Experience
More case studies- 00
Responsible Disclosure
- Chained a reverse shell to root and exfiltrated every Harbor repo on MiniMax, silently patched


- 01
AI & Automation
- Cut repetitive ops toil with multi-agent LLM automation that decides instead of tired humans
- Wire facial recognition into live CCTV streams for real-time identity checks and access control
- Generate content at scale via AGC and AIGC pipelines that stay on-brand, useful, and non-spammy
- Automate backups, monitoring, and provisioning so the IT team stops firefighting daily tasks
- Automate invoicing, onboarding, and approval flows that once stalled slowly across the business
- Deliver scheduled PDF reports straight to inboxes, ending long hours of manual reporting work
- Drive legacy no-API screens with robotic process automation and reliable high-volume scraping
- Build conversational bots for WhatsApp, Discord, and Telegram to automate support and workflows
- Ground LLM chatbots in internal docs, rules, and tickets with guardrails that resist jailbreaks
- Bridge LLM assistants to internal pipelines like ticketing and payments with locked-down access
- Wire LLMs into social media handlers that auto-reply across Facebook, WhatsApp, X, and Discord
- Stop attendance fraud with face recognition plus GPS multi-location mapping across all branches
- Pair QR check-ins with facial recognition so attendance stays honest and buddy-punching stops
- Enforce a strict geofence radius on check-ins so remote staff clock in only on the real sites
AGC 路 AIGC 路 Chatbot 路 ITPA 路 LLM 路 RPA
- 02
Algorithmic Trading
- Design quant trading algorithms from scratch, turning a market thesis into rules a machine runs
- Build quant trading models with position sizing and risk rules that survive real market noise
- Build custom Pine Script strategies and indicators on TradingView across v4, v5, and v6 alike
- Turn rough chart ideas into backtested Pine Script algorithms that traders actually trust live
- Ship custom TradingView chart UI with tables, labels, and drawings that keep signals readable
- Wire TradingView alerts into third-party webhooks so signals reach bots and brokers with no lag
- Port aging Pine v4 scripts up to v5 and v6 so old strategies keep running on the current engine
Backtesting 路 Pine Script 路 Quant 路 Risk Sizing 路 TradingView 路 Webhooks
- 03
Backend & API Engineering
- Ship schema-validated REST APIs with versioning and rate limits that survive heavy real traffic
- Run on-premises S3-compatible object storage for firms where the public cloud is not an option
- Wire dependable third-party API integrations on tested Node.js and Laravel production backends
- Design and tune data across MySQL, PostgreSQL, and MongoDB for fast, predictable reads at scale
- Cut database load and latency with Redis caching layers that absorb heavy read-heavy traffic
- Build ETL pipelines that pull messy sources into clean warehouses ready for reporting at scale
- Shape data warehouses that turn scattered records into query-ready analytics for real reporting
- Drive semantic search with embeddings and vector stores to ground LLM answers in real knowledge
- Decouple services with Kafka and RabbitMQ message brokers so slow work never blocks requests
- Run reliable background jobs and queue workers on BullMQ with retries and scheduled processing
- Secure APIs with OAuth2, JWT, API keys, and RBAC enforcing strict multi-tenant data isolation
- Serve high-traffic e-commerce search that holds up when many thousands of customers hit at once
ETL 路 Kafka 路 MongoDB 路 PostgreSQL 路 Redis 路 Warehouse
- 04
Cloud & Infrastructure
- Provision and operate live production workloads on AWS and Google Cloud with no user downtime
- Front apps with Cloudflare edge protection, DNS, and global CDN delivery for genuine real speed
- Build resilient private-cloud clusters on Proxmox to cut runaway managed-cloud monthly spending
- Run enterprise VMware vSphere with live VM migration and zero service interruption for the user
- Back clusters with hyper-converged storage pools on Storage Spaces Direct for solid redundancy
- Move firms off fragile clouds with a smooth zero-downtime cutover onto private servers instead
- Guarantee high availability and zero data loss on every migration, no matter the project scale
AWS 路 Cloudflare 路 GCP 路 Proxmox 路 S2D 路 vSphere
- 05
DevOps & Deployment
- End works-on-my-machine pain by containerizing services and orchestrating them on Kubernetes
- Build reverse proxy, load balancing, and automated backup layers on hardened Nginx setups too
- Ship mobile apps end to end onto the Apple App Store and Google Play Store without any friction
- Prove real capacity with load testing and monitoring before launch, not after it falls over now
- Ship without fear using unit, integration, and e2e tests enforced by strict CI coverage gates
- Catch outages before users do with Prometheus and Grafana metrics, alerts, and uptime probes
- Run incident response with public status pages and on-call rotations to keep outages visible
- Shape software products with advice on AI tooling, pipeline speed, UX, and high-signal feedback
CI/CD 路 Docker 路 Grafana 路 Kubernetes 路 Prometheus 路 Testing
- 06
Enterprise Systems
- Replace fragile spreadsheets with HR information systems and full employee self-service portals
- Move paper approvals online with secure email tied to certified legal digital signatures too
- Unify logins with single sign-on spanning every internal application the staff touch every day
- Run ITSM on ServiceNow with ticketing, reporting, and follow-up so nothing slips through cracks
