Available for Intern & Work

WISNU ALFIANNUR ASHAR

Building Secure, High-Performance Production Systems

Get in TouchDownload CV

Cyber SecurityAISoftware EngineeringDevOps

Explore
Skill Universe

Step inside
my skills

Four realms, one engineer. Drag to orbit, tap to interact, and play a 30-second mission in each — every scene is rendered live in your browser.

Your browser cannot run WebGL — the realms below describe the same skills.

Firewall DefenderCyber SecurityTap incoming packets before they breach the core.
Score
0
Best
0
Combo
–

Drag to orbit · pinch / scroll to zoom · tap a marker

Read this realm as text
01

Cyber Security

External and internal penetration testing with structured vulnerability reporting. OWASP Foundation member who ships security fixes to open source (OWASP, NVIDIA) and hardens every app with RBAC, JWT and zero-trust thinking.

How I test & report

  1. Scope & recon. Agree scope and rules of engagement, then map the attack surface — external or internal — before touching anything.
  2. Scan & enumerate. Find exposed services, endpoints and misconfigurations with tools such as Kali Linux and Burp Suite.
  3. Exploit & validate. Confirm each finding with a safe proof of concept and rate its real impact, without causing damage.
  4. Report. Write a structured vulnerability report: description, severity, reproduction steps, evidence and clear remediation advice.
  5. Fix & retest. Help close the gap — RBAC, JWT, CSP, zero-trust hardening — then re-test to verify the hole is really shut.

Toolkit

  • Penetration Testing
  • Kali Linux
  • Burp Suite
  • Zero-Trust Architecture
  • Cloud Security
  • OWASP

Projects

Bug bounty & reports

  • TrickHLA — High Level Architecture Simulation Engine — NASA · Logic Bug
  • MSTest Framework — Microsoft · Architecture Contract Failure
  • Keyborg Accessibility Library — Microsoft · Memory Leak
  • Infrastructure Controller — NVIDIA · Vulnerability
  • Security Cheat Sheet Series — OWASP Foundation · Vulnerability Research
  • Transformers Engine — Hugging Face · Logic Bug
  • Site Kit Analytics — Google / WordPress · Logic Bug
  • Agent Skills — Google Engineering Fellow · Configuration Error
  • ADK Python & Samples — ADK Ecosystem · Silent Type Error
02

AI Engineering

Computer vision with YOLOv8 and OpenCV, LLM products on Gemini, Groq and NVIDIA APIs, retrieval-augmented generation and ML classifiers — served through FastAPI and shipped to production.

From data to deployed model

  1. Collect & annotate. Gather and label data (Roboflow, Kaggle) so the model learns from clean, representative examples.
  2. Train & fine-tune. Fine-tune models such as YOLOv8 with PyTorch / Hugging Face and track what actually improves results.
  3. Evaluate. Measure with mAP, precision and recall — not vibes — and keep the evaluation reproducible.
  4. Serve. Expose the model through FastAPI behind a Next.js product UI, deployed on Railway / Vercel / Cloud Run.
  5. Secure & monitor. Add audit trails, JWT auth and zero-trust boundaries so AI features are safe to run in production.

Toolkit

  • Claude Code
  • AI Agents
  • MCP
  • RAG
  • Google Gemini
  • FastAPI
  • YOLOv8
  • OpenCV
  • Hugging Face

Projects

Competitions

  • Vibe Coding Winner — Google · June 2026
  • Web Development Category Participant — Codelab Indonesia · June 2026
  • Participant Data Automation Competition — PUMA Information System President University · June 2026
  • AI Open Innovation Challenge 2026 — President University & Coordinating Ministry of Economic Affairs RI · February – August 2026
03

Software Engineering

Full-stack systems end to end: Laravel, Next.js, Go and ASP.NET on PostgreSQL. An ERP/POS platform serving thousands of customers, 1.34 s load time and 91% good LCP, plus 3,300+ GitHub contributions.

From idea to production

  1. Design. Model the domain, pick the architecture (monolith, clean architecture or microservices) and design the database first.
  2. Build. Ship features end to end with Laravel, Next.js, Go or ASP.NET — typed, reviewed and documented.
  3. Test. Unit and integration tests plus QA / UAT so releases are boring in the best way.
  4. Ship. Containerise and deploy (Docker, Vercel, Railway) with environment-specific config and secrets handled safely.
  5. Optimise. Measure Core Web Vitals, cache aggressively and put a CDN in front — fast is a feature.

