Abdulrhman Hani

Backend & AI Systems Engineer also DevOps · Security · Full-Stack
idea spec build harden ship prod

Self-hosted production AI & security agents · Laravel multi-tenant SaaS · Hardened Linux infra
Currently shipping (multi-school SaaS with custom WebRTC stack) and 5 specialized AI agents in production.

Skills

What I bring to the table - hands-on across the full stack, from kernel to LLM.

Technical

Built, broken, deployed, and shipped.

Languages
PHP 8 Python 3 JavaScript TypeScript Bash SQL HTML5 / CSS3
Backend & Web
Laravel FastAPI REST APIs Sanctum / Passport Blade Livewire Queues / Jobs WebSockets
Data & Infra
MySQL / MariaDB PostgreSQL Redis SQLite FTS5 MinIO / S3 Eloquent
AI & Automation
Ollama OpenAI Anthropic RAG Embeddings LLM Agents n8n Prompt Engineering
DevOps & Linux
Linux (Ubuntu / RHEL) Nginx Docker systemd Let's Encrypt UFW / firewalld rsync / SSH CI/CD
Security & Forensics
Web App Pentest Active Directory Pentest Digital Forensics Reverse Engineering YARA nmap / nuclei OSINT Burp Suite
Tooling
Git / GitHub Composer / npm VS Code Postman Figma

General

How I work and what I'm like to work with.

Engineering Mindset
System Design Problem Solving Performance Tuning Production Debugging Security-first Thinking Clean Architecture
Delivery
End-to-end Ownership Self-hosted Deployment Zero-downtime Releases Documentation Observability
Collaboration
Cross-team Communication Technical Writing Mentoring Code Review Requirements Gathering
Working Style
Self-driven Detail Oriented Pragmatic Fast Learner Remote-ready Direct Communication
Languages
Arabic - Native English - Professional

Projects

Self-hosted production work - five specialized AI agents for security operations plus the infrastructure and platforms behind them.

Obj3ct AI - Python network monitoring chat Obj3ct AI - Securing Windows computer Obj3ct AI - capabilities overview
1 / 3

Obj3ct AI - Core Chat & RAG

Self-hosted LLM chat with streaming responses, conversation history, code blocks, file uploads (PDF + OCR), web search, and a multi-GB indexed technical knowledge base.

Impact: low-latency RAG retrieval over a multi-GB indexed KB; replaces ChatGPT for internal technical Q&A with zero data leaving the box.

Ollama (qwen2.5) FastAPI RAG SQLite FTS5 BM25 Embeddings
V1P3R - vulnerability distribution dashboard V1P3R - autonomous pentest agent landing V1P3R - attack-surface diagram V1P3R - AI executive summary V1P3R - infrastructure and exposed paths
1 / 5

V1P3R - Security Scanner

Autonomous pentest agent orchestrating 60+ recon, scanning, and exploitation tools (amass, nuclei, masscan, nmap, sslscan). Produces vulnerability distribution charts, attack-surface diagrams, and AI-generated executive reports.

Impact: compresses an initial external recon engagement from hours of manual tool-chaining into a single autonomous run with a board-ready report.

Python FastAPI Pentest Tools LLM Agents Worker Queue
CL4W - digital forensics agent

CL4W - Digital Forensics

Drop any file - the agent runs a full forensic scan (YARA, PE/ELF dissection, entropy, strings, hashes) and delivers an AI verdict on whether the artifact is malicious, suspicious, or benign.

Impact: turns a multi-tool malware triage workflow into a single drag-and-drop verdict - YARA + PE/ELF + entropy + AI in one pass.

YARA pefile pyelftools capstone LLM Verdict
OS1NT - Sherlock live scan results OS1NT - workstation and tools panel
1 / 2

OS1NT - Intelligence Operator

OSINT workstation that profiles any target - person, username, email, domain, IP. Runs Sherlock, Maigret, theHarvester, blackbird, holehe and aggregates intel into a unified report with AI synthesis.

Impact: unifies 6+ separate OSINT tools and their CLIs into one queryable target profile - what used to take 5 terminals takes one form field.

OSINT Sherlock Maigret theHarvester Recon
XR4Y - WebP file entropy and AI safety analysis XR4Y - reverse engineering assistant landing
1 / 2

XR4Y - Reverse Engineering

Upload a binary or paste assembly - XR4Y analyses entropy, strings, PE/ELF structure, identifies packing and obfuscation, and explains exploits, ROP chains, anti-debug tricks, and CTF challenges.

