I architect systemsthat don't break.

incident — A staging box kept getting probed with SQLi and path-traversal payloads. Userland proxies added 30ms. Native Win32 at the packet level was the only path under budget.

C (ANSI/Win32) · Raw Sockets

A multi-threaded HTTP proxy written in pure C — no frameworks, no dependencies. Inspects every packet for SQL injection and path traversal patterns, then auto-bans offending IPs. Built on raw Win32 threads because the problem didn't need abstractions, it needed speed.

incident — Paste sites and combo lists leak credentials daily. Enterprise SOCs monitor for it; individuals get notified after the fraud hits.

Python · Streamlit · PostgreSQL · Stripe

A monetized personal SOC that monitors digital identities for credential leaks across dark web dumps and public repos. Integrated Stripe for billing from day one — this isn't a demo, it's a product with paying users and audit-grade PDF reporting.

incident — Every tutorial on Pthreads uses counters and toy queues. Real resource contention — thread pools, condition variables, lock ordering — only shows up when you build it.

C++20 · CMake · Pthreads

Multi-threaded data center simulation built on raw Pthreads. Mutex-locked resource pools, condition variable signaling, and a custom thread pool. The kind of systems programming that doesn't show up in tutorials but runs under every cloud provider.

incident — Encrypted blobs announce themselves on disk and in transit. Sometimes the threat model requires that the data isn't visibly there at all.

Python · Flask · AES-256 · LSB Steganography

Hides AES-256 encrypted payloads inside ordinary images using LSB steganography. The output passes visual inspection and steganalysis tools. Built for scenarios where the existence of the data itself is sensitive — not just its contents.

incident — Algo-Bot kept missing SEBI circuit-breaker timing and retail APIs throttled mid-session. A production rewrite was the only way to trade inside compliance windows.

Electron · React 19 · FastAPI · Angel One API

Full-stack trading platform for NSE markets with a desktop-native Electron frontend and FastAPI backend. SEBI-compliant order execution, real-time P&L tracking, and a kill switch that actually works. This is the system that superseded Algo-Bot — same problem, production-grade solution.

incident — Every finance app I audited shipped plaintext SQLite under the hood, cloud-first by default. There's no personal-finance tool that trusts you to own your own data.

Flutter/Dart · SQLCipher · Riverpod · CRDT Sync

A personal finance tracker where every byte is encrypted at rest with SQLCipher. CRDT-based sync means your data stays consistent across devices without a central server seeing it. Built in Flutter because finance apps should run everywhere.

incident — Manual entries kept missing the fills I was backtesting. Automating it surfaced every hole in the plan — this is where I learned what retail APIs can't do.

Python · Upstox API · Pandas

The first iteration of my trading engine — event-driven execution for NSE with automated risk-management kill switches. Taught me what retail APIs can and can't do, and directly led to the NSE Trading Engine rewrite with proper infrastructure.

incident — In OR telemetry, deterioration is caught by eye — minutes after it starts. Monitors beep on threshold, not trend. That window is where patients are lost.

Python · Redis Streams · Docker · Isolation Forest

A fault-tolerant pipeline that processes heart rate and SpO2 data in real time, flagging clinical deterioration before a human would notice. Redis Streams for exactly-once delivery, Isolation Forest for anomaly detection. Zero data loss by design.

incident — Every team I've worked with learned about a stale dependency when a CVE landed on a Friday. Dependabot spams; nobody triages. Staleness needs to be visible before it's urgent.

Next.js · FastAPI · PostgreSQL · Redis · arq

A full-stack tool that scans repos on a schedule, scores dependency freshness, and flags staleness before it becomes a security incident. Background workers via arq, PostgreSQL for persistence, Redis for caching. Built so engineering leads can see the health of every repo at a glance.

incident — Every large-file transfer tool still round-trips through somebody else's server. You pay in upload time and in who-sees-your-file. Browsers ship WebRTC — we shouldn't need a middleman.

TypeScript · WebRTC · Node.js

Direct browser-to-browser file transfer using WebRTC data channels. No upload, no server in the middle, no file size limits. The connection is peer-to-peer — your file goes from your machine to theirs, and nobody else sees it.