Self-hosted production AI & security agents · Laravel multi-tenant SaaS · Hardened Linux infra
Currently shipping (multi-school SaaS with custom WebRTC stack) and 5 specialized AI agents in production.
Email Phone WhatsApp LinkedIn GitHub abdulrahman-me.com Projects ↓
Complete profile across DevOps, Full-Stack, Security, and AI. The all-rounder version.
Open →Linux administration, CI/CD, Nginx, containers, automation, and enterprise-grade hardening.
Open →PHP, Laravel, REST APIs, MySQL, JavaScript, and scalable backend architecture.
Open →AI and LLM workflow integration, Python automation, API orchestration, and intelligent pipelines.
Open →What I bring to the table - hands-on across the full stack, from kernel to LLM.
Built, broken, deployed, and shipped.
How I work and what I'm like to work with.
Self-hosted production work - five specialized AI agents for security operations plus the infrastructure and platforms behind them.
Obj3ct AI - Core Chat & RAGSelf-hosted LLM chat with streaming responses, conversation history, code blocks, file uploads (PDF + OCR), web search, and a multi-GB indexed technical knowledge base.
Impact: low-latency RAG retrieval over a multi-GB indexed KB; replaces ChatGPT for internal technical Q&A with zero data leaving the box.
V1P3R - Security ScannerAutonomous pentest agent orchestrating 60+ recon, scanning, and exploitation tools (amass, nuclei, masscan, nmap, sslscan). Produces vulnerability distribution charts, attack-surface diagrams, and AI-generated executive reports.
Impact: compresses an initial external recon engagement from hours of manual tool-chaining into a single autonomous run with a board-ready report.
CL4W - Digital ForensicsDrop any file - the agent runs a full forensic scan (YARA, PE/ELF dissection, entropy, strings, hashes) and delivers an AI verdict on whether the artifact is malicious, suspicious, or benign.
Impact: turns a multi-tool malware triage workflow into a single drag-and-drop verdict - YARA + PE/ELF + entropy + AI in one pass.
OS1NT - Intelligence OperatorOSINT workstation that profiles any target - person, username, email, domain, IP. Runs Sherlock, Maigret, theHarvester, blackbird, holehe and aggregates intel into a unified report with AI synthesis.
Impact: unifies 6+ separate OSINT tools and their CLIs into one queryable target profile - what used to take 5 terminals takes one form field.
XR4Y - Reverse EngineeringUpload a binary or paste assembly - XR4Y analyses entropy, strings, PE/ELF structure, identifies packing and obfuscation, and explains exploits, ROP chains, anti-debug tricks, and CTF challenges.
Impact: on-demand binary analysis without spinning up Ghidra or IDA - explains exploits and CTF challenges in plain language to accelerate research.
LLM-driven operations assistant that ingests server and application logs, classifies incidents, and orchestrates internal APIs - cutting manual triage time and accelerating routine maintenance.
Impact: automates first-line incident triage across multi-domain Linux infra - flags severity, suggests fixes, and triggers internal Laravel webhooks for routine maintenance.
Self-hosted n8n behind nginx + TLS, orchestrating real production flows: an Odoo ERP → AI agent pipeline that pulls products, accounts, cash flow and reports, runs them through Google Gemini with SerpAPI and persistent memory, then emails an HTML strategic report; a WhatsApp AI assistant that classifies incoming messages, downloads media, transcribes audio, and replies via text or voice; and a Telegram media bot that switches on content type (SoundCloud / YouTube / voice / sound / text) and runs the matching transcribe-and-deliver pipeline. Built with HTTP, webhooks, LLM nodes, memory stores, and conditional switches - no throwaway glue code.
Impact: 3 production workflows live - delivers ERP strategic reports, WhatsApp AI replies, and Telegram media transcription without writing or maintaining bespoke service code.
Multi-domain Linux estate with zero-trust hardening, automated TLS renewal, IP allow-listing, and rsync-based zero-downtime deployments across production workloads.
Impact: 8+ subdomains and 5+ production apps on a single hardened VPS - zero-downtime rsync deploys, automated TLS, and per-subdomain IP allow-listing.
Lightweight PHP web dashboard for monitoring Linux servers - tracks CPU, RAM, disk, network throughput, uptime, and active services. Designed to drop onto any LAMP host with zero external dependencies for instant ops visibility.
Impact: drop-in single-file Linux ops dashboard - zero install, zero dependencies, instant CPU/RAM/disk/network/service visibility on any LAMP host.
This very site - multi-domain Linux estate, Let's Encrypt automation, IP allow-listing on private subdomains, rsync zero-downtime deploys, and hardened Nginx reverse proxy with security headers.
Impact: the portfolio you are reading - hosted, secured, monitored, and deployed end-to-end by me on a single VPS.
Full-stack PHP / MySQL e-commerce store with product catalog, category filtering, search, shopping cart, checkout, role-based admin panel for products, categories, orders, users, and multi-admin management.
Impact: complete e-commerce platform built solo in 2022 - frontend, backend, admin panel, RBAC, and checkout flow without any framework scaffolding.
Laravel LMS with course catalog, category taxonomy, enrolment, lessons, instructor profiles, and content search. Server-rendered Blade UI backed by relational data and a moderation workflow.
Impact: end-to-end LMS shipped solo - schema design, instructor & student flows, moderation, search, and responsive UI all in one Laravel codebase.
Laravel 12 multi-tenant School Information System - every school gets its own isolated instance with a customizable public landing page (hero, stats, testimonials, news, contact). Core modules: students, teachers & staff, attendance, exams & grades, fees & accounting, timetable, classes & subjects, library, enrollment forms, payroll, parents/guardians, ID cards, blog and notice board. Productivity layer: task board with priorities and progress tracking, full calendar with custom event categories, internal chat (1-to-1 + groups), shared notes with tags and priorities, and a quota-aware file manager with role-isolated folders. Custom end-to-end video meetings stack built in-house on WebRTC with a self-hosted signaling server, TURN/STUN relay, peer-to-peer media, server-side recording, and live chat transcripts — zero dependency on Zoom, Google Meet, Microsoft Teams, or any third-party SDK. Live / scheduled / ended sessions are managed natively inside the platform. English / Arabic with full RTL support, Excel and PDF exports across every module.
Impact: a full school operating system in one product - 20+ modules and a custom WebRTC video stack that replaces Zoom / Teams / Meet entirely, eliminating recurring per-seat SaaS costs.
Backend, landing site, and admin platform powering FitBird UAE - 500+ workouts, 900+ exercises, personalized plans, BMI tooling, live chat support, and subscription billing. Companion iOS & Android apps published on the App Store and Google Play.
Impact: production fitness platform serving the UAE - powers iOS & Android apps live in App Store and Google Play with paid subscriptions.
PHP / MySQL auction marketplace with category browsing (antiques, paintings & art, other pieces), per-item bidding, user registration & sign-in, profile pages with uploaded user pictures, contact & Q&A pages, and a full admin back office for items, categories, users, and bids. Built OOP-style with dedicated classes/, handlers/, and db/ layers plus Composer-managed vendor libraries.
Impact: end-to-end auction marketplace shipped solo - frontend, bidding flow, user accounts, file uploads, and admin panel built from scratch in raw PHP OOP.
CyberTalents certified - offensive security, application security, and digital forensics.