Yehualashet.

PROBLEM

Fleet managers needed low-latency tracking of distributed vehicles with dynamic geofencing, real-time alert generation, and reporting without dropping high-frequency IoT telemetry connections or overwhelming PostgreSQL storage.

ARCHITECTURE

Polyglot full-stack tracking architecture featuring Next.js App Router, Leaflet.js, and Zustand state management on the frontend, backed by an async Python + FastAPI microservice with SQLAlchemy ORM and PostgreSQL. Ingests vehicle telemetry via Mosquitto MQTT broker, broadcasts live movement coordinates over native WebSockets, and utilizes Redis for spatial pub/sub caching. Containerized with Docker Compose behind an Nginx reverse proxy.

SECURITY & TESTING

Strict data contract validation via Pydantic v2. Async token-based auth during WebSocket handshakes, strict rate-limiting policies, Docker container network isolation, and Nginx SSL termination with optimized CORS policies.

PROBLEM

Luxury gemstone trading requires high-precision transaction handling, strict input data validation, bulletproof authentication, and exhaustive test coverage to prevent payment and inventory state corruption.

ARCHITECTURE

Production-grade e-commerce application built on Next.js (App Router) and TypeScript, utilizing Prisma ORM with PostgreSQL for type-safe database queries and migrations. Features server-side rendering, dynamic inventory management, and zero-trust payload validation using Zod schemas. Implements secure session handling via NextAuth.js with bcrypt password hashing.

SECURITY & TESTING

Test-driven development (TDD) workflow backed by 183+ unit tests in Vitest covering authentication flows, inventory locks, and schema boundaries. NextAuth.js session security with bcrypt password hashing and strict Zod payload validation to neutralize injection attacks.

PROBLEM

Enterprise demand for private, air-gapped AI assistance without leaking confidential data or relying on third-party SaaS LLM APIs.

ARCHITECTURE

AI chat platform (Next.js, Ollama, SearxNG) featuring real-time streaming, multi-mode Retrieval-Augmented Generation (auto / smart / deep-think), local LLM inference, multimodal attachment handling, and persistent conversation management with pinning and duplicate prevention.

SECURITY & TESTING

Air-gapped LLM inference via Ollama ensuring zero external network data leaks. Input sanitization and isolated prompt contexts per session.

PROBLEM

Security analysts at national SOC levels experienced high MTTR and manual bottlenecking when triaging alerts across fragmented security tools.

ARCHITECTURE

National SOC case management system and Python-based automation workflow. Built with Django REST, React, and PostgreSQL. Integrates open-source Shuffle SOAR to orchestrate end-to-end incident lifecycles, cutting investigation time by 50% with geographic attack-origin KPI maps.

SECURITY & TESTING

Granular RBAC, strict audit logging for every investigation action, input validation, and containerized deployment behind Nginx. Automated CI/CD integration test suite for playbook execution.

PROBLEM

Need for an official, international-standard national CERT portal for incident reporting, public vulnerability advisories, child protection, and rapid emergency SOC intake.

ARCHITECTURE

High-availability web portal built with React, Django REST Framework, Docker, and Nginx reverse proxy. Automated deployment pipeline via GitLab CI/CD. Features built-in cyber awareness modules.

SECURITY & TESTING

Adheres to FIRST and international CERT security standards. Strict Content Security Policy (CSP), rate-limiting on reporting endpoints, and secure secret handling.