- Tie usage, invoicing, and collection into one integrated billing system that always reconciles
- Connect legacy SOAP and WSDL services to billing so old partners keep invoicing without gaps
- Track assets with QR-based management covering live inventory and attendance fully in real time
- Run point-of-sale with real-time inventory and sales reporting for faster daily retail choices
Billing 路 HRIS 路 ITSM 路 POS 路 QR Asset 路 SSO
- 07
Frontend & Mobile
- Build accessible, Core-Web-Vitals-passing apps so slow pages stop bleeding traffic and rankings
- Ship one React Native codebase to iOS and Android instead of funding two costly native rebuilds
- Deliver digital-product e-commerce and high-traffic news portals that stay fast under real load
- Launch corporate and content-driven marketing sites that hold up under genuine audience traffic
E-commerce 路 React 路 React Native 路 Vue
- 08
Growth & SEO
- Escape paid-ad dependency with keyword research and on-page work that truly converts real users
- Lift organic visibility and drive qualified buyer traffic instead of chasing hollow vanity data
- Build SEO audit platforms that score pages and benchmark against competitors to close real gaps
- Win search and AI answer boxes with structured data and technical SEO engineered to be found
Analytics 路 Competitor Audit 路 Keywords 路 SEO 路 Structured Data
- 09
Network Engineering
- Design secure, scalable network topology with careful subnetting for steadily growing branches
- Configure dynamic routing with OSPF, EIGRP, and RIP so remote offices stay connected reliably
- Run FortiGate SSL VPN bound to Active Directory so remote staff connect with domain credentials
- Deploy hotspot gateways and managed indoor and outdoor access points for reliable wide coverage
- Lock down traffic with DNS, proxy, and firewall configuration across many mixed environments
Access Points 路 FortiGate 路 OSPF 路 Proxy 路 Routing 路 VPN
- 10
Payment & Fintech
- Capture more sales with gateways spanning interactive QRIS and dynamic settlement flows daily
- Secure payments with QR-code plus facial-recognition verification for fast, low-fraud checkouts
- Integrate Stripe cards and subscriptions plus crypto payments with live per-transaction locks
- Run top-up, recharge, and digital-bill-payment platforms that real customers actually depend on
- Build a payment gateway from BCA portal scraping that confirms incoming transfers automatically
- Pipe BRI merchant portal data into automated payment confirmation and internal reconciliation
- Feed BNI portal transaction data into automated payment confirmation and settlement pipelines
- Turn PermataBank portal scraping into automated confirmation that removes manual bank checks
- Turn GoBiz merchant portal scraping into real-time payment confirmation for Gopay transactions
- Guard money with webhook pipelines using retries, idempotency, and audited safe reconciliation
Crypto 路 Facial Recognition 路 QRIS 路 Reconciliation 路 Stripe 路 Webhooks
- 11
Real-Time Systems
- End manual refreshing with real-time experiences powered by WebSocket and Socket.io channels
- Add in-app WebRTC communication and live media channels for calls and streaming that work well
- Deliver OTP through fast messaging gateways for reliable buyer verification at almost any scale
- Power sub-second monitoring dashboards and live trading views that never lag behind the markets
- Preprocess OHLC across crypto, forex, and stock feeds so downstream analytics stay accurate too
OTP 路 Real-Time 路 WebRTC 路 WebSocket
- 12
Security & Compliance
- Find holes first with thorough penetration testing and vulnerability assessment on web and APIs
- Black-box pentesting and red-team engagements under contract for state-owned enterprise clients
- Block real-world attacks by tuning Imperva and ModSecurity WAF rules and custom filter policies
- Audit SPF, DKIM, and DMARC to shut down spoofing after mail slipped out without any credentials
- Catch breaches early with threat detection and reporting on ManageEngine SIEM and the ELK Stack
- Trace intrusions with deep forensic backdoor and webshell root-cause analysis after each alert
- Pass audits with server hardening and defense-in-depth built on proven, real industry practices
- Run structured incident response with documented remedies that stakeholders can actually follow
- Disclose findings responsibly through the HackerOne and BSSN vulnerability disclosure programs
BSSN 路 Email Security 路 HackerOne 路 ModSecurity 路 Red Team 路 SIEM
- 13
System Administration
- Keep production stable with Linux administration on Ubuntu and Debian under demanding workloads
- Handle the full Oracle Solaris lifecycle from install through patching and secure hardening now
- Run and maintain mail, FTP, DNS, and database servers that internal teams rely on every day now
- Wire directory services and identity integration so internal teams get clean, secure access too
- Tie Microsoft Outlook mail servers to Active Directory so mailboxes map to every staff account
- Link ServiceNow to Active Directory so user access and tickets follow the directory of record
- Wire Trend Micro endpoint security into Active Directory so every domain device stays protected
- Deploy Trend Micro to user PCs fleet-wide so every workstation ships protected from first boot
- Manage server fleets through control panels like aaPanel and cPanel for repeatable operations
aaPanel 路 Active Directory 路 Linux 路 Outlook 路 Solaris 路 Trend Micro
Some projects stay unpublished under NDA, everything above is paraphrased and redacted.