I AM  LAWALI AM  LAWAL

Engineering isn't just about writing code. It's about building systems people can depend on. LAWAL builds the product, hardens the systems behind it, and secures the people and process in between. Fast for users, hard on attackers.

A selection of projects shown on laptop and phone screens

Every product is a promise: that it works, that it holds, and that it keeps people's data safe.

Every product is a promise: that it works, that it holds, and that it keeps people's data safe.

Projects

I build

01 / 04
SafulPay

Fintech

SafulPay

SafulPay is a groundbreaking fintech company based in Sierra Leone, dedicated to transforming the financial landscape. By offering innovative digital payment solutions, SafulPay empowers individuals and businesses to engage in seamless transactions. With a focus on accessibility and security, this platform aims to enhance financial inclusion, making it easier for everyone to manage their finances and participate in the economy.

Built mobile application using Flutterflow for seamless user experience

Developed agent and merchant dashboards using React, Next.js, TypeScript

Designed a comprehensive multi-app ecosystem for merchants and agents

Created a responsive corporate website to establish brand identity

MarketGist

Dashboard

MarketGist

A comprehensive market analysis platform providing real-time insights into various industries and trends. MarketGist leverages AI-powered analytics to deliver actionable intelligence, helping investors and analysts make informed decisions with confidence.

Built comprehensive stock dashboard using Finnhub API and TradingView

Implemented automated background jobs for personalized AI news summaries

Engineered real-time price alerts and inactivity reminder notification system

Developed high-performance frontend with Next.js 15, React 19, TypeScript

Khariar

AI / ML

Khariar

An intelligent career platform leveraging Gemini AI to evaluate resumes against job descriptions. It provides deep ATS optimization, actionable feedback, and personalized scoring to help job seekers enhance their applications and land interviews.

Engineered an AI-powered 'Career Co-pilot' for comprehensive resume analysis and ATS optimization

Implemented an intelligent PDF parsing pipeline using Gemini AI for deep candidate-to-role matching

Developed robust JSON parsing algorithms to safely handle AI hallucinations and ensure feedback stability

Integrated Puter.js for seamless cloud-based job tracking and secure authentication

LIA

AI Assistant

LIA

LinkedIn Intelligent Assistant is an AI-powered tool designed to supercharge your LinkedIn presence. LIA automates content creation, engagement strategies, and networking outreach, helping professionals build meaningful connections and grow their personal brand effortlessly.

Built AI content generation pipeline for high-engagement LinkedIn posts

Implemented automated networking strategies for effortless professional growth

Developed intelligent outreach engine to facilitate meaningful career connections

Integrated performance tracking analytics for measuring LinkedIn profile impact

Security

Then I test

All security work

Security isn't a final check. It's the second half of the job: I build with it in mind, then test my own work before anyone relies on it.

  1. 01Test it myselfDefences get tried in a lab I control before I trust them.
  2. 02Measure, don't assumeCount what actually got through, not what a tool promises.
  3. 03Write it downEvery test ends in writing: what held, what broke, and the fix.

Recorded in my own isolated lab, against a deliberately vulnerable VM

Featured lab·Self-hosted·Easy

Building a Pentest Lab on Apple Silicon: A Complete Guide

Metasploitable 2 · CVE-2011-2523 · CVE-2019-14287

Read the labReport (PDF)

Proud to have worked with...

The record so far

Projects Delivered

12

Shipped to real users across FinTech, fleet tracking and AI platforms.

Lighthouse Score

100

SafulPay's corporate site, up from 68, in all four Lighthouse categories.

Years Building

3+

From IT operations to production software to application security.

Countries Reached

2+

Products in daily use in Nigeria and Sierra Leone.

Still have questions?

FAQ

Frequently asked

Answers to the questions I hear most often from teams, founders, and recruiters.

I build web applications and then test them the way an attacker would. Most of my shipped work is frontend and full-stack: FinTech dashboards, real-time SaaS and AI platforms in Next.js, React and TypeScript. Alongside that I work on application security from the builder's side: hardening the apps I ship, testing their defences against real attack payloads, and reporting each finding to the team that owns it with the fix attached. Client findings stay with the client. The blog and labs are separate: my own environments and my own projects, written up so others can learn from them and reproduce the work.

Products where both the interface and the engineering underneath it have to hold up. That usually means FinTech dashboards, real-time SaaS, AI-powered platforms and design systems. Recent work spans Trakkam (a multi-tenant GPS fleet SaaS with Mapbox geofencing and live WebSocket tracking), SafulPay (a fintech I helped incubate from an internal product into a standalone company), and Khariar (an AI-powered ATS on the Gemini API). Increasingly that includes the security side of the same builds: auth and session handling, rate limits on AI endpoints, security headers, and a review before launch.

Application security for software I build or join: secure design and code review, hardening (CSP and security headers, auth and session handling, rate limits and abuse controls on AI endpoints), dependency and secret scanning in CI, and a pre-launch review against a written checklist of controls, each with a check you can actually run. I also test defences against real attack payloads; one post on the blog measures what a WAF in front of a production app actually blocked. Formal penetration tests of systems I didn't build happen only with written permission and an agreed scope. I hold the Google Cybersecurity Professional Certificate.

Frontend is my core strength, but I extend into backend, real-time, and self-hosted infrastructure when the build genuinely needs it. The clearest example is Trakkam, a multi-tenant GPS fleet SaaS I shipped end-to-end: Next.js 16, TypeScript, Mapbox geofencing, and live WebSocket vehicle tracking on the frontend, with a NestJS and Prisma API, self-hosted Traccar, NGINX, PM2, and GitHub Actions CI/CD on the back. Running it on a $5/month VPS kept operational costs roughly 8x lower than the equivalent managed setup, without compromising reliability. If your project needs that kind of vertical ownership, I can ship it. If a dedicated backend or DevOps team is already in place, I'll happily slot in on the frontend.

All three. I'm open to senior frontend, full-stack and application security roles, embedded contract engagements with product teams, and well-scoped freelance builds. I'm based in Lagos and also work out of Freetown, which gives me comfortable overlap with EMEA, UK and US-East working hours.

See all questions→

Get in touch today!

LAWAL logo

Engineering isn't just about writing code. It's about building systems people can depend on. LAWAL builds the product, hardens the systems behind it, and secures the people and process in between. Fast for users, hard on attackers.

Explore

  • Home
  • About
  • Tools & Tech
  • Projects
  • Security
  • Labs
  • Blog
  • FAQ

Socials

  • LinkedIn
  • GitHub
  • WhatsApp
Logic
L
Access
A
Workmanship
W
Assurance
A
Longevity
L