Toolkit

  • Laravel
  • Next.js
  • TypeScript
  • Golang
  • PostgreSQL
  • Astro
  • WhatsApp Gateway
  • Email Gateway
  • Webhooks

Projects

Experience

  • Software Developer Intern — PT GRAHABUANA CIKARANG · August 2026 - December 2026
  • Full Stack Engineer — ASHAR GROSIR PARFUM BEKASI · December 2025 - Present
  • Web Development Intern — GAOTEK INC · April 2026 - July 2026
04

DevOps & Cloud

Containerised, observable and fast: Docker, Redis, RabbitMQ and OpenTelemetry behind Cloudflare CDN, deployed on Vercel, Railway and Google Cloud Run. Completed AWS Cloud Practitioner Essentials and AWS Technical Essentials training.

The release pipeline

  1. Commit. Small, reviewable commits on short-lived branches keep the main branch always releasable.
  2. Build. Reproducible Docker builds so what runs on my laptop is what runs in production.
  3. Test. Automated tests gate every change before it gets near users.
  4. Security scan. Dependency and configuration checks catch known-vulnerable packages and unsafe defaults early.
  5. Deploy. Roll out to Vercel, Railway or Google Cloud Run behind Cloudflare, with an easy way back.
  6. Observe. Telemetry (OpenTelemetry, Prometheus-style metrics) shows how the release behaves in the real world.

Toolkit

  • Docker
  • Cloudflare
  • Firewall & WAF
  • Linux Server
  • Vercel
  • Railway
  • Google Cloud Run
  • AWS

Projects

Cloud training

  • AWS Cloud Practitioner Essentials – Training Completion — Amazon Web Services (AWS) · March 2026
  • AWS Technical Essentials — Amazon Web Services (AWS) · January 2026
  • Cybersecurity
  • Kali Linux
  • Cloudflare (WAF, DNS & SSL)
  • Docker
  • Vercel
  • Railway
  • Google Cloud Run
  • Firebase
  • Google Gemini
  • HuggingFace
  • FastAPI
  • YOLOv8
  • OpenCV
  • React
  • Next.js
  • Astro
  • TypeScript
  • JavaScript
Who Am I?

Discover My
Engineering
Journey

Wisnu Alfian Nur Ashar

Information Technology undergraduate at President University specializing in Full-Stack Engineering, with 3,300+ GitHub contributions across 100+ repositories. Experienced in building production-ready enterprise systems — including an ERP/POS platform serving thousands of customers through my store website — using Laravel, Next.js, PostgreSQL, Go, and modern cloud technologies. Skilled in external and internal penetration testing with structured vulnerability reporting. Active open-source contributor (NASA, Microsoft), OWASP Foundation member, and IBM SkillsBuild AI Builders Challenge participant.

Wisnu Alfian Nur Ashar
Selected Work 2024–2026

Building Solutions
with Engineering Excellence

Five flagship projects — from cybersecurity to AI — built end-to-end and running in production.

Full-Stack Developer

Ashar Grosir Parfum

Official E-Commerce platform for a 20-year-old perfume wholesaler serving 15,000+ partners. Optimized for scale with edge delivery and streamlined wholesale distribution.

  • React
  • TypeScript
  • Cloudflare
  • Tailwind CSS
  • CDN
View detailsLiveCode

Full-Stack Architect

SENTINEL-X

Multi-Domain Threat Intelligence & Fusion Platform (23+ GitHub stars, 10 forks). An integrated educational proof-of-concept simulating situational awareness, AI-based correlation with Multi-Modal architecture, and real-time incident response across 6 domain sources (Aviation/ADS-B, Maritime/AIS, Cyber, Space, Seismic, RF/SIGINT). Features blockchain audit trail via Ethereum smart contracts, 3D globe visualization, and explainable AI threat classification.

