Bolt.SH
An OpenStack-powered IaaS data center I designed and built, with VM orchestration, virtual networking, and load balancing that let teams self-serve infra.
Watch the walkthrough series →Principal Backend Engineer · Bangalore, India
Faiz Ahmed Farooqui
I build compliance-heavy backend infrastructure for regulated industries: secure, multi-tenant systems for fintech, healthcare, and SaaS. Think PCI-DSS payments, HIPAA data platforms, and audit-ready architecture on AWS and OpenStack. I write about the engineering behind it.
Featured work
GeekyAnts/express-typescript Production-ready Express + TypeScript boilerplate. My most widely adopted open-source project, used across 20+ production apps. ★ 1,260 ⑂ 322 GitHub → faizahmedfarooqui/nodejs A low-level Node.js web, API, and CLI app built entirely on Node's core APIs, with zero npm packages. ★ 21 ⑂ 1 GitHub → Project · GeekyAnts
Latest articles
ai-engineering
AI Agents Are Running Real Attacks: Which of Your Controls Break First
--- The headline version of this story is that AI is now hacking companies. That framing is useless to anyone who has to actually defend a system, because it does not tell you what to change on Monday. So here is the version that is useful,…
compliance-engineering
Three Error Shapes, One API: Adopting RFC 9457 Problem Details
--- Fourth post from the compliance-ready backend kit, after nested JWTs, append-only audit logs and key rotation. Before I fixed…
compliance-engineering
Key Rotation Without Downtime: Never Generate a Key in a Migration
--- Third post from the compliance-ready backend kit, after nested JWTs and append-only audit logs. Key rotation is the control ev…
compliance-engineering
Append-Only Audit Logs in Postgres: Your Trigger Misses TRUNCATE
--- Second post from the compliance-ready backend kit, after nested JWTs. This one is about the audit log, which is the control an…