ESG-Go
LiveMulti-tenant ESG SaaS for Malaysian GLCs, extended into maritime compliance (IMO CII/EEXI/DCS) with one-click reporting across Bursa SEDG, GRI, TCFD, IFRS S1/S2 and CSRD.
Go · Echo · pgxSupabase · RLSTurborepo
Open demo ↗
$ whoami
Custom software & business systems that actually ship.
Senior software developer based in Malaysia. I design, build, and deliver production-grade web, mobile, and AI systems for business founders, SMEs, GLCs, and agencies — architecture-first, PDPA-security reviewed, and handed over with clear documentation.
40+
Systems shipped or in build
4
Domains: Maritime, EdTech, Fintech, Infra
0
Placeholder code in production
PDPA
Aligned security review, every build
// live systems & solutions
Proven solutions running in production.
40+ custom systems built across key industries — from maritime compliance and enterprise telemetry to child-safe EdTech and founder fintech. Explore live public demos or request case studies for private systems.
Maritime & Marine Tech
13 systems · deepest domainNautical Pulse
LiveMarine operations tooling — part of a wider vessel and port tracking suite spanning live telemetry dashboards, tidal windows, and anchorage monitoring.
TypeScript
Open demo ↗
PTP Meteorological
LiveMaritime meteorological and weather-station monitoring dashboard for Port of Tanjung Pelepas (PTP), tracking real-time environmental parameters and port operational weather telemetry.
Next.jsTypeScriptTailwind
Open demo ↗
Monitoring & Infrastructure
systems that watch systemsDevOpsBoard
PrivateNative iOS app for monitoring server, database, and API uptime with live network checks and incident alerting.
SwiftUISwiftData
Case study on request
PulseGuard
PrivateReal-time health-check and status-page service built to automate operational observability across distributed cloud infrastructure.
TypeScript
Case study on request
Flood Warning — NDCC
LiveReal-time Malaysia flood telemetry pulling live sensor data from data.gov.my (JPS/NADMA) for public-safety risk management.
Python · DashPlotlydata.gov.my API
Open demo ↗
EdTech & Public Good
Malay-language, child-safe by designJawiKids
Private · NDAJawi-script learning platform for children with adaptive spaced repetition (SM-2 variant), a Teacher Mode for KAFA schools, and PIN-based sessions on 3-tier RLS.
Supabase Postgres3-tier RLSCustom JWT
Case study on request
Master Sifir
LiveBahasa Melayu multiplication-table learning app for ages 7–12 — proof that rigorous software architecture scales cleanly to focused consumer products.
TypeScriptVercel
Open demo ↗
Education Kit Sales
LiveE-commerce catalog and order management platform for educational kits, built specifically for local Malaysian school suppliers and parents.
TypeScript
Open demo ↗
Edu Game
LiveGamified interactive learning web application featuring score-tracked exercises for classroom and at-home training.
TypeScript
Open demo ↗
Fintech & Business Systems
for founders & usahawanLeadFlow CRM
LiveB2B CRM & WhatsApp sales pipeline engine for Malaysian businesses — 1-click WhatsApp closing (+60 normalizer), Kanban stages, Meta/TikTok Ads attribution, and official A4 Quotation/Tax Invoice generator (RM).
React · ViteTypeScriptTailwindZero-Backend
Open demo ↗
FinanceHub
LiveComprehensive personal finance dashboard — automated budgeting, expense tracking, and analytical reporting with a high-speed modern React interface.
React 19Tailwind v4 · shadcn/ui
Open demo ↗
Infaq BUKM
LiveAdmin operations panel and public donation portal for an NGO, engineered for rock-solid transaction integrity and audit transparency.
LaravelFilament v5
Open demo ↗
// software development services
How we can work together to build your solution.
Every business engagement begins with a clear written scope and technical architecture before coding starts. Get a tailored solution built specifically for your business goals.
01 · For founders & SMEs
MVP Sprint
You have a business idea and need a production-grade product launched fast.
- Scoped build to a working v1 web or mobile app
- Hosting, CI/CD pipeline, domain & auth setup
- Complete handover docs so you own your codebase
Typical timeline: 4–8 weeks
02 · For existing products
System Rescue & Refactor
Your current app is sluggish, unstable, or abandoned by previous developers.
- Codebase & cloud architecture audit
- Prioritised fix plan, ranked by business risk
- Hands-on execution and modernization
Typical timeline: 2–6 weeks
03 · For regulated companies
Security & PDPA Audit
You handle customer/financial data and cannot afford compliance or breach risks.
- SQLi / XSS / SSRF / IDOR / auth vulnerability scan
- PDPA 2010-aligned findings, severity-ranked
- Actionable remediation code & architectural fixes
Typical timeline: 1–2 weeks
04 · For GLCs & growing teams
Embedded Senior Engineer
You need dedicated senior ownership and technical leadership without full-time overhead.
- Embedded technical leadership, remote or hybrid
- End-to-end system architecture & code quality
- Mentoring your internal engineering team
Typical timeline: Retainer / engagement-based
// development process
Phase-gated engineering: no guesswork.
A structured engineering methodology ensures your business software is delivered on time, within budget, and built for maintainability.
01
Discovery
Clarify business goals, user requirements, and technical constraints before building.
02
Spec & Sign-off
Architecture, data model, APIs, and milestones signed off before coding starts.
03
Build
Production-ready implementation with automated tests. No shortcuts or placeholders.
04
Security Review
Tested against OWASP Top 10, auth bypasses, and data leaks before launch.
05
Handover
Full source code, API runbooks, and documentation so you retain 100% ownership.
// standards & compliance
Why companies trust my engineering.
PDPA 2010-aligned reviews
Multi-tenant RLS by default
Zero-placeholder delivery
Documentation-first workflow
SOLID · DRY · KISS
OWASP Top 10 Hardening
// FAQ
Frequently asked questions by business clients.
What is your typical turnaround for building a business software solution?
Turnaround depends on scope — a focused MVP or custom internal tool runs 4–8 weeks, while a security or architecture audit takes 1–2 weeks. You get a written timeline and milestone plan before work commences, not an estimate that slips silently.
Do you sign NDAs (Non-Disclosure Agreements)?
Yes. Several active client systems (e.g., JawiKids) are under NDA. I am happy to sign your standard NDA prior to our initial discovery discussion.
I have a business idea or operational problem, but no technical spec. Can you help?
Yes — discovery is designed specifically for this. We translate your business goals and operational bottlenecks into a concrete technical specification and architecture before writing code.
Do you work with non-technical founders and business owners?
Often. Technical trade-offs are explained in plain, pragmatic terms with decisions documented in writing, ensuring you maintain full clarity and strategic control over your product.
Are you open to international / remote clients as well as local Malaysian businesses?
Yes — based in Malaysia, I work effectively with remote clients worldwide across time zones, with on-site availability for enterprise, GLC, and regulated-sector engagements within Malaysia.