Ujjval Bhatti

TypeScript, JavaScript, Python. React, Next.js, Node, Express, MongoDB, Supabase, Tailwind. REST and webhook design, HMAC signing, JWT auth and RBAC, Stripe and Razorpay, Playwright, Jest.

Application security in depth - threat modelling, npm supply-chain risk, and writing Supabase and Firebase rules that survive real users.

Vibe Code Audit - a passive scanner that reads a live app's page and bundles and reports leaked API keys, public source maps and missing security headers. vibecodeaudit.vercel.app

Freelance and contract work, remote. Rescue and security audits of AI-built apps, payment and webhook integrations, full-stack Next.js/Node builds. Flat-rate audits, fixed-price projects.