Freelance developer. I build new products, clean up the messy ones, and (my specialty) secure the code most teams never audit. Fourteen years of shipping across web, mobile, and hardware.
Hardcoded credentials. Passwords in plaintext. Database queries glued together with string concatenation. Auth that trusts whatever the browser sends. This stuff hides inside working software. The UI looks fine, the demo passes, and the hole just sits there.
That's the part I love most: reading a codebase closely, finding what's quietly wrong, and fixing it before it becomes your problem. Whoever wrote it (you, a contractor, or an AI), I don't judge. I clean it up.
Every line above I have found in production this year.
Pick one. Pick all three.
Most clients arrive needing all three.
Need it built? I'll build it. Properly.
Full-stack development across web, mobile, and embedded. I've shipped iOS apps, self-driving stacks, RAG systems, and games. Give me the goal and the constraints; I'll handle the rest and keep you in the loop the whole way.
Working code and good code aren't the same thing.
Inherited a mess? I'll make it something you can build on. Decompose the 800-line file, delete the dead branches, redraw the boundaries that got lost, add the tests and the honest README. Your repo stops being a liability and starts being an asset.
My specialty: the security holes most reviews miss.
OWASP-mapped review, secrets sweep, dependency triage, auth hardening, SQL/NoSQL and prompt-injection surface, supply-chain checks. Then I help you fix everything I find. Sixteen years of watching offensive security up close.
Every project starts with a fixed-scope quote and a plan. You know exactly what you're getting before you commit.
Start a project →I prefer to be judged on the work. These are the markers along the way.
An autonomous-agent coding environment for iOS: code generation, real-time AI collaboration, and a streamlined editor built for mobile-first developers.
Software-level app restrictions on the iOS Screen Time API with zone-based geofencing, a centralized admin portal, and per-student exceptions.
Open-source driver-assistance stack for Comma 2 hardware. ARNE, vision-based stop detection, and Mapbox navigation built in.
Automatic tag generation, AI-generated visuals, and personalized dream analysis that surfaces recurring patterns in the subconscious.
Lay out furniture on a true-to-scale one-foot grid. Drag, snap, and measure an apartment before you move in.
Turns an affordable USB dongle into a full radio lab: 83 built-in apps spanning aircraft tracking, weather satellites, and protocol decoding.
Personalized meditation sessions with local Ollama inference, custom F5-TTS speech, and PaulStretch-processed ambient audio.
A 2D arctic survival RPG: build, fish, and hunt to outlast the long winter, solo or co-op. Browser-based and installable.
Not a list of buzzwords. Every name here is a concept I've spent real time learning. That's all.
I've attended DEF CON Las Vegas every year since 2010: sixteen years of watching offensive security evolve up close, always picking up the next concept, the next technique, the next way of thinking.
