys.
Redesigns & Upgrades
Improve an existing product’s experience, performance, and security.
Launches & Optimization
Ship with confidence, then keep improving what matters most.
Security & AppSec
Ship boldly.
Stay protected.
Practical security work that fits your product, your team, and the risks that matter most.
Application Security Reviews
Find weaknesses early and turn findings into clear fixes.
Penetration Testing
Test real attack paths across your application and APIs.
Secure Development Guidance
Build stronger engineering habits without slowing delivery.
Security Hardening
Reduce exposure across deployments, configurations, and code.
How I work
Build secure
software that
holds up.
I look at every project from two perspectives: how it should work and how it could be attacked.
Credentials
Certified across
industry leaders.
Google Cybersecurity Professional
Google Career Certificates
GitHub Certified
GitHub
Cisco Certified
Cisco Networking Academy
Anthropic Certified
Anthropic
Microsoft Certified
Microsoft
Journey
How I got
here.
Present
Full-Stack Engineer & AppSec Freelancer
Building secure web applications for ambitious teams and startups. Combining development and security into a single, focused delivery workflow.
Certifications
Professional Development
Earned certifications from Google (Cybersecurity), GitHub, Cisco, Anthropic, and Microsoft, building a foundation across security, networking, AI, and cloud platforms.
Foundation
Self-taught & Curious
Built my foundation through hands-on projects, continuous learning, and a deep interest in writing secure, reliable software with Python and JavaScript.
Selected work
Projects built to
solve real problems.
A moving collection of systems, security research, and products built with thoughtful engineering and a strong security foundation.
01
Application Security
PortSwigger Write-ups
A structured collection of hands-on web security lab writeups covering exploitation, remediation, and attack methodology.
View repository
02
Education Platform
PaperlessEdu
A secure Django and PWA school management system for digital, audited attendance, report cards, and fee receipts.
View repository
03
Security Platform
SecureVault
A role-based encrypted file portal with AES-256 protection and exact department and access control matching.
View repository
04
Digital Commerce
ShopNow
An end-to-end commerce platform with atomic ordering, staff operations, analytics, and defense-in-depth security.
View repository
Hover to pause · Click the GitHub logo to explore
Let's connect
Have something
worth building?
Tell me what you are working on, what is getting in the way, or where you want to go next. I would love to hear about it.
Find me here
Choose your
best route.
Common questions
Clear answers
before we build.
A few things people usually want to know before starting a development or application security project.
FAQ
The practical stuff.
What kind of projects do you work on?
I work on full-stack websites, web applications, progressive web apps, redesigns, and application security projects for teams that want dependable software.
Can you help with both development and security?
Yes. I can build the product, review an existing application, test attack paths, or combine development and security into one delivery process.
What does an application security review include?
The scope can cover authentication, authorization, input handling, APIs, file uploads, business logic, configuration, and deployment risks. You receive clear findings with practical remediation steps.
How long does a project usually take?
It depends on the scope and starting point. A focused review may take a few days, while a new product is planned in milestones so progress stays visible from the beginning.
What happens after I send an inquiry?
We start with a short conversation about your goals, users, timeline, and risks. I then recommend a focused next step with a clear scope and delivery path.
Do you work with existing teams and codebases?
Absolutely. I can join an existing workflow, improve a specific part of the product, or provide a security-focused second set of eyes without disrupting the team.
Still have a question?