Hall of Records
Work
Every system, platform, and blueprint that shipped — with the real numbers: test counts, vulnerability findings, and architectural decisions documented.
Projects
Tests shipped
In production
Delivered
Active dev
Blueprints
Featured
Digi-Campaign 254
Multi-tenant Political Campaign-as-a-Service for Kenya's 2027 election cycle.
Key findings
- Hardcoded encryption key fallback — caught in security audit, patched before v2.0
- Unauthenticated referral enumeration endpoint — patched before any client access
- CVE in Next.js 14.2.3 — identified and mitigated during audit phase
UV — UltraViolet
Zero-trust E2E encrypted communications with a post-quantum hybrid key exchange and a proprietary six-stage Channel Integrity Check protocol.
Key findings
- Base58 encoding error — corrupted key serialisation, silent until cross-party test
- Nonce ordering mismatch — decryption failures on resumed sessions
- Session ID non-determinism — divergent IDs across participants for same session
Amani Guard
GBV emergency response platform for Kenya — four offline tiers, USSD on feature phones, and Kenya DPA 2019 compliance throughout.
Key findings
- Dead-man's switch dispatch: secondary nodes auto-promote if primary heartbeat fails
- MongoDB CSFLE: survivor records encrypted at application layer before hitting DB
- Google Maps replaced with OSM/Nominatim — geocoding to US servers violates DPA 2019
Full catalog
Digi-Campaign 254
Platform / SaaSMulti-tenant Political Campaign-as-a-Service for Kenya's 2027 election cycle.
Ruai Tech Solutions Platform
Business PlatformInternal operations platform for a six-department technology business in Ruai Town Centre, Nairobi.
UV — UltraViolet
Security / CryptographyZero-trust E2E encrypted communications with a post-quantum hybrid key exchange and a proprietary six-stage Channel Integrity Check protocol.
DO4ME
MarketplaceKenya-first freelance marketplace with dual M-Pesa/Stripe escrow, milestone management, and real-time chat.
Ultron AI
Developer Tools / AIVS Code extension for local LLM-assisted coding — CPU-only, privacy-first, no API key required.
Amani Guard
Social Impact / MobileGBV emergency response platform for Kenya — four offline tiers, USSD on feature phones, and Kenya DPA 2019 compliance throughout.
The African Security Guild
Creative IP / FranchiseAn original African-themed multimedia franchise — novel, manga, anime — centred on African historical rehabilitation and pre-colonial knowledge systems.
AgriSense
AgTech / AISmart farming platform for smallholder East African farmers — soil intelligence, AI crop recommendations, and USSD delivery on feature phones.
Jarvis
Personal AI / VoiceA voice-first, ethically-governed personal AI assistant with long-term memory — local inference, no cloud dependency.
Ready to build?
Start your project
From platform builds to security-hardened systems — every project above started with a conversation.