Full-stack developer with a strong focus on application security and API resilience.
I analyze real APIs to identify risk patterns, document findings, and recommend practical mitigations.

Security & Resilience Audit of a Healthcare REST API

• Key Findings:
  • DoS via large payloads without validation
  • Metadata exposure in verbose error responses
  • HTTP verb tampering bypassing authentication
• Approach: Black-box API analysis focused on availability, error handling, and access control.
• Mitigations: Payload limits, rate limiting, error sanitization, and schema validation (Zod / Joi).

👉 View the full case study →

• Languages: JavaScript (Node.js)
• AppSec: OWASP Top 10, API Security, black-box testing
• Tools: Burp Suite, Postman, manual API analysis
• Validation: Zod / Joi
• DevOps: Git, Docker

📌 Passionate about secure design, API hardening, and real-world security case studies?
➡️ Start with the featured audit above.