About me

BUILD × SECURE × AUDIT

Selected Work

Six operating contexts, one standard: ship it like it has to survive contact with real users, real traffic, and real attackers. Travel operations, hospitality products, commercial tooling, and offensive-security tooling — presented as practical case studies, not portfolio filler.

Verified Credentials
Verified
CEH Certified Ethical Hacker EC-Council
Verified
OSCP Offensive Security Certified Professional OffSec
Verified
CPT Certified Penetration Tester Security Certified
Verified
CISSP Certified Information Systems Security Professional ISC²
Verified
CISM Certified Information Security Manager ISACA
Verified
Google Ads Google Marketing Certified Google
Domain notice: this site is currently running on .store as a staging / test environment only. The production domain moves to .com soon — bookmarks and links will carry over.
01

Ewaa Travel PMS

Active Development Structured Case Study

A connected travel operations platform designed around bookings, suppliers, quotations, vouchers and accounting — the unglamorous plumbing that decides whether an agency actually runs smoothly.

Why it matters: Built around connected records, booking states and reporting discipline, so nothing gets lost between a quote and an invoice.
02

Ewaa Theme

Premium Product WordPress Theme

A modern WordPress theme designed for hotel booking marketplaces, property owners, travel agencies, and developers who want a professional accommodation booking website without wrestling a page builder.

Why it matters: Balances atmosphere with usability instead of forcing one to defeat the other. Structured as a hospitality case study.
03

ArabWP Tools Pro

Product Refinement Structured Case Study

A bilingual commercial WordPress toolkit focused on practical, stable tools rather than unsupported promises — built for site owners who need it to keep working, not just launch well.

Why it matters: Focused on stable rendering, commercial reliability and bilingual usability.
04

Sano Dead Sea

Digital Concept Structured Case Study

A cinematic hospitality concept balancing atmosphere with a clear room and booking journey — mood without getting in the way of the reservation.

Why it matters: Balances premium presentation with a clearer hospitality booking journey.
05

Xdom — OSINT × AI

In Development Security Tooling

An AI-augmented OSINT reconnaissance engine — it correlates domain, infrastructure, and public-exposure signals, then uses an LLM layer to summarize findings into a readable attack-surface narrative instead of a wall of raw data.

Why it matters: Recon is only useful if someone reads it. Xdom turns scattered open-source signals into a prioritized, human-readable brief.
06

Xscaner — Go Web Scanner

Advanced Build Written in Go

A high-concurrency web vulnerability scanner built in Go, engineered for speed at scale — fingerprinting, misconfig detection, and endpoint discovery across large asset lists without buckling under load.

Why it matters: Go's concurrency model means Xscaner covers more surface area, faster, without trading away accuracy.

Bring the actual workflow, the blocker, and the outcome you need.

A useful starting point is the current setup, the main friction, and what should work better after the change.

Discuss the work