Full-stack developer and systems administrator, founder of M's Works and Cybernetic Engineering student in Palermo. I design and maintain web applications in production (TypeScript, Next.js, PostgreSQL), run company servers and networks, and build security and GDPR into the architecture instead of bolting them on later. A documented method, with agentic AI as a daily tool and always a human review.
Jan 2026 – present
CurrentM's Works · technical studio, Palermo
A team of 4 across web and app development, SEO/GEO, GDPR, security audits, IT management and the AI Act. I run the whole cycle, from quote and contract/NDA/DPA to deployment and maintenance.
Own products: Accepta (e-invoicing SaaS) and Effetto (Rust/Tauri desktop app).
2026 – present
CurrentDebt collection company · about 15 staff, Palermo
Tailscale mesh VPN, network segmentation, separate accounts and roles; server-side Wazuh SIEM with agents on every workstation.
Clockify time tracking (timesheets and kiosk), staff training and manuals.
Feb 2026 – present
CurrentInternational consulting firm · remote
Web app on multi-schema Postgres with JWT SSO: finance and cash flows, hours and availability, sales CRM (GoHighLevel), video archive (Whisper, FFmpeg).
AES-256-GCM vault with TOTP and sync over HMAC webhooks + SSE; Fastify gateway for bank accounts.
Incident response on a VPS compromised by a cryptominer, rebuilt with SSH hardening, Nginx, PM2 and TLS.
Jul 2025 – Aug 2026
Bigoodino · BDGROUP S.r.l. · freelance, remote
REST APIs and backend (MySQL, JWT), React/Next.js frontend, multi-company access, ongoing development.
Aug 2025 – Aug 2026
META Gaming Pub · Bagheria (PA), freelance
QR digital menu with ordering, order management, loyalty platform (idempotent queue worker, RLS), game catalogue with an AI assistant; social media graphics.
Two of our own products and three client projects. Where a public case study exists, the link goes there.
M's Works product
Italian e-invoicing: FatturaPA XML and submission to the SdI, payables, due dates, bank reconciliation, F24 tax forms, multi-company. REST API, signed webhooks and an MCP server from a single registry; fail-closed tenancy.
Next.js 16 · Prisma 7 · Postgres · BetterAuth · Inngest · Stripe
M's Works product
Tauri desktop app that fills in and prints promissory notes on pre-printed forms. Millimetre-calibrated printing, validation of tax codes, VAT numbers and bank codes, local SQLite archive, signed updates.
Discover Effetto →Tauri · Rust · React · SQLite
Client · USA
Subscription platform for a Californian finance community, moved off a no-code builder onto its own infrastructure: truly members-only content, archive moved without losses, audit trail and an internal CRM.
Read the case study →Next.js · Prisma · Supabase · next-intl
Client · Palermo
Website, sign-up-free booking and floor management for a historic Palermo barbershop. A Postgres exclusion constraint prevents overlaps; reminders by WhatsApp and email.
Read the case study →Next.js · Postgres · Twilio · Resend · Vercel Cron
Client · systems
Company e-commerce: security and GDPR audit, isolated staging with two PHP-FPM pools (7.4 and 8.4) to compare behaviour, runbook with checkpoints, encrypted backups, tested rollback and server hardening.
Client under NDA and DPA: the name is not published.
2025 – ongoing
Degree in Cybernetic Engineering
University of Palermo
2020 – 2025
Technical high school diploma
IISS Alessandro Volta, Palermo
Sep 2025 – present
Technical staff · web development
Vivere Ingegneria · Vivere Ateneo, University of Palermo student association
2021 – 2025
Freelance and personal projects
Websites and Telegram bots in PHP/MySQL (A-BOT, open source), during high school
Italian
Native
English
Technical reading, documentation, calls
Every non-obvious choice is recorded with its reason; the documentation lives in the repository, next to the code.
Versioned migrations only, separate schemas per project, tests against the real database.
Secrets validated at startup, client data isolated from each other, staging separate from production.
No lock-in: the code stays with whoever paid for it, with a dated report for every piece of work.
Tell me what you need: I'll answer myself, and if I'm not the right person I'll say so.
“If opportunity doesn't knock, build a door.”
