i'm arfat. i build the parts of software nobody sees. auth, infra, the security layer that gets bolted on last.

Backend engineer at SageTeck in Islamabad. Most of my time outside the day job goes to Beruni: a read-only AWS security scanner I'm building for startups that ranks findings by what can actually reach your data, not raw severity. It's in closed beta at beruni.app.

Before that, my senior project at FAST-NUCES was IntraSec, a client-less network vulnerability scanner. Building it is what made this feel real. There's a writeup.