Projects

Client

4Moral

Six account types, real-time chat and money movement in one app, then a security pass before launch that found injection, IDOR and mass-assignment holes.

What it is

Production social and marketplace app. Six account types, real-time chat over sockets, orders using Mongo transactions, JWT auth, media pipeline, EC2. I also ran the pre-launch security pass, fixing NoSQL injection, IDOR and mass-assignment holes and taking dependency vulnerabilities from 21 to 9 without breaking the build.

Built with

MERN · Flutter · AWS EC2

Proof

Private client repo. Happy to walk through the architecture.

The long version