  • PyTorch
  • FastAPI
  • React
  • Kafka
  • TimescaleDB
View detailsLiveCode

Full-Stack Developer & System Architect

CogniMail

Self-hosted email security platform combining rule-based analysis, supervised ML (XGBoost, TF-IDF), anomaly detection (Isolation Forest, One-Class SVM), and SpamAssassin with weighted decision fusion. Features multi-layer evasion detection (homograph, zero-width chars, JS obfuscation, RTL override, brand spoofing), continuous automated ML retraining, async queue pipeline, role-based mail oversight (superadmin, admin, end user), and zero-trust mailbox isolation.

  • Python 3.11
  • FastAPI
  • React 19
  • PostgreSQL 16
  • Redis 7
View detailsLiveCode

Backend Developer

Zentic Enterprise

Enterprise-grade expense requisition system built with Clean Architecture on ASP.NET MVC 10, Entity Framework Core, and SQL Server. Features multi-tier approval workflows, fraud detection with real-time flagging, 3-way matching (PO/Invoice/Goods Receipt), vendor management, immutable audit logs, and comprehensive finance dashboard with KPI tracking. Implements BCrypt password hashing, AES-256-GCM encryption, and rate limiting for security.

  • ASP.NET MVC 10
  • .NET 10
  • C#
  • SQL Server
  • Entity Framework Core
View detailsLiveCode

Full-Stack Developer

Finance-Requester

Enterprise-grade Payment Requisition System (PRS) for managing payment requisitions with multi-tier approvals, budgets, vendors, purchase orders, and cash advance settlements. Built with decoupled architecture using Laravel 12 backend API and Next.js 16 frontend, fully orchestrated via Docker. Features real-time SSE updates, 3-way matching, batch payments, RBAC, audit logging, and S3-compatible MinIO storage.

  • Next.js 16
  • Laravel 12
  • React 19
  • PostgreSQL 16
  • PHP 8.2
View detailsLiveCode
Browse all work
My Process

My Creative
Workflow

Get in Touch

1. Discovery

I dive deep into understanding your business needs, technical goals, and target users. Through detailed consultations and research, I gather essential insights that inform the entire development process.

2. Architecture

I design scalable and maintainable system architecture. This step focuses on selecting the right technology stack and design patterns that align with your project needs.

3. Development

I transform the architecture into a fully functional application. This phase involves meticulous coding and integration to ensure your system is responsive and performs seamlessly across environments.

4. Launch

I rigorously test the website to ensure everything functions flawlessly before going live. Post-launch, I provide support and guidance to help you maximize your new online presence.

What I Offer

Building Solutions
Through Engineering

Frontend Development

Building responsive and performant web interfaces using React, Next.js, and Astro with TypeScript.

  • React, Next.js & Astro
  • TypeScript & Tailwind CSS
  • Performance & SEO Optimization

Full-Stack Development

Building end-to-end full-stack applications with Laravel, Next.js, ASP.NET, and PostgreSQL — from API to production deployment.

  • Laravel & Next.js
  • ASP.NET & C#
  • PostgreSQL & REST API
  • Docker & Cloud Deploy

System Architecture

Designing scalable, maintainable, and robust system architectures to support long-term business growth.

  • Microservices & APIs
  • Database Design
  • Cloud Infrastructure
Why Choose Me

Why Work with Me

Clean Code

I believe that every project deserves maintainable, well-documented code that follows best practices.

User-Centric Approach

With a strong focus on user experience, I build applications that are intuitive and easy to use.

Modern Technologies

I stay at the forefront of technology and best practices to offer you the most effective solutions.

10+
Production Apps

Delivering scalable enterprise and production applications.

1000+
Store Customers

Serving thousands of customers through my store website with a high-performance platform.

100+
GitHub Repos

Active contributor with 3,300+ contributions across open-source and personal projects.

7+
Open-Source Orgs

Active contributor to NASA, Microsoft, Google, NVIDIA, OWASP, Hugging Face & ADK.

Experience & Leadership

Work
Experience

Swipe, drag or use the arrows to travel through the timeline. Tap a card to bring it forward.

Work roles
3
Organizations
5
Ongoing
6
Active since
2024
  1. OrganizationNow2024

    IT Development & Talent Division

    PC FKMA Jakarta As'adiyah

    January 2024 - Present · Ciputat Timur, Banten · Organization

    Architected and deployed the official organization website, managed the Talent & Interest division, and implemented automated alumni data integration systems.

