CHALLENGE_01
Building scalable RESTful APIs handling multiple concurrent security scans and data processing
Modular NestJS architecture with dependency injection, caching strategies, and efficient error handling patterns
V2 PREVIEW · not live
web project
Zerowl — Attack Surface Management
Enterprise cybersecurity SaaS for continuous exposure monitoring
ZEROWL
Overview
I'm a full-stack engineer on Zerowl, building the Attack Surface Management product security teams use in production. The platform watches domains, subdomains, vulnerabilities, leaked data, and cloud footprint so clients aren't juggling five disconnected tools. My work covers NestJS APIs, auth, data models, charts, and the Next.js UI that operators live in. Enterprise clients. Continuous monitoring. No room for "it works on my machine."
- duration
- 18+ months (Ongoing)
- team Size
- 3 Developers (Full Stack, Frontend, Python Dev)
- role
- Lead Full-Stack Developer — Architecture, Auth, APIs, Data Visualizations
- type
- Full-Stack Web Application
- category
- Cybersecurity & Security Operations
Stack
NestJS (Node.js Framework)Node.js with Express PlatformModular Microservices ArchitectureRESTful API with OpenAPI/Swagger DocumentationPassport.jsbcrypt password hashingRole-based Access Control (RBAC)Prisma ORMMySQL DatabaseJWT tokens with secure cookie storageTOTP implementationAES encryption with CryptoJSHelmet.js & CORSNext.js (App Router)TypeScriptTailwindCSSChart.js & react-chartjs-2RechartsTanStack Query (React Query)React Flow
Capabilities
- 01RESTful API Architecture with 100+ Endpoints
- 02Two-Factor Authentication (2FA) with QR Code Setup
- 03JWT Authentication & Secure Session Management
- 04Role-Based Access Control (Admin/User)
- 05Interactive Security Dashboards & Data Visualizations
- 06Real-time Charts (Bar, Area, Donut, Radial)
- 07Frontend API Integration Across Security Modules
- 08Vulnerability Severity Trending & Scoring
- 09Subscription-Based Access Control
- 10Modular NestJS Microservices Architecture
Pressure tests
CHALLENGE_02
Implementing robust authentication and authorization for a security-focused application
Multi-layered security with JWT tokens, bcrypt password hashing, TOTP-based 2FA, and role-based access control
CHALLENGE_03
Managing complex relational data across multiple security modules with optimal query performance
Prisma ORM with optimized database schema, proper indexing, connection pooling, and efficient query patterns
CHALLENGE_04
Creating intuitive visualizations for complex security data accessible to non-technical users
Custom Chart.js components with interactive maps, responsive design, and progressive disclosure of complex features
CHALLENGE_05
Integrating frontend with multiple backend security modules reliably
TanStack Query for data fetching with caching strategies, skeleton screens, and optimized bundle splitting
Achievements
- ▸Lead Architect & Developer — led and designed the platform architecture from day one
- ▸Built and documented 100+ RESTful API endpoints with Swagger
- ▸Implemented secure authentication system with 2FA and QR code setup
- ▸Designed modular NestJS microservices architecture with 20+ modules
- ▸Built interactive data visualization system with multiple chart types
- ▸Optimized database performance with Prisma ORM across 25+ tables
- ▸Implemented multi-layered security — JWT, bcrypt, CSRF, input validation
- ▸Integrated frontend with complex backend security modules using React Query
Impact
- ▸Provides enterprise clients unified visibility into their attack surface
- ▸Enables rapid identification and response to security threats
- ▸Reduces need for multiple security tools through a single platform
- ▸Supports compliance reporting and audit requirements
Next step
Zerowl — Attack Surface Management