A selection of recent engagements - production systems, real numbers, regulated environments. Filter by industry or search by stack to find the closest match to your problem.
Built an online CA platform that ranks for 300+ search terms.
Designed and shipped Regikart - India's online Chartered-Accountant platform for company registration, GST, ITR and ROC/MCA compliance. A fully data-driven Next.js architecture generates 300+ indexable pages (services, city landings, entity spokes and blog) from typed content files, each self-wired into the sitemap and structured data.
Regikart Pvt. Ltd. · Online CA platform
India
Ongoing
300+
Indexable pages
162
SEO articles shipped
154
301s for canonicalization
“Every service, city and article page is generated from one content model and auto-added to the sitemap and schema - so SEO scales with content, not manual effort.”
Built a self-hosted email server that lands in the inbox, not spam.
Designed and operate a production email platform - Postfix, Dovecot, Rspamd and ClamAV - with SQL-backed mailboxes across multiple domains. A strict SPF, 2048-bit DKIM and DMARC p=reject setup, MTA-STS and clean IP reputation keep mail out of spam folders, while TLS 1.3, encryption at rest and a 10 GB per-user quota keep it secure and reliable.
Kept the whole app online even when a server goes down.
Split a Next.js monolith into six independent services on Kubernetes (MicroK8s + Traefik), each with its own PostgreSQL database, plus a Redis cache over stunnel TLS and a mediasoup media server run outside the cluster for WebRTC. Each service was kill-tested in turn - only its own endpoint fails, the app never goes down.
Global Connect: locked-down infrastructure that passes security review.
Built the networking and security layer behind the platform - SPF, 2048-bit DKIM and DMARC p=reject with strict alignment, MTA-STS and TLS-RPT, Let's Encrypt TLS everywhere, and a Traefik/NGINX edge. Security controls include forced row-level tenant isolation, AES-256-GCM secret encryption and a SHA-256 hash-chained tamper-evident audit log.
Built a Gmail-style webmail app with AI writing built in.
A Next.js webmail app over 22 real mail API routes - IMAP-backed mailboxes, drafts saved to IMAP, undo-send, scheduled send that survives restarts, and hybrid search (a Postgres header index plus live IMAP bodies). AI compose, translate and tone-rewrite are wired to Azure OpenAI, with mailbox lists served from the index in well under 200 ms.
Built a Slack-style team chat with live presence for the workspace.
A dedicated chat service - Express plus a ws WebSocket on one process - with DMs and channels, per-request membership checks and attachments, all org-scoped by forced row-level security. Presence lives in Redis with a 45-second TTL and a 30-second heartbeat, and is optional by design: a Redis outage removes presence dots but never takes chat down.
Built self-hosted HD video calls with recording, no per-seat fees.
A mediasoup selective-forwarding unit tuned for high resolution - VP8 3-layer simulcast, VP9 and H.264 Level 5.1 to allow 2160p - with JWT-authenticated signalling and screen share as a first-class stream. Recording pipes already-encoded media through GStreamer with no re-encoding, and call history, chat and per-session stats are persisted to PostgreSQL.
Built HR & payroll software with reliable biometric attendance.
A full HR platform - employee lifecycle, leave, Indian statutory payroll and a VoIP module - with biometric attendance from an ESSL ZMM200. When the vendor's SOAP Web API returned auth errors and synced zero rows, we built a resilient direct-device bridge over TCP (pyzk) with three sync modes: sub-second live capture, a lock-guarded 15-second poll with network auto-recovery, and bulk backfill.
Built a publishing and community platform with live chat.
A vertical tech-media and community platform - editorial verticals, events, newsletter and contributor submissions - fronted by a custom Node server that runs Next.js alongside Socket.IO with a Redis adapter for live chat rooms. Self-built JWT auth (email verification, 2FA, password reset) over raw PostgreSQL with a repository pattern, plus a hardened security middleware stack.
Built a waste-management dashboard that turns field audits into decisions.
A civic-tech platform for urban solid-waste management - a public site plus a gated dashboard where field observers log waste audits (plastics, segregation, hotspots) and officials view KPIs, GIS maps and ward comparisons. Four-tier role-based access is enforced in middleware and in role-scoped SQL, so each city and ward officer sees only their own data.
Municipal waste-management program (name withheld)
Cloud & InfrastructureMail control plane & migration
Migrated inboxes between providers with zero data loss.
A web admin panel for a production Postfix/Dovecot server - managing domains, mailboxes, aliases and quotas through a secured API proxy so the privileged key never reaches the browser. It includes self-service DNS onboarding that generates and live-verifies SPF, DKIM and DMARC records, and an idempotent IMAP-to-IMAP migration engine that streams message-by-message, preserves flags and original dates, and ships presets for seven providers.