    • Web Development
    • Event Management
    • Teamwork
  2. Organization2024

    Member – Students Passion & Talents Division

    PUMA Informatics – President University

    September 2024 - August 2025 · President University, Bekasi · Organization

    Organized 3+ tech events for 100+ students with 95% attendance rate. Coordinated academic workshops and supported knowledge-sharing initiatives to enhance student IT skills.

    • Event Management
    • Communication
    • Teamwork
  3. OrganizationNow2025

    Vice – Art and Sport Division

    PUFA Computer Science – President University

    September 2025 - Present · President University, Bekasi (On-site) · Organization

    Led 5+ art and sports activities for 60+ students, achieving a 40% increase in departmental engagement. Organized campus events for 100+ students while coordinating volunteers and logistics.

    • Leadership
    • Event Management
    • Communication
  4. WorkNow2025

    Full Stack Engineer

    ASHAR GROSIR PARFUM BEKASI

    December 2025 - Present · Kota Bekasi (Hybrid) · Self-employed

    Built an enterprise ERP/POS platform (Laravel, Next.js, PostgreSQL) with inventory, payroll, BI dashboards, AI Copilot, and RBAC — serving 6 admins, 600+ products, 50+ resellers. Achieved 1.34s load time and 91% Good LCP via Cloudflare CDN. Automated wholesale ops supporting 100+ daily transactions, cutting financial reconciliation time by 60%.

    • Laravel
    • Next.js
    • PostgreSQL
    • Cloudflare
    • ERP/POS
    • AI Copilot
  5. OrganizationNow2026

    Member

    IBM-SkillsBuild-AI-Builders-Challenge

    2026 · Remote · Organization

    Collaborated on AI-powered solutions and gained hands-on experience with IBM Cloud and AI technologies.

    • AI/ML
    • IBM Cloud
  6. OrganizationNow2026

    Member

    OWASP Foundation

    2026 · Remote · Organization

    Active member contributing to security research and open-source security tools.

    • Cybersecurity
    • Security Research
  7. Work2026

    Web Development Intern

    GAOTEK INC

    April 2026 - July 2026 · New York, USA (Remote) · Internship

    Built and maintained responsive WordPress websites using PHP, HTML, CSS, JavaScript, Elementor, and Gutenberg. Applied SEO best practices to improve usability and search visibility. Collaborated in an Agile remote environment via Microsoft Teams.

    • WordPress
    • PHP
    • JavaScript
    • SEO
    • Elementor
    • Agile
  8. WorkNow2026

    Software Developer Intern

    PT GRAHABUANA CIKARANG

    August 2026 - December 2026 · Cikarang, Bekasi (On-site) · Internship

    Full-stack development intern in Digital Operation Department at Jababeka's leading property developer. Perform minor bug fixing, handle technical support tickets, and maintain databases. Develop system enhancements using PHP, Node.js, Vue.js frameworks. Conduct deployment testing, intensive QA/UAT, and collaborate across functional teams. Apply strong SDLC understanding with relational databases, NoSQL, cloud databases, and system integration.

    • PHP
    • Node.js
    • Vue.js
    • SDLC
    • MySQL
    • NoSQL
    • Cloud Databases
    • System Integration
    • QA/UAT
Skills & Expertise

Skills &
Expertise

Programming & Databases

PythonPHPGolangPostgreSQLMySQLMongoDB

Web Technologies

ReactNext.jsAstroTypeScriptJavaScriptTailwind CSSshadcn/uiLaravelASP.NETSupabaseGSAPFramer MotionAPI DevelopmentTechnical SEO

AI & Machine Learning

Claude CodeAI AgentsMCP (Model Context Protocol)Prompt EngineeringRAG & LLM IntegrationGoogle GeminiHuggingFaceFastAPIYOLOv8OpenCVComputer Vision

Security & Infrastructure

CybersecurityKali LinuxZero-Trust ArchitectureCloud SecurityCloudflare (WAF, DNS & SSL)Firewall & Server HardeningLinux Server SetupDockerVercelRailwayGoogle Cloud RunFirebase

Specialized Tools

Node.jsBurp SuiteWhatsApp GatewayEmail Gateway (SMTP)Webhooks & IntegrationsGoogle Analytics

Soft Skills

CommunicationLeadershipTeamworkProblem-SolvingEvent ManagementCreativity
Education & Certifications

