I build web and mobile apps and I'm studying cybersecurity at ISTEC (CTeSP). I like taking a project all the way: from the database and the code to the server it runs on, and then trying to break it.
Everything in one placeSecurity, explained to users
Featured · PHP · MariaDB · JavaScript
Finora
A personal finance web app: cards, spending, budgets, payment reminders, savings goals and a tracker for investments. It started as my final school project (PAP) with my classmate Jandro Antunes, who led the UI/UX design, and I kept working on it as a portfolio and security project.
Audited against the OWASP Top 10: prepared statements only, CSRF tokens on every POST, per-user checks against IDOR, rate limiting on login and password reset.
Reads the QR code on Portuguese invoices with the camera and fills in the amount, date and company (looked up by VAT number through VIES).
An assistant that answers questions about your spending, with the model called only from the server and user data kept apart from the instructions.
Deployed by me on an Ubuntu VM in Azure, with Apache, HTTPS and CI on GitHub Actions.
Flutter · Dart · Firebase
STRK
A habit tracker built around streaks. Firebase keys stay out of the repo and are rebuilt from GitHub Secrets in CI, which runs flutter analyze and the tests on every push.
A hybrid mobile app that consumes the Rick and Morty API: character search, detail views, episodes grouped by season and pull to refresh, packaged with Capacitor.
