SECURITY RESEARCHER & FULL-STACK DEVELOPER

From banned from the
computer lab to building
government systems

Security researcher, full-stack developer, and student at Muranga University of Technology. I build production systems for public sector clients and healthcare providers.

17
GitHub Repos
4
Production Systems
1
Gov Client (Active)
5+
Years Coding

Origin Story

2017 — 2020
Michinda Boys High School
Chairman of the ICT Club. Also got banned from the computer lab — let's just say I took "hacking" seriously back then. Not exactly ethical. Learned a lot about what not to do.
School Holidays
The Cyber Cafe Years
No PC at home. I'd walk to the local cyber cafe, pay for computer time, and practice Linux using online platforms like OnWorks and Linode. Terminal over a cafe connection. Every holiday. Every chance I got.
The Turning Point
From Hacking to Building
Realized breaking into systems was less valuable than building them. Switched from exploiting to defending. From hacking to shipping.
2021 — Present
Muranga University of Technology
Currently pursuing studies while building production systems for government and healthcare clients.

Moments

What I Actually Do

By Day

Lead IT & Development Architect at Mavic Business Solutions (Security & Loss Prevention Kenya — Nakuru). Building internal systems, apps, and tech infrastructure for security operations.

By Night

Building Weaponize, SmarTQue, BotMa, and contracting for government clients. Open source, AI agents, and developer tools.

By Philosophy

Paranoid-first design. Threat model everything. Ship anyway. Audit logs are non-negotiable.

What I've Built (That Matters)

VERIFY

Recruitment management system for county government — thousands of applicants processed. Currently live.

FlaskSQLiteRBACAudit Logs

SmarTQue

Hospital queue management + M-Pesa payments. Real-time queue tracking, appointment booking, telemedicine.

FlaskFlutterM-PesaJWT

BotMa

Multi-agent AI email system. Classifies content, takes autonomous actions, learns from feedback.

PythonLLMAI Agents

Weaponize

Turn your Android into a development IDE. Neovim + LSP + Git on Termux. 2k+ stars.

LuaNeovimTermuxBash

The Philosophy

Ship First
Perfect is the enemy of deployed. Get it live. Iterate.
Paranoid by Default
Threat model everything. Assume breach. Audit everything.
Documentation is a Feature
If they can't use it, you didn't build it.
Build in Public
All repos open. The failures. The ugly code. The lessons.
"You don't need permission to code. You need a computer? Use a cyber cafe. Use your phone. Use whatever. Just start."
— Tony Ngugi (KenyanCyber)

Currently

Student

Muranga University of Technology — pursuing studies while building production systems.

Learning Rust

Building BotMah — a raw HTTP server from scratch. No frameworks. Just sockets and parsing.

Available for

Freelance: Flask backends, Flutter apps, security audits. Contracts: Government systems, healthcare platforms, payment integrations.

To the ones who actually mattered

I've had plenty of teachers. Most of them just did their job — sucked at it bythaway . Mr. Kimani and Mrs Fedis Njiru didn't just do their job. They opened a door I didn't know existed.

They introduced me to computer studies when I was in high school. They saw something in me before I saw it myself. They didn't just teach me — they ignited me.

Every line of code I write. Every system I break. Every tool I build.
It started with them.

— Tony "KenyanCyber" Ngugi
Not all teachers are equal. These two are why I exist in this field.

The Real Ones

The ones who funded every cyber cafe session

My Mother — The Believer

My Mother

"She never understood what I was doing on that computer. But she handed me money for the cyber cafe anyway. Every single time."

The Believer
My Father — The Enforcer

My Father

"He told me 'if you're going to be on that computer, be the best at it.' I took that personally."

The Enforcer

"We don't understand what he does. Code? Hacking? Servers? We just know he disappears into that screen and comes out speaking another language. But we've never doubted him. He said he'd be the best. And he is. That's our son."

— His Parents (They have no idea what GitHub is but they're proud anyway)