Certifications

Full-Stack Development 101

Simplilearn
March 2026ID: 10034834

Learn Web Programming Basics

Dicoding Indonesia
March 2026ID: JLX1VWN35Z72

AWS Cloud Practitioner Essentials – Training Completion

Amazon Web Services (AWS)
March 2026

AWS Technical Essentials

Amazon Web Services (AWS)
January 2026

Google Ads Search Certification

Google Digital Academy (Skillshop)
February 2026ID: 173326967

Google Analytics Certification

Google Digital Academy (Skillshop)
February 2026ID: 173326065

Data Integrations Certification

HubSpot Academy
February 2026ID: ab0238d2c3f14a16bfb744c1a9e28356

Software Engineer Certificate

HackerRank
January 2026ID: D73F5CD372E0

Frontend Developer (React)

HackerRank
January 2026ID: 84B47591D6EC

Golang (Basic)

HackerRank
January 2026ID: C9F8A2B1E3D4

Software Engineer Intern

HackerRank
January 2026ID: E4D7F2A9C1B5
Honors & Awards

Competition Achievements

Vibe Coding Winner

Google•June 2026

Participated in Google's Vibe Coding competition, showcasing rapid prototyping and creative problem-solving using AI-assisted development tools.

Web Development Category Participant

Codelab Indonesia•June 2026

Participated in the TechSprint competition organized by Codelab Indonesia, competing in the Web Development category to build full-stack applications under time constraints.

Participant Data Automation Competition

PUMA Information System President University•June 2026

Participated in the Tech Sprint 3in1 competition organized by PUMA Information System President University, focusing on designing efficient data pipelines and automated workflows.

AI Open Innovation Challenge 2026

President University & Coordinating Ministry of Economic Affairs RI•February – August 2026

National AI competition organized by President University & Kemenko Perekonomian RI with 1,041+ participants across Indonesia. Developed an AI-driven Healthcare solution (ColonyAI) for automated microbiology plate counting, laboratory precision, and ISO 17025 regulatory compliance.

Testimonials & Endorsements

What People
Say

FAQ

Quick answers about
Wisnu Alfian Nur Ashar

Who is Wisnu Alfian Nur Ashar?

Wisnu is an Information Technology undergraduate at President University (Bekasi, Indonesia) who works as a Full-Stack Engineer across cyber security, AI, software engineering and DevOps, with 3,300+ GitHub contributions across 100+ repositories.

What does Wisnu do in cyber security?

External and internal penetration testing with structured vulnerability reporting. He is an OWASP Foundation member, contributes security fixes to open source (OWASP, NVIDIA) and builds applications with RBAC, JWT and zero-trust principles.

Which technologies does Wisnu use?

Laravel, Next.js, React, TypeScript, Go, Python, ASP.NET and PostgreSQL for software; YOLOv8, OpenCV, FastAPI and Google Gemini for AI; Docker, Cloudflare, Vercel, Railway and Google Cloud Run for DevOps and cloud.

What production systems has Wisnu built?

An ERP/POS platform and e-commerce site for Ashar Grosir Parfum Bekasi that serves thousands of customers (1.34 s load time, 91% good LCP via Cloudflare CDN), plus projects such as SENTINEL-X (threat intelligence), CogniMail (email security), ColonyAI (YOLOv8 colony counting) and Shooply (Go + Next.js microservices).

Which open-source projects has Wisnu contributed to?

Bug reports and fixes for NASA (TrickHLA), Microsoft (MSTest, Keyborg), NVIDIA, the OWASP Cheat Sheet Series, Hugging Face, Google (Site Kit, Agent Skills) and the ADK ecosystem.

Is Wisnu available for internships or work?

Yes — he is open to internships, full-time roles and freelance projects, including remote work. His most recent role was a Web Development Internship at GAOTEK INC (remote, New York, April–July 2026).

How can I contact Wisnu?

Use the contact page on this website, email wisnualfiannurashar@gmail.com, or reach out on LinkedIn (wisnu-alfian-nur-ashar) and GitHub (wi5nuu).

Let's Connect

Let's Connect

Feel free to reach out for collaborations or just a friendly hello.

Email

wisnualfiannurashar@gmail.com

Location

Bekasi, West Java, Indonesia