Hello, I'm
Bader A.
Full-stack developer. I design, build and run production software for real businesses, end to end.
$ git log --graph --all
Let's build the software your business runs on.
I'm Bader A., a full-stack developer and founder based in Australia. I take operational businesses into production software and stay until it runs.
For an international logistics company I designed and launched the freight platform that handles their booking, tracking and customs clearance. With BaseClinical I'm building healthcare software for Australian clinics as a founder. Marketframe turns market data into analysis, and Tracehound, my network sensor, is open source.
Frontends in React and Tailwind CSS, backends on Node.js and PostgreSQL, tooling in Python, shipped in Docker and deployed to your own domain. One pair of hands, the whole machine.
$ whoami
Bader A., full-stack engineer and founder
$ bader --stack
languagesJavaScript · TypeScript · Python
frontendReact · Next.js · Tailwind CSS
backendNode.js · PostgreSQL · Supabase
opsDocker · Cloudflare
$ bader --projects
freightlogistics platform · deployed
BaseClinicalclinic SaaS · in build
Marketframemarket analysis · private
Tracehoundnetwork sensor · open source
$
Selected work
Freight platform
Booking, tracking and customs clearance online for an international logistics company that ships worldwide and has served over a hundred countries. The client is under NDA, so it is described here by what it does rather than named.
- client
- International logistics company, under NDA
- role
- Design, build, launch
- reach
- Worldwide, 100+ countries served
- stack
- JavaScript, Supabase, PostgreSQL, Cloudflare
CN-1042 · customs cleared · Jebel Ali
$ freight network
reach100+ countries
regions6 continents
modessea, air, road
$ freight online
bookingok
trackingok
customs clearanceok
BaseClinical
A multi specialty clinic SaaS: dermatology and cosmetology consults drafted by AI, batch level stock control, consent and scheduling.
- role
- Founder
- stack
- Next.js, React, TypeScript, Tailwind CSS, Supabase
consultintake›ai draft›review›plan
$ base modules
schedulingok
recordsok
ai notesok
stockok
consentok
telehealthok
$ base schedule --today
09:30derma consultconfirmed
11:00filler follow uparriving
14:15patch test reviewbooked
$ base stock --audit
batch TX-2041 toxin 300u ok
batch FL-1188 filler 1ml low, reorder drafted
register schedule 4 2 entries today
$ base consult --derma
intake skin assessment drafted by AI
risk flags none consent signed
plan cosmetology review in 14 days
$
Marketframe
A custom built analysis tool: it pulls market and company data together, derives the measures that matter from it, and turns them into the correlations, factor views and reports a decision gets made from. Built for one client, so there is nothing public to visit.
- role
- Design, build
- focus
- Data modelling and market analysis
- stack
- Python, pandas, PostgreSQL
- access
- Private, custom build
monte carlo, 64 paths
terminal distribution
5th to 95th percentile
An animated Monte Carlo simulation: many simulated paths fanning out from a single point with a percentile band and a median, and a histogram of terminal outcomes. It carries no figures or performance claims.
$ marketframe pipeline
ingestmarket and company data
derivemeasures and relationships
simulatepaths and scenarios
reportviews and exports
$ marketframe outputs
scenariosok
risk bandsok
scheduled reportsok
Open source
Tracehound
A passive network sensor that finds command and control traffic, DNS tunnels and data exfiltration, then shows the numbers behind every call it makes. It fingerprints TLS clients with JA4 across both TCP and QUIC, maps what it sees to MITRE ATT&CK, and ships as one static Go binary with the dashboard compiled in.
- role
- Author, maintainer
- stack
- Go, gopacket, SQLite, JA4
- licence
- MIT, public repository
passive sensor, shield holding
flagged flows detonate on the shield
An animated diagram: network hosts sending traffic toward a passive sensor, with suspicious flows intercepted at a pulsing shield and labelled with the detection rule that fired.
$ tracehound replay demo.pcap -min-severity high
[HIGH] TH-0002 Probable DNS tunnelling to exfil.example
10.0.0.66 -> 10.0.0.1:53 score 0.96
ATT&CK: T1071.004, T1048.003, T1572
queries=46 unique_ratio=1 avg_entropy_bits=4.53
[HIGH] TH-0001 Periodic beaconing to 198.51.100.23:443
10.0.0.66 -> 198.51.100.23:443 score 0.96
ATT&CK: T1071.001, T1573
connections=20 interval_mean_s=59.06 jitter_pct=5.73
[HIGH] TH-0003 Port scan: 121 ports on 10.0.0.10
10.0.0.99 -> 10.0.0.10 score 0.56
ATT&CK: T1046
ports_probed=121 open_ports=5 duration_s=33.3
$
Detectors
- TH-0001C2 beaconingT1071.001 · T1573
- TH-0002DNS tunnellingT1071.004 · T1048.003
- TH-0003Vertical port scanT1046
- TH-0004Horizontal sweepT1046 · T1018
- TH-0005Data exfiltrationT1041
- TH-0006New deviceasset inventory
- TH-0007Rare TLS stackT1573
What I do
3D, move to tilt
Product design
Interfaces people actually finish tasks in.
flows · design systems · prototypes
Full-stack build
React and TypeScript frontends, Node.js APIs, real backends.
web apps · portals · dashboards · auth
Data and integrations
PostgreSQL schemas, row level security, webhooks, third party APIs.
migrations · payments · email · tracking
Security and detection
Passive network sensing in Go: TLS fingerprinting, command and control and exfiltration detection, findings mapped to MITRE ATT&CK.
JA4 · beaconing · DNS tunnelling · ATT&CK
Operations and launch
Docker deploys, auth, auditing, backups, monitoring, and the unglamorous week after.
CI · secrets · least privilege · uptime
Websites and deployment
Sites and web apps designed, built and actually put live: your own domain, DNS, SSL, CDN and analytics configured properly, deploying straight from your repository.
domains · DNS · SSL · CDN · CI deploys
How I work
$ scope
Understand the problem
A short call and a few honest questions about how your business actually runs, where the time goes, and what has to change.
you get: a written plan, timeline and price
$ design
Design the product
Flows and interfaces you can click and react to before real code exists. Cheap to change now, expensive later.
you get: clickable screens to approve
$ build
Build it properly
Typed code, real data, migrations, tests where they matter. Progress you can see, not progress you are told about.
you get: a working demo every week
$ run
Run it in production
Deploys, monitoring, backups and the fixes after launch. Software is a running thing, not a handover file.
you get: a system that stays up, and me on call
What do you need?
You have an idea, or a process running on spreadsheets, and no software yet.
- Agree what version one has to do, and what it deliberately will not do
- Clickable screens before any code, so changes are cheap
- Build it with real data, deploy it, and keep it running
you get: a working product in production, not a prototype
Available for work