Backend engineer building distributed systems, security tooling, and real-time infrastructure.
I reverse-engineer software to understand how things actually work — not how the docs claim they do.
Security is not a feature I bolt on. It is baked into the architecture from day one.
name : Vorsynth
handle : @alanhasn
focus : Backend Systems · Infrastructure · Security Engineering
approach : Security-first. Understand internals before abstractions.
current : Building SMBN — a distributed real-time backend platform
location : Remote — UTC+0..+3|
Django · DRF · FastAPI |
Docker · Linux · Git |
Static Analysis · Web Security |
Kotlin · Android Studio · Android SDK |
🔐 SecureTool — Python Security Library
pkg : securetool
registry : PyPI
lang : Python
type : Open-Source Security Library
purpose : Reusable security primitives for Python applications
scope : Encryption helpers, secure hashing, token generation,
input validation, and audit-friendly logging utilities
status : Published · Actively maintained
🕸 Vulnerability Scanner — Web Application
lang : Python · Django · JavaScript
type : Internal Security Platform
scope : Automated web vulnerability scanning with a structured
report interface. Covers OWASP Top 10 surface areas,
HTTP header inspection, and endpoint enumeration.
arch : Django backend · REST API · async scanning workers
status : Active development
⚡ XSScan — Production-Grade XSS Detection Tool
stack : Python · Requests · CLI · HTML Parsing · Payload Automation
type : Security Testing & Vulnerability Detection Tool
scope : Production-grade command-line utility for detecting
Cross-Site Scripting (XSS) vulnerabilities through
automated payload injection, response analysis,
parameter testing, and target validation workflows.
features : Reflected XSS detection · Automated scanning workflows · Security testing utilities
release : Published on PyPI
focus : Web Security · Automation · Offensive Security Tooling
status : Actively maintained and improved+ Backend systems engineering — Django, DRF, API architecture
+ Docker & Redis — containers, caching, real-time communication
+ Android development — Kotlin, Android Studio, application internals
+ Networking & security — traffic analysis, authentication flows, web security
~ Building security-focused and infrastructure-oriented projects
~ Learning through documentation, experimentation, and real-world systems┌─────────────────────────────────────────────────────────────┐
│ │
│ 01 Security is architecture, not a feature you add later │
│ 02 Read the source. The docs lie. The code does not. │
│ 03 Understand the protocol before touching the library │
│ 04 Break systems deliberately. Fix them with precision. │
│ 05 Automate the repeatable. Think harder on the novel. │
│ 06 Clean code is a forcing function for clear thinking │
│ 07 Know the failure modes before the system ships │
│ │
└─────────────────────────────────────────────────────────────┘
// commit trail
open to collaboration on:
[✓] Backend API systems — Django, FastAPI, async architectures
[✓] Security tooling — scanners, analyzers, audit libraries
[✓] Infrastructure automation — Docker, CI/CD pipelines
[✓] Monitoring & observability platforms
[✓] Real-time communication backends — WebSocket, Socket.IO
[✓] Developer utilities with real-world use cases
values:
clean architecture · readable code · technical transparency
security-aware design · meaningful documentation
