Bolt.SH
An OpenStack-powered IaaS data center I designed and built, with VM orchestration, virtual networking, and load balancing that let teams self-serve infra.
Watch the walkthrough series →Principal Backend Engineer · Bangalore, India
Faiz Ahmed Farooqui
I build compliance-heavy backend infrastructure for regulated industries: secure, multi-tenant systems for fintech, healthcare, and SaaS. Think PCI-DSS payments, HIPAA data platforms, and audit-ready architecture on AWS and OpenStack. I write about the engineering behind it.
Featured work
GeekyAnts/express-typescript Production-ready Express + TypeScript boilerplate. My most widely adopted open-source project, used across 20+ production apps. ★ 1,261 ⑂ 325 GitHub → faizahmedfarooqui/nodejs A low-level Node.js web, API, and CLI app built entirely on Node's core APIs, with zero npm packages. ★ 21 ⑂ 1 GitHub → Project · GeekyAnts
Latest articles
compliance-engineering
Append-Only Audit Logs in Postgres: Your Trigger Misses TRUNCATE
--- Second post from the compliance-ready backend kit, after nested JWTs. This one is about the audit log, which is the control an assessor actually leans on. The bar is not "we write rows to an audit events table". The bar is: show me ever…
compliance-engineering
Nested JWTs in Node.js: Decrypting a Token Is Not Verifying It
--- I have been building a compliance-ready backend kit: a NestJS and TypeScript monorepo where every capability maps to a named c…
ai-engineering
The Prompt Is Not the Product: A Realistic Mental Model for AI Agents
Recently I fed an AI agent a prompt that, stripped to its essence, said this: Build me an app people will pay for, and an AI agent…
ai-engineering
Securing LLM API Keