About Services Work Security Process Code Notes Start a project
Laravel & WordPress Developer

Custom WordPress & Laravel,
engineered to last.

I design and build fully custom themes, plugins, and web applications — fast, secure, and written from scratch. No page builders, no plugin bloat. Just clean code you own.

Start a project View work
95+ Lighthouse
Performance-first builds
11 yrs
Shipping production code
0 builders
Hand-coded, every line
Jamali dev
composer require
Available for work
Booking Q3 projects
Secure payments
PayPal & crypto
Custom development
No page builders
Clean code
Maintainable, documented
Performance-focused
Sub-1s, 95+ Lighthouse
Services

What I build

Four ways I help teams and founders ship fast, secure, fully-owned software — each engineered from scratch.

01

Custom WordPress themes

Bespoke themes coded by hand for speed and maintainability — no Elementor, no bloat. You own clean, semantic code.

  • Pixel-true to your design
  • Gutenberg / ACF blocks
  • Core Web Vitals optimized
02

Laravel web applications

Scalable apps, dashboards, and APIs built on Laravel with clean architecture, tests, and a maintainable codebase.

  • REST & queue-driven backends
  • Auth, billing, role systems
  • CI-ready, documented
03

Custom plugins & features

Need behavior WordPress doesn't ship? I build lightweight custom plugins instead of stacking third-party ones.

  • Purpose-built, no bloat
  • Admin UIs & settings
  • Update-safe & namespaced
04

WordPress security

Hardening at the server, app, and code layer — so your site stays yours. Audits, cleanup, and ongoing protection.

  • Malware removal & audits
  • Firewall & login hardening
  • Backups & monitoring
Selected work

Built from scratch

Three pillars of work — filter to explore each.

Custom WordPress Themes

Hermeticdental

A subscription-billing SaaS built from scratch on Laravel — role-based access, a queue-driven PDF pipeline, and Stripe integration handling thousands of invoices a day.

View all work
WordPress security

Hardened so your site stays yours

I secure WordPress at every layer — server, application, and code — then keep it protected. No mystery plugins, just deliberate, auditable hardening.

  • Login & access hardening

    2FA, rate-limited logins, least-privilege roles, and disabled file editing.

  • Firewall & malware defense

    WAF rules, malware scans & cleanup, and core/plugin integrity monitoring.

  • Backups & monitoring

    Automated off-site backups, uptime alerts, and a tested recovery plan.

wp-hardening — audit
# run security audit
$ wp aj:harden --scan

✔ File permissions    644 / 755
✔ XML-RPC disabled
✔ Login rate-limit     enabled
✔ Security headers     HSTS, CSP
✔ Admin 2FA            enforced
✔ Off-site backups     daily

# 0 vulnerabilities · 12 checks passed
$ _
How we work

A clear, calm process

From first call to launch and beyond — you always know what's happening and what's next.

01

Scope

We talk through goals, constraints, and budget. I send a clear plan and fixed quote.

02

Design

Wireframes and a visual direction we agree on before a line of code is written.

03

Build

Hand-coded in milestones with previews, so you watch it come together.

04

Launch & care

Tested, hardened, and deployed — with support and updates after go-live.

Client trust

Teams that ship with confidence

“Armin rebuilt our theme from scratch and our Lighthouse score jumped from 54 to 97. No page builder, no excuses — just clean, fast code we actually own.”
SM
Sara M.
Founder, Editorial studio
“Our Laravel dashboard handles thousands of bookings a day without a hitch. The architecture is clean and the handover docs were genuinely excellent.”
DK
David K.
CTO, Logistics SaaS
“After a malware incident, Armin cleaned, hardened, and monitored our site. Six months on, zero issues and I finally sleep at night.”
LR
Lena R.
Owner, WooCommerce shop
Code Notes

Writing on the craft

Practical notes on WordPress security, Laravel patterns, performance, and clean code.

All articles
WordPress Security

12 checks to harden WordPress before launch

A pre-flight checklist I run on every site — from file permissions to security headers and login throttling.

May 28, 2026 7 min read
WordPress Performance

From 54 to 97 Lighthouse without a plugin

How I shaved seconds off a theme by removing bloat, deferring scripts, and serving the right images.

May 14, 2026 9 min read
Laravel Development

Race-safe reservations with DB transactions

A clean pattern for handling concurrent bookings in Laravel without double-selling a slot.

Apr 30, 2026 6 min read
Start a project

Have a project in mind? Let's scope it.

Tell me what you're building. I'll reply within one business day with honest feedback, a clear plan, and a fixed quote — no obligation.

PayPal
Secure invoicing
Cryptocurrency
BTC · ETH · USDT
hello@arminjamali.com Working with clients worldwide
Your details stay private. No spam, ever.