Case Studies
A wedding marketplace built from nothing, run by two people.
Vowlio is an AI powered wedding planning and vendor marketplace: guest lists, budgets, seating charts, a day of timeline tool, an AI vendor matching engine, and a full vendor side CRM with contracts, invoicing, and subscription billing. I built the entire technical stack solo on ASP.NET Core, Azure SQL, and Stripe, with a directory seeded from 89,000 vendor listings across more than 120 cities and full localization into 4 languages.
The interesting engineering problems were not the obvious ones. Payment plan logic that has to stay correct across four tiers and two currencies. A directory search that has to stay fast at scale. Fraud and bot resistance after a coordinated account creation attack. The kind of problems that only show up once real users and real money are involved, which is exactly the environment I wanted to be building in.
Accessibility scanning, built to go up against the established players.
SiteGuardian scans websites for WCAG accessibility violations using three separate scanning engines running in parallel, with four subscription tiers built on a separate Stripe integration from Vowlio. Built on the same ASP.NET Core foundation, deployed independently, designed from day one as a reusable base I could stand up a second product on quickly.
In pilot discussions
GovSaaS
Municipal software, built the way a government security review actually wants to see it.
GovSaaS is a multi tenant work order platform for municipal governments, currently being evaluated by local government for a Public Works pilot. Every department's data is isolated at the database query level, not just hidden in the interface. Every change to every record is captured in an immutable, field level audit log, not just a last modified timestamp. Three distinct access tiers, from public facing citizen submissions through to full administrative control, each enforced independently at both the route and the data layer.
This is the project where the standard I hold myself to shows most clearly: not just working software, but software that would hold up under an actual security audit, because it was built assuming one would happen.