Security tools and shipped products

CLI that turns undocumented API routes into reviewable security context, with SARIF output your CI already understands.

• Node.js
• Security
• Static Analysis
• OWASP

Trust-first social commerce platform for Pakistan, where a verified handshake replaces the anonymous listing.

• TypeScript
• Startup
• Marketplace
• React

Privacy-hardened Linux distribution with a DNS-level firewall that ships with the blocking already done.

• Shell
• Linux Distribution
• Debian
• Privacy

Free bilingual digital library built for students in Pakistan, funded by the team that maintains it.

• TypeScript
• Education
• Digital Library
• Next.js

Islamic companion app with location-aware prayer times, published on F-Droid with no tracking.

• TypeScript
• React
• Capacitor
• Android

File encryption in Rust with key transparency, so you can prove what was encrypted and with which key.

• Rust
• Encryption
• Security
• Cryptography

Android energy-intelligence platform that traces battery drain back to the architectural decision that caused it.

CLI that turns undocumented API routes into reviewable security context, with SARIF output your CI already understands.

File encryption in Rust with key transparency, so you can prove what was encrypted and with which key.

A Tor client for low-end Android, for devices that cannot run Orbot.

DNS resolver manager for Android that measures latency and switches resolvers, within bounds you set.

Local DNS sinkhole for Android with a 200,000-domain blocklist and zero telemetry.

Privacy-hardened Linux distribution with a DNS-level firewall that ships with the blocking already done.

Trust-first social commerce platform for Pakistan, where a verified handshake replaces the anonymous listing.

Free bilingual digital library built for students in Pakistan, funded by the team that maintains it.

Islamic companion app with location-aware prayer times, published on F-Droid with no tracking.

Privacy-first on-device content filtering for Android, aligned to Islamic values, fully open source.

Offline-first medical assistant for crisis zones where the network does not work.

An agent with no world knowledge at all, built to find out what it learns on its own.

Self-hosted Android agent host controlled over a private Telegram channel, with no cloud dependency.

Sovereign habit tracker with no servers, decentralised over Nostr with end-to-end encryption.