I build systems that run businesses and tools that test their security.

I am a fullstack developer and security researcher based in Jakarta, Indonesia. As a solo developer for a travel and logistics business group, I am building a monorepo-based digital ecosystem that connects administrative, finance, operations, airport handling, and logistics workflows while moving thousands of pilgrim records from spreadsheets into centralized PostgreSQL systems.

I also lead technical delivery at Solivate Studio and work independently across SaaS, point-of-sale, e-commerce, corporate websites, and mobile applications. My approach centers on clean code, practical architecture, AI-assisted development, and security decisions made from the start.

In cybersecurity, I develop reconnaissance and vulnerability-scanning automation, including BLH Hunter. Responsible disclosures made with these tools have earned recognition from NASA and public-sector CSIRTs, ministries, universities, media organizations, and regional governments in Indonesia.

Experience

Production ownership, from architecture to deployment.

  1. Fullstack Developer

    Travel & Logistics Business Group

    • Sole developer of a monorepo ecosystem connecting admin, finance, operations, airport handling, and logistics dashboards.
    • Migrating spreadsheet-based operations into centralized PostgreSQL systems serving thousands of Umrah pilgrim records.
    • Owns VPS infrastructure, deployment, production maintenance, and incident resolution.

  2. Tech Lead

    Solivate Studio

    • Leads architecture, stack decisions, code review, and technical delivery for client projects across travel, logistics, education, and food businesses.
    • Coordinates parallel Next.js and Laravel projects with a small delivery team.

  3. AI Engineer

    PT Lintas Teknologi Indonesia · Freelance, on-site

    • Worked directly with the client team on-site to produce a generative-AI presentation video for Indosat's annual kickoff within 48 hours.

  4. Independent Freelance Developer

    Self-employed

    • Delivered 20+ projects spanning multi-tenant SaaS, POS systems, e-commerce, corporate sites, and mobile applications.
    • Also provides graphic design, photography, videography, and video editing for client campaigns.
Security research

Responsible disclosure backed by purpose-built automation.

I built BLH Hunter to automate reconnaissance and vulnerability discovery. Valid reports have led to formal recognition from NASA and organizations across Indonesia.

View certificates and awards
  • NASA Vulnerability Disclosure Program
  • ESDM-CSIRT
  • Kementerian PU-CSIRT
  • BMKG-CSIRT
  • Diskominfo Kota Bogor
  • Universitas Brawijaya
  • CilacapKab-CSIRT
  • PurbalinggaKab-CSIRT
  • Detikcom
  • Jakarta Smart City
  • Kabupaten Sukoharjo
  • Kabupaten Bantul
Selected systems

Software shaped around real operational constraints.

01

ShellMate

Local-first multi-SSH and SFTP desktop client built with Tauri v2, Rust, and React.

02

Multi-School

Multi-tenant school management SaaS built with Laravel, Vue, and Inertia.

03

BLH Hunter

Security reconnaissance automation for detecting Broken Link Hijacking opportunities.

04

Hematt

Privacy-first personal finance application built with Flutter and Clean Architecture.

Education

Senior secondary equivalency · PKBM Online

I am currently in grade 12 through Indonesia's Paket C equivalency pathway. I chose independent study to build a practical programming curriculum aligned with industry needs while working professionally as a developer.

Stack

What I work with daily.

01

Languages

  • TypeScript / JavaScript
  • PHP
  • Python
  • Go
  • Rust
  • Dart
02

Frontend

  • Next.js
  • React
  • TypeScript
  • Alpine.js
  • JavaScript
  • Astro
  • Vue
  • Vite
  • Tailwind CSS
  • Svelte
  • Flutter
03

Backend

  • Laravel
  • Laravel (Filament & Livewire)
  • Node.js
  • Express.js
  • FastAPI
04

Database & ORM

  • PostgreSQL
  • Neon (Serverless PostgreSQL)
  • MySQL
  • PostgreSQL (Native / SQLAlchemy)
  • SQLite
  • Neon DB
  • MongoDB
  • Neo4j (Graph Database)
  • Redis (Caching & Message Broker)
  • Drizzle ORM
  • Prisma
  • Laravel Eloquent
  • SQLAlchemy
05

AI & Agents

  • Codex
  • Google Gemini API / Google GenAI
  • OpenAI API
  • Hermes
  • OpenClaw
  • Cursor
  • Anthropic SDK
  • Groq Cloud API
06

Deploy & Ops

  • Docker & Docker Compose
  • Dockerfile & Nixpacks
  • GitHub Actions (CI/CD)
  • Vercel
  • Railway
  • VPS
  • GitHub
  • Procfile (Heroku / Railway / Render)
  • Static HTML Deployment
07

Auth & Media

  • NextAuth.js
  • Custom JWT (JSON Web Tokens)
  • UploadThing
  • Multer
  • Cloudinary
  • Resend
  • Nodemailer
08

Apps & Motion

  • Tauri
  • xterm.js (Terminal Emulator)
  • Three.js (3D Graphics)
  • GSAP (GreenSock Animation Platform)
  • Framer Motion
  • Canva
  • CapCut
  • Filmora
  • After Effects
09

Automation & Recon

  • MQTT (paho-mqtt)
  • Paramiko (SSH Automation)
  • gospider (Web Crawling/Recon)
  • Firecrawl
  • n8n
  • SQL Alchemy + psycopg2 (DB Driver Integration)