The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
ShadowForge is an adversary-emulation and security-validation platform I built to help security teams model attack scenarios, visualize activity, correlate threat intelligence, and evaluate defensive visibility from a single operations interface.
The platform brings together scenario orchestration, network visualization, threat intelligence, MITRE ATT&CK mapping, enterprise identity simulation, analytics, and reporting into one unified workflow.
I designed the application around modular simulation components so authorized lab and security-validation exercises can be configured, observed, and translated into useful defensive findings rather than scattered logs and manual notes.
Key engineering work included:
Centralized security operations dashboard
Configurable adversary-emulation scenarios
Reconnaissance and environment-discovery simulation
Lateral-movement and persistence scenario modeling
Live execution-event visualization
Network topology and host mapping
MITRE ATT&CK technique mapping
Threat-intelligence and IOC enrichment
Enterprise user simulation for realistic lab scenarios
Security analytics and severity tracking
Automated findings and report generation
Modular architecture designed for controlled security testing
ShadowForge turns an authorized security exercise into something measurable: operators can configure a scenario, observe activity as it happens, correlate findings with threat intelligence and ATT&CK techniques, and produce structured results for defensive analysis.
Built for controlled labs, security validation, and authorized adversary-emulation environments.
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
Northstar CRM: Full-Stack Customer Relationship and Sales Management Platform
I designed and developed Northstar CRM to transform customer relationship management into a focused, visually intuitive, and connected workspace. Instead of overwhelming sales teams with dense tables and fragmented tools, I structured the platform around clear customer insights, actionable sales data, and streamlined daily workflows.
The visual identity combines a soft atmospheric background with glass-inspired surfaces, dimensional cards, and vibrant blue, teal, yellow, and charcoal accents. Carefully layered shadows, subtle gradients, and elevated components create a refined 3D appearance while maintaining clarity and professional usability. The entire interface follows a consistent 4:3 presentation ratio, making every screen suitable for portfolio displays and high-quality screenshots.
The overview dashboard gives users an immediate picture of business performance. Key metrics—including total revenue, pipeline value, completed tasks, priority deals, recent activities, and upcoming meetings—are presented through scannable cards, progress indicators, compact charts, and contextual status colours. This allows teams to identify important changes and required actions without navigating through multiple reports.
The customer management screen provides a searchable directory with company information, recent interactions, account value, relationship status, and assigned ownership. Selecting a customer dynamically updates the detailed profile panel, where users can review contact information, relationship health, next actions, and communication options such as messaging, calling, or scheduling a meeting.
The deal pipeline organizes opportunities into clear stages, including Discovery, Proposal, Negotiation, and Closing. Each opportunity card displays its customer, estimated value, expected closing date, owner, and current stage. The Kanban-style structure gives sales teams a visual understanding of pipeline movement while supporting faster prioritization and opportunity management.
The calendar and reporting screens connect operational planning with performance analysis. The calendar provides monthly scheduling, customer meetings, deadlines, focus time, and team commitments. The reporting workspace combines revenue trends, conversion rates, customer retention, pipeline sources, account health, and period-based performance comparisons through interactive charts and summary cards.
On the backend, I implemented a modular Node.js and Express REST API connected to a PostgreSQL database. The data model supports users, customers, companies, contacts, deals, pipeline stages, activities, tasks, meetings, notes, and reporting records. Structured relationships and indexed queries ensure that customer histories, pipeline summaries, and dashboard analytics remain fast and consistent as the dataset grows.
Authentication is handled through secure token-based sessions, password hashing, protected API routes, and role-based access control. Different permissions can be assigned to administrators, sales managers, and sales representatives, ensuring users only access or modify information relevant to their responsibilities. Input validation, centralized error handling, audit logging, and rate limiting strengthen reliability and application security.
Real-time updates allow changes to deals, tasks, customer activity, and meeting schedules to appear across connected screens without requiring a manual refresh. Background processes handle reminders, notifications, scheduled follow-ups, and reporting calculations, while caching improves the performance of frequently requested dashboard metrics.
Across the complete full-stack platform, I prioritized reusable frontend components, responsive layouts, secure API design, reliable data relationships, and consistent interaction patterns. The result is a modern CRM experience that feels premium and approachable while providing the technical foundation required for scalable customer management, sales execution, and business intelligence.
The backend model is the interesting part here. Once customer history, pipeline stages, tasks, and meetings share relationships, it’s easy for dashboard numbers to drift from the underlying records. Did you calculate those summaries on demand, or keep derived reporting data updated through the background jobs you mentioned?
A sneak peak to a B2B solution I'm building.
The backend for a UK marketplace that connects construction businesses with tradespeople.
I built the auth layer with admin 2FA, social and phone sign-in and rate limiting, and in a security review I closed an account-takeover path and an MFA bypass. On top of that: profiles with skills, accreditations and auto-geocoding, job posting and applications, a discovery search that ranks tradespeople by availability, distance, rating and budget, and Stripe subscriptions with webhooks.
I also set up the CI pipeline in GitHub Actions and the one-command deploy to an Ubuntu server with health checks.
Stack: NestJS, Prisma, PostgreSQL, Stripe, Firebase, Docker, GitHub Actions.
