# Mahan Mirzaee (ماهان میرزایی) > Mahan Mirzaee is an independent developer and the co-founder and CTO of Sonava. He builds backend systems, security tooling and self-hosted infrastructure, and placed 3rd nationwide in the Nojavan Kharazmi Festival. Open to freelance work. Mahan Mirzaee (Persian: ماهان میرزایی) is an independent developer working across backend software, cybersecurity, AI and self-hosted infrastructure. Open to freelance projects. - Co-founder & CTO of Sonava (https://sonava.thedihmaster.lol); the startup was founded at Sharif University of Technology. - Award: 3rd place nationwide, Nojavan Kharazmi Festival. Statuses are stated as they are: Live, In Development, Prototype or Research. ## Projects - [GhostNet](https://ghostnet.thedihmaster.lol): A honeypot and threat-intelligence system built from real attack traffic rather than theory. Status: Live. Category: Security research. Stack: Python, FastAPI, Linux firewalling, JA3 / JA4 / HASSH, LLM classification. - [EduFlow](https://eduflow.mahanmirzaee.com): A school platform where student wallets, cafeteria payments, administration and online learning share one system. Status: Live. Category: School platform. Stack: TypeScript, Next.js, PostgreSQL, Prisma, Redis. - [Sonava](https://sonava.thedihmaster.lol): A music platform for independent Persian-speaking artists, built around discovery, community and independent music. I co-founded it and am its CTO; the startup was founded at Sharif University of Technology. Status: Live. Category: Music platform. Stack: Node.js, Express, MariaDB, Redis, WebSockets, Electron. - [Horizon](https://horizon.mahanmirzaee.com): A terminal agent that proposes every shell command for approval, snapshots files before each one runs, and can rewind the work and the conversation together. Status: Live. Category: AI tooling. Stack: Python (standard library only). - [Adaptive edge gate](https://mahanmirzaee.com/#p-04): Decides per request whether a visitor passes, gets a challenge or is refused, using reputation learned from the honeypot. Scores decay so a recycled address is not punished forever. Status: Live. Category: Bot detection. Stack: Node.js, Cloudflare Turnstile. - [School Printer](https://print.mahanmirzaee.com): Share one printer with every device on a school network: one command on the printer computer, and everyone else prints from a browser without drivers. Status: Live. Category: Tooling. Stack: PowerShell, JavaScript, pdf.js. - [Self-hosted infrastructure](https://mahanmirzaee.com/#p-06): One Linux server running every project here behind a reverse proxy and tunnel, with service supervision, ban persistence and memory limits learned the hard way. Status: Live. Category: Infrastructure. Stack: Linux, systemd, Caddy, Cloudflare Tunnel. - [Plum LMS](https://lms.mahanmirzaee.com): A platform for an academy with a boarding house: lessons and video, online exams with rankings, student cards with QR scanning and Face ID attendance, in Persian. Status: Live. Category: Learning platform. Stack: React, TypeScript, Express, SQLite. - [Rahkar](https://rahkar.schflow.ir): A training platform with courses, an English track from A1 to C2, and certificates, in Persian. Status: Live. Category: Learning platform. Stack: React, TypeScript, MariaDB. - [Face recognition test bench](https://mahanmirzaee.com/#p-08): A private bench that runs face recognition across many lighting, angle and occlusion conditions to see where it fails. Nothing is stored. Status: Research. Category: AI research. Stack: ONNX Runtime, MediaPipe. - [Musibot](https://github.com/MahanHG88/Musibot): Turns Telegram voice messages, audio files and video notes into downloadable MP3s. Status: Prototype. Category: Telegram bot. Stack: Python, ffmpeg, Docker. - [Telegram forwarders](https://github.com/MahanHG88/Telegram-Bot-Forwarder): Small bots that forward messages between groups, immediately or on a timer. Status: Prototype. Category: Automation. Stack: Python, Telegram Bot API. ## Research interests (exploratory, not published research) - Application and network security: Where do real services leak trust: headers, proxies, sessions, and the assumptions between them? - Defensive security tooling: How much of triage can be automated without letting a false positive lock out a real person? - Bot detection and abuse prevention: Can a client be recognised by how it behaves on the wire, instead of by an address it can change in seconds? - AI inference and local models: What does it take to run useful models on modest hardware, and where does quality fall off? - Speech synthesis and audio: How natural can speech synthesis get for Persian, and what does it cost to run locally? - Self-hosted infrastructure and automation: How far can one small server go, and what has to be automated so it keeps running unattended? ## About I learn a system by building on it, then by trying to break it. Most of what I know came from running my own projects in public: a school platform running in production, a honeypot that faces the open internet, a music platform still taking shape. Each one pulled me into a different layer, from interface to database to firewall. I move between software, infrastructure, security and AI because the interesting problems sit where they meet. I prefer to write down how something works over claiming that it does. I am the co-founder and CTO of Sonava, a startup founded at Sharif University of Technology, and I placed 3rd nationwide in the Nojavan Kharazmi Festival. ## Skills Cybersecurity Research, Python Development, Network Security, Linux Administration, Web Application Security, Backend Development, DevOps & Infrastructure, AI & Machine Learning, Database Engineering, Full-Stack Development ## Stack - Languages and software: Python, TypeScript, JavaScript, Node.js, React, Next.js, Express, FastAPI, Telegram Bot API, Electron - Security and networking: Honeypots, JA3 / JA4 / HASSH fingerprinting, iptables / nftables / ufw, WAF and edge rules, STIX / MISP, Passkeys / TOTP - Infrastructure and automation: Linux, Windows, systemd, Caddy, Cloudflare, Docker, GitHub Actions, PowerShell, Bash - AI and machine learning: LLM API integration, ONNX Runtime, MediaPipe, Local language models (exploring), Speech synthesis (exploring), Inference optimisation (exploring) - Data and architecture: PostgreSQL, MariaDB / MySQL, SQLite, Redis, Prisma, REST APIs, WebSockets ## Contact - Email: contact@mahanmirzaee.com - GitHub: https://github.com/MahanHG88 - Telegram: https://t.me/MahanHG88 - Fiverr: https://www.fiverr.com/mahanhg88 - LinkedIn: https://www.linkedin.com/in/mahanmirzaee/ - Contact form: https://mahanmirzaee.com/#contact ## فارسی ماهان میرزایی، برنامه‌نویس مستقل و فریلنسر: ساخت بک‌اند و ای‌پی‌آی با پایتون و Node.js، ربات تلگرام، اتوماسیون، ابزارهای امنیتی و زیرساخت خودمیزبان. پروژه‌ها: GhostNet، EduFlow و Sonava.