Services
Where development meets security: what I can build and review for you, with security built in from the first line of code.
What I offer
Five ways I can help
Each service comes from work I have actually done: in my current roles, as a freelancer and in the projects on this site.
Full-stack web applications
Who it's for
Teams and businesses that need a web app, PWA or admin dashboard taken from concept to deployment.
What's delivered
- React, Next.js & TypeScript interfaces
- Node.js or Spring APIs and REST integrations
- Authentication, roles and admin dashboards
- Docker-based, production-ready deployments
Related work
AI/LLM integrations & automation
Who it's for
Products that want an AI assistant, LLM-powered features or automated workflows.
What's delivered
- LLM integrations, including multi-provider setups and tool calling
- AI assistants embedded in existing products
- Workflow and process automation
- Data pipelines with automated quality checks
Related work
Security review & hardening
Who it's for
Teams that want a security-minded look at their code or web app before (or after) it ships.
What's delivered
- Security-minded code review
- Authentication, CSP, rate-limiting and secrets checks
- System hardening & secure configuration
- A prioritised list of findings and fixes
Related work
Read: Securing Next.js ApplicationsSOC & log-analysis setup
Who it's for
Small teams starting to monitor their systems, or training environments for security operations.
What's delivered
- Log analysis and SIEM-style event views
- Alert triage and incident-response workflows
- Network traffic analysis
- Containerised, reproducible lab environments
Related work
PBX/SIP–CRM integrations
Who it's for
Contact centres that need their phone system connected to a CRM or other platforms.
What's delivered
- Integration of PBX/SIP systems with CRM and external platforms
- REST and SOAP API integrations
- Internal contact-centre management tools
Related work
From my current role at MEC CALL
How I work
A four-step process
- 01
Discover
We talk through the problem, the users and the constraints, so the scope is clear before any code is written.
- 02
Threat-model & plan
I map what could go wrong and how it would be attacked, then plan the architecture with those risks in mind.
- 03
Build
Iterative delivery with regular check-ins, input validation and least privilege designed in, not bolted on.
- 04
Harden & hand over
A final security pass, deployment, and documentation so your team can run and extend what was built.
Pricing
Pricing on request
Every project is scoped differently, so I don't publish fixed prices. Tell me what you need and I'll reply with a proposal.
Have a project in mind?
Describe what you want to build or secure. I usually respond within 48 hours.