I build scalable, secure systems — custom WordPress solutions with ACF and flexible content, Laravel platforms, and REST APIs. I'd rather write clean, maintainable code than lean on heavy plugins or page builders.

Most of my work is WordPress built the way an engineer would build it — custom themes, ACF-driven flexible content, and purpose-written plugins instead of a stack of third-party ones.
Fully custom themes and plugins using ACF and flexible content — minimal reliance on third-party plugins, and no page builders anywhere.
RESTful API design, third-party integrations, and complex backend workflows — documented, versioned, and built to be consumed.
Security-focused development for WordPress, plus performance optimisation and clean architecture that stays maintainable.
Eight years of production work for local and international clients — systems people actually use every day.
Building custom WordPress systems and Laravel platforms end to end — ACF-driven themes, bespoke plugins, REST APIs, and security hardening for production sites.
Laravel-based platforms handling appointments, telemedicine sessions, and online payment flows. Designed the REST layer and the integrations around it.
Built booking and reservation systems with race-safe availability logic, plus the admin tooling the operations teams ran them from.
Where the no-page-builder habit started: hand-coded themes, custom post types, and small plugins written to replace bloated third-party ones.
The stack I reach for daily — chosen because it's dependable, not because it's fashionable.
Packages, plugins, and experiments — the code behind the habits I write about.
A composer-installable toolkit that applies a 12-point WordPress security baseline via WP-CLI.
Turn ACF flexible content layouts into native Gutenberg blocks without a build step.
Drop-in per-IP throttling middleware for Laravel APIs with Redis-backed windows.
Plugins I maintain in the official WordPress repository — small, single-purpose, and written to replace heavier alternatives.
Per-IP login throttling and 2FA enforcement in under 40 KB — no dashboard bloat, no upsells.
Adds defer to non-critical script handles for an instant paint win. One setting, nothing else.
JSON-LD structured data for posts, articles, and breadcrumbs — a fraction of the weight of the big SEO suites.
Local and international clients — delivering production systems used in real-world environments every day.
Open to backend and full-stack work — remote or relocation — and to project collaborations. Tell me what you're building.