Web systems built to survive production.
I'm Ali — a full-stack developer in Amman with eight years on Laravel, custom WordPress, and the servers underneath. Now finishing a master's in cybersecurity, which means I read code the way an attacker would.
Three things I get hired for
Most clients come for one and stay for all three. You deal with one person from the first call to the live site.
Build
Custom applications and websites written from scratch — no bloated page-builder templates you will regret in a year.
- Laravel applications
- Custom WordPress themes & plugins
- REST APIs and integrations
- MySQL schema design
- Responsive front-ends
Deploy & Run
The part most developers hand off. I set up the hosting, the domain, the certificates, and the backups myself.
- cPanel & shared hosting setup
- Domain, DNS, SSL certificates
- Cloudflare & caching
- Zero-downtime migrations
- Speed and Core Web Vitals
Secure
Hardening and cleanup backed by graduate-level security research, not a plugin someone installed once and forgot.
- Malware removal & recovery
- Access control review
- Input validation audits
- Dependency risk checks
- LLM prompt-injection defence
Shipped, live, and still maintained
Every project below went to production and was handed over with documentation. Filter by what you need.
KD Grinding Media
Custom WordPress theme for a B2B grinding-media manufacturer. Bilingual product catalogue, downloadable spec sheets, and lead capture — built from a blank theme rather than a marketplace purchase.
Inventory Dashboard
Laravel back office for a distribution company: role-based permissions, full stock movement history, and printable reports the warehouse team actually uses.
Server Rescue & Migration
Inherited a multi-domain hosting account with a broken document root and constant SSL 526 errors. Restructured the cPanel layout, fixed the certificate chain, and moved the site cleanly.
Prompt-Injection Defence Framework
Master's research: a layered pipeline that separates instructions from data, sanitises context, and scores untrusted content for injection risk before it ever reaches a language model.
Bilingual Corporate Site
Arabic and English WordPress build with a proper RTL layout, a careers portal, and structured data that search engines actually read.
Booking & Payments Flow
Reservation system with local gateway integration, automated invoice emails, and an admin calendar that refuses to double-sell a slot.
Where my hours actually go
The bars are honest — they show how much of my working time each area takes, not a self-graded score out of 100.
Tools on my desk
- Laravel
- PHP 8
- WordPress
- WooCommerce
- MySQL
- JavaScript
- jQuery
- Bootstrap
- Tailwind
- REST APIs
- Git
- Composer
- cPanel
- Cloudflare
- Nginx
- Linux
- Oracle Forms
- Python
- Figma
- Elementor
Also worth knowing
- Arabic & English delivery
- RTL layouts done properly
- Documented handover
- Post-launch support
From first message to live site
No surprises and no mid-project price changes. You know the scope and the number before I write a line of code.
-
01
Call & scope
We talk for twenty minutes about what the site has to do and who it is for. If I am not the right fit, I will say so and point you elsewhere.
-
02
Written quote
A fixed scope, a fixed price, and a delivery date — in writing, before anything starts. Payment split across milestones.
-
03
Design sign-off
You see the layout and approve it before development begins. Changing a design is cheap; changing built code is not.
-
04
Build & weekly demo
You get a working staging link and a short update every week. No black box and no month of silence.
-
05
Launch & hardening
Deployment, SSL, backups, speed tuning, and a security pass before the site goes public.
-
06
Handover & support
Documentation, a walkthrough recording, and 30 days of free fixes. Monthly maintenance afterwards if you want it.
Where I've been
MSc Cybersecurity
Web Developer, Team Lead
Web Developer
Oracle & Database Developer
Computer Labs Supervisor
BSc Computer Information Systems
What people say afterwards
Exceptional service and a thorough understanding of both the problem and the solution. We are continuing this partnership indefinitely.
Notes from the work
Occasional posts about the things clients keep running into.
Before you message me
A small business site usually lands between a few hundred and a few thousand dinars depending on page count, languages, and whether it needs a custom back end. I quote a fixed price after a short call — never an open hourly meter.
A straightforward brochure site is two to three weeks. A custom Laravel application is six weeks and up. The written quote includes the delivery date, and you get a staging link every week so you can see progress.
Yes — rescue work is a large part of what I do. Broken hosting, hacked WordPress installs, slow sites, or a codebase the previous developer abandoned. I audit it first and tell you honestly whether fixing or rebuilding is cheaper.
Yes, and properly. RTL is a layout problem, not a mirrored stylesheet — typography, number formatting, icon direction, and form flow all need attention. I deliver bilingual sites regularly.
I can set up hosting on your own account and manage it, or hand you everything documented so another team can take over. Monthly maintenance covers updates, backups, security monitoring, and small content changes.
Usually, yes. I clean the infection, find how they got in, close it, and restore from a known-good backup where one exists. You get a short written report of what was exposed — which matters if you hold customer data.
You do, in full, once the final payment clears. You get the repository, the database, and the credentials. No licensing games and no lock-in to me.
Regularly. Most of my communication is asynchronous anyway. Amman is GMT+3, which overlaps comfortably with Europe and the Gulf and gives a few usable hours with the US East Coast.
Let's talk about your project
New build, rescue job, or a system nobody else wants to touch. Tell me the details and I will reply within a day with an honest answer.