SecOps Flow
DevSecOps lifecycle platform - automated security scanning with Semgrep & Trivy, vulnerability management, 8-phase SDLC pipeline, compliance enforcement, and role-based access control.
NestJSNext.jsPostgreSQLDockerSemgrep
Based in Indonesia
I'm Hamdan, aDevSecOps EngineerSpecializing in
Secure software delivery, full-stack development, and vulnerability discovery.
01 - About
About Me
A backend developer and security engineer bridging software delivery, security, and infrastructure.
0+ Years
Experiences
Hello, I'm Hamdan
I'm a backend Developer and Security Engineer focused on building secure, scalable software - from CI/CD pipelines to production-ready web apps.
I build modern applications with NestJS, Next.js, Laravel, and PostgreSQL, and harden them with automated security scanning and DevSecOps practices.
Full-Stack Development
End-to-end web development with Next.js, React, NestJS, Laravel, Go, and PostgreSQL.
Security Engineering
DevSecOps, automated scanning with Semgrep & Trivy, API threat modeling, vulnerability management, and secure SDLC.
DevOps & Infrastructure
CI/CD with Jenkins, containerization with Docker & Kubernetes, Nginx, and Linux administration.
03 - Work
Selected Projects
A collection of my best work in software development, security engineering, DevSecOps, and open-source contributions.
DeployDash
Self-hosted deployment automation platform with one-click SSH deploys, real-time WebSocket logs, auto-polling Git, instant rollback, role-based access, and pipeline editor.
NestJSNext.jsPostgreSQLWebSocketDocker
nest-scan
A static analysis tool for NestJS codebases. Point it at a GitHub repo and it produces a security and code quality report - broken down by analyzer, with AI-powered explanations.
TypeScriptNestJSSecuritySAST
matcha
A Python SAST CLI for JavaScript, TypeScript, NestJS, and Next.js codebases - scans source code for security issues straight from the terminal.
PythonSASTSecurity