Web security auditing and continuous monitoring platform. Verify a domain via DNS and get a Security Score, AI reports, monitoring with alerts, a public API and RBAC teams. 100% passive by design. Full multi-tenant, in production.

Mock-exam platform for university admission tests (EPN, UCE, ESPE and the National Police) built for the Cambridge academy in Latacunga, Ecuador, and running in production. The server is in charge: the correct answer never reaches the browser during an attempt, the server owns the clock, and every answer is saved even when the connection drops. Teachers import question banks from Excel, Google Sheets, Word, PDF or photos; a quality review combining rules, a math engine and AI flags critical issues before publishing, and an assistant builds simulators only with explicit confirmation. It also includes PayPhone or bank-transfer payments, per-institution isolation, two-step verification for administrators and an immutable audit log.

Tailors your profile to each job with AI, anchored by identifiers so it never invents data: name, companies and dates are copied from your profile, not the model. It computes an honest match score by ATS keyword coverage, groups your skills by category, edits live with an A4 preview and exports an ATS-ready PDF. It includes an automation (n8n + Notion): it finds new postings daily, scores each match with AI, generates the CV tailored to the role and logs the pipeline in Notion, with a Telegram ping for the ones worth it.

A stateful URL for every missing-person case: the link already circulating on WhatsApp updates itself and its thumbnail changes from 'missing' to 'found safe'. Privacy by design: the exact coordinate is never persisted —it is aggregated into an H3 cell and discarded in the same INSERT—; the map publishes bands, no dates or counts, with monotonic publishing (a cell never drops a class) against Sweeney's temporal attack; and nothing is published without human review. Go with no framework (2 dependencies), AES-256-GCM encryption in-process and an 80-line homegrown JWT verifier (HS256 only, no algorithm negotiation). PostgreSQL + PostGIS + TimescaleDB + H3; React 19 PWA frontend. Working end to end in development; only Google Cloud billing for the map is pending.

A personal space to discover interests, understand current events through verifiable sources and learn with active methods. It pairs a local-first app (PIN-protected profiles, real RSS news with explainable priority, on-device translation, a library and spaced repetition) with its own FastAPI and PostgreSQL server, deployed on my VPS, which handles accounts, Google sign-in and the AI features. Keys never ship inside the APK.

End-to-end autonomous detection and response platform (SIEM/SOAR). Event-driven architecture that integrates network traffic analysis (Suricata NIDS), host telemetry, and an asynchronous Zero-Trust mitigation engine.

Digital transaction platform built with a Security by Design mindset. Implements an architecture resistant to automated attacks through strict rate limiting, server-side payload validation, and an asynchronous flow that protects credential integrity.

Development of an adaptive Expert Advisor (EA) for MetaTrader 4. The algorithm uses multi-strategy logic based on mathematical models (Elliott Waves and Fibonacci retracements), with a real-time volatility engine to optimize risk management.

Defensive architecture capable of detecting and mitigating intrusions in under 5 seconds. The ecosystem correlates detection events (Snort) with automated firewall responses (Fail2ban), backed by a forensic observability pipeline (Promtail, Loki, Grafana).

Offensive security audit on a modern web architecture (Node.js/Angular). Exploited and documented critical OWASP Top 10 vulnerabilities, achieving an authentication bypass via SQL injection (boolean logic) and client-side code execution (DOM XSS). Includes REST API traffic forensics and architectural remediation proposals.

Technical software built for UCE's Agronomic Engineering program. Includes a chemical-compatibility validation algorithm for agricultural inputs, preventing adverse reactions and optimizing integrated crop management.

Digital catalog optimized for conversion. The design focuses on a smooth user experience and clear information architecture, culminating in a direct, efficient integration with the WhatsApp Business API for sales management.

Official platform built for the band D' Robys Band. The project integrates smooth scroll-based animations to create an immersive visual narrative highlighting the band's international career, while optimizing performance and accessibility.