Impact: on-demand binary analysis without spinning up Ghidra or IDA - explains exploits and CTF challenges in plain language to accelerate research.

Reverse Eng Assembly capstone Binary Analysis CTF

AI Automation & Integration Platform

LLM-driven operations assistant that ingests server and application logs, classifies incidents, and orchestrates internal APIs - cutting manual triage time and accelerating routine maintenance.

Impact: automates first-line incident triage across multi-domain Linux infra - flags severity, suggests fixes, and triggers internal Laravel webhooks for routine maintenance.

Python 3 OpenAI Anthropic Laravel webhooks MySQL RAG
n8n - Odoo ERP pulls products, accounts, cash flow and reports into an AI agent (Gemini + SerpAPI + memory) that generates a strategic financial report and emails it as HTML n8n - WhatsApp AI assistant: classifies messages by type, routes them through HTTP requests, downloads media, transcribes audio, and replies with text or voice n8n - Telegram media bot: detects SoundCloud, YouTube short, YouTube link, voice, sound or text and runs the matching transcription + email pipeline
1 / 3

n8n Workflow Automation - Self-hosted AI Orchestrator

Self-hosted n8n behind nginx + TLS, orchestrating real production flows: an Odoo ERP → AI agent pipeline that pulls products, accounts, cash flow and reports, runs them through Google Gemini with SerpAPI and persistent memory, then emails an HTML strategic report; a WhatsApp AI assistant that classifies incoming messages, downloads media, transcribes audio, and replies via text or voice; and a Telegram media bot that switches on content type (SoundCloud / YouTube / voice / sound / text) and runs the matching transcribe-and-deliver pipeline. Built with HTTP, webhooks, LLM nodes, memory stores, and conditional switches - no throwaway glue code.

Impact: 3 production workflows live - delivers ERP strategic reports, WhatsApp AI replies, and Telegram media transcription without writing or maintaining bespoke service code.

n8n Workflow Automation Webhooks Google Gemini SerpAPI Odoo ERP WhatsApp API Telegram Bot Self-hosted

Enterprise Infrastructure & Hardening

Multi-domain Linux estate with zero-trust hardening, automated TLS renewal, IP allow-listing, and rsync-based zero-downtime deployments across production workloads.

Impact: 8+ subdomains and 5+ production apps on a single hardened VPS - zero-downtime rsync deploys, automated TLS, and per-subdomain IP allow-listing.

Linux (RHEL / Ubuntu) Nginx Docker Let's Encrypt UFW / firewalld CI/CD

ServerMonitor - Linux Health Dashboard

Lightweight PHP web dashboard for monitoring Linux servers - tracks CPU, RAM, disk, network throughput, uptime, and active services. Designed to drop onto any LAMP host with zero external dependencies for instant ops visibility.

Impact: drop-in single-file Linux ops dashboard - zero install, zero dependencies, instant CPU/RAM/disk/network/service visibility on any LAMP host.

PHP Linux Bash Sysinfo Self-hosted

abdulrahman-me.com

This very site - multi-domain Linux estate, Let's Encrypt automation, IP allow-listing on private subdomains, rsync zero-downtime deploys, and hardened Nginx reverse proxy with security headers.

Impact: the portfolio you are reading - hosted, secured, monitored, and deployed end-to-end by me on a single VPS.

Nginx Linux SSL/TLS UFW rsync systemd
Techstore - homepage Techstore - all products listing Techstore - cart and checkout Techstore - admin products dashboard Techstore - admin users management
1 / 5

Techstore - E-commerce Platform

Full-stack PHP / MySQL e-commerce store with product catalog, category filtering, search, shopping cart, checkout, role-based admin panel for products, categories, orders, users, and multi-admin management.

Impact: complete e-commerce platform built solo in 2022 - frontend, backend, admin panel, RBAC, and checkout flow without any framework scaffolding.

PHP MySQL Bootstrap JavaScript Admin Panel RBAC
SkillsHUB - learning platform SkillsHUB - course catalog SkillsHUB - course detail SkillsHUB - lessons grid with categories
1 / 4

SkillsHUB - Learning Platform

Laravel LMS with course catalog, category taxonomy, enrolment, lessons, instructor profiles, and content search. Server-rendered Blade UI backed by relational data and a moderation workflow.

Impact: end-to-end LMS shipped solo - schema design, instructor & student flows, moderation, search, and responsive UI all in one Laravel codebase.

Laravel PHP 8 MySQL Blade Bootstrap LMS
SISCool - public landing page with stats (1090 students, 61 teachers, 5+ years, 8 awards) SISCool - testimonials section on the public site SISCool - admin dashboard with student/teacher/staff counters, attendance rings, fee summary, calendar SISCool - task board with priorities, due dates, assignees, progress bars SISCool - calendar with event categories and academic year filter SISCool - meetings with live, scheduled and ended video sessions SISCool - meeting recordings and chat transcripts archive SISCool - internal chat with groups, teachers, students, admins SISCool - 1-to-1 chat with downloadable conversation transcript SISCool - notes with priority, color tags, and per-user sharing SISCool - file manager with role-isolated folders, storage quota, file type stats
1 / 11

SISCool - Multi-School SaaS Platform

Laravel 12 multi-tenant School Information System - every school gets its own isolated instance with a customizable public landing page (hero, stats, testimonials, news, contact). Core modules: students, teachers & staff, attendance, exams & grades, fees & accounting, timetable, classes & subjects, library, enrollment forms, payroll, parents/guardians, ID cards, blog and notice board. Productivity layer: task board with priorities and progress tracking, full calendar with custom event categories, internal chat (1-to-1 + groups), shared notes with tags and priorities, and a quota-aware file manager with role-isolated folders. Custom end-to-end video meetings stack built in-house on WebRTC with a self-hosted signaling server, TURN/STUN relay, peer-to-peer media, server-side recording, and live chat transcripts — zero dependency on Zoom, Google Meet, Microsoft Teams, or any third-party SDK. Live / scheduled / ended sessions are managed natively inside the platform. English / Arabic with full RTL support, Excel and PDF exports across every module.

Impact: a full school operating system in one product - 20+ modules and a custom WebRTC video stack that replaces Zoom / Teams / Meet entirely, eliminating recurring per-seat SaaS costs.

Laravel 12 PHP 8.2 MySQL 8 Multi-tenant SaaS RBAC Livewire i18n + RTL WebRTC WebSockets TURN / STUN Custom Video Stack Server-side Recording Excel / PDF Exports Self-hosted
FitBird - public landing hero 'Put on your wings' FitBird - mobile app download (App Store and Google Play) FitBird - features grid: variety, wellbeing, personalization, BMI, chat FitBird - interactive video demonstrations feature FitBird - subscription pricing tiers (1, 3, 6, 12 months in AED)
1 / 5

FitBird UAE - Fitness Platform & Mobile App

Backend, landing site, and admin platform powering FitBird UAE - 500+ workouts, 900+ exercises, personalized plans, BMI tooling, live chat support, and subscription billing. Companion iOS & Android apps published on the App Store and Google Play.

Impact: production fitness platform serving the UAE - powers iOS & Android apps live in App Store and Google Play with paid subscriptions.

Laravel REST APIs MySQL Mobile Backend Subscriptions iOS / Android

Mazad Egypt - Online Auction Platform

PHP / MySQL auction marketplace with category browsing (antiques, paintings & art, other pieces), per-item bidding, user registration & sign-in, profile pages with uploaded user pictures, contact & Q&A pages, and a full admin back office for items, categories, users, and bids. Built OOP-style with dedicated classes/, handlers/, and db/ layers plus Composer-managed vendor libraries.

Impact: end-to-end auction marketplace shipped solo - frontend, bidding flow, user accounts, file uploads, and admin panel built from scratch in raw PHP OOP.

PHP MySQL OOP Composer Bootstrap Auctions / Bidding Admin Panel

Certifications

CyberTalents certified - offensive security, application security, and digital forensics.

CyberTalents Certified Active Directory Penetration Tester certificate
Certified Active Directory Penetration Tester CyberTalents · April 2026
CyberTalents Certified Web App Penetration Tester certificate
Certified Web App Penetration Tester CyberTalents · April 2026
CyberTalents Certified Digital Forensics Examiner Specialist certificate
Certified Digital Forensics Examiner Specialist CyberTalents · April 2026
Orange Digital Center Back-End Hackathon certificate - Grade 93%
Back-End Hackathon · Grade 93% Orange Digital Center · Sep 2022