2020
Discovering the Digital World
This is the year the screen stopped being just a screen. I started asking how websites, apps and games actually work behind what you see. Curiosity came first, and everything else followed from it.
Mahan Mirzaeeماهان میرزایی
Security, systems
& software
Running on my own server
EduFlow, GhostNet, School Printer, Rahkar, Horizon, Plum LMS, Sonava, and the site you are reading
Featured work
Select recent and notable projects
More work
Take a scroll, stay a while
mahanmirzaee.com Live
Bot detection
Adaptive edge gate LivePassChallengeRefuse
EduFlow, mobile Live
Infrastructure
Self-hosted server LiveTelegram botVoice
→ MP3
Musibot Prototype
→ MP3
GhostNet, mobile Live
AI research
Face recognition bench Research
Rahkar, mobile Live
Sonava, mobile Live
Horizon, mobile Live
School Printer Live
AutomationGroup A
→ Group B
Telegram forwarders Prototype
→ Group B
What I do
Four kinds of work I take on. Pick a record.
Security
Honeypots, attack fingerprinting and firewalls that ban on evidence. I build defences from real attack traffic, and check web apps before attackers do.
Tools of choice:
Projects built with it:
From 2020 to today
2020Discovering the Digital World1 / 7
About
I learn a system by building on it, then by trying to break it. I am an independent developer working across backend software, cybersecurity, AI and self-hosted infrastructure.
Everything above runs on one Linux server I look after myself. Some of it is live, some is still being built, and some is research. I am open to freelance projects.
Skills
Tools I have actually used
Grouped by area. Items marked exploring are things I am learning, not things I would sell.
Languages and software
- Python
- TypeScript
- JavaScript
- Node.js
- React
- Next.js
- Express
- FastAPI
- Telegram Bot API
- Electron
Security and networking
- Honeypots
- JA3 / JA4 / HASSH fingerprinting
- iptables / nftables / ufw
- WAF and edge rules
- STIX / MISP
- Passkeys / TOTP
Infrastructure and automation
- Linux
- Windows
- systemd
- Caddy
- Cloudflare
- Docker
- GitHub Actions
- PowerShell
- Bash
AI and machine learning
- LLM API integration
- ONNX Runtime
- MediaPipe
- Local language modelsexploring
- Speech synthesisexploring
- Inference optimisationexploring
Data and architecture
- PostgreSQL
- MariaDB / MySQL
- SQLite
- Redis
- Prisma
- REST APIs
- WebSockets
Desk
Grab anything and throw it.
GhostNethoneypot
Sonavamusic app
Say hi[email protected]
Email[email protected]
EduFlowschool platform
Mahanthat's me
The serverruns all of this
Horizonterminal agent
School Printerprint from anywhere
Keyboardwhere it all happens
Coffeefuel
Rubber ducksenior debugger
Headphonesfocus mode
Laptopthe other office
Mousefor the rare click
Bugfound it, fixed it
Rocketdeploy day
Padlocksecurity first
Pizza3 a.m. hotfix
Mahan, seen from the outside
Another view
Most people with a portfolio this long have a folder of demos. Mahan has a server. The school platform, the music app, the printing tool and the AI agent on this page are things real people use, and he is the one who answers when they break. That changes how he works. He thinks about the person on the other end first: the student on a slow mobile connection, the teacher confused by a form, the visitor who should never have to solve a puzzle just to read a page.
He is direct. His messages are short, often a single word, and when he asks for a grade out of ten he means it. He has strong taste and knows it: he has thrown away whole designs because they felt generic, and he will send a screen recording rather than a paragraph to show what he wants.
He would rather hear it's a six than be told it's perfect.
Not all of it is code. He co-founded a company, a lot of what he builds is for schools and students, and he moves between Persian and English, and the six other languages on this site, as a matter of habit. The work is practical, a little stubborn about doing things properly, and rarely about showing off.
The honest flip side: he starts more than one person can comfortably carry. There are always several projects running and a list of things he means to come back to. So far, he does come back, and each thing he builds is a little more careful than the one before.
An outside view, from someone who has watched him work
running now
- GhostNethoneypot & threat intel
- EduFlowschool wallet & classes
- Sonavamusic platform · CTO
- School Printerprinting for schools
- HorizonAI agent for the terminal
security first · fail loud, never silent · bans are leases, not sentences · measure, then fix · real data, never invented · nothing an attacker sends is executed
See the code on GitHub@MahanHG88Say hello
Send me a text. It actually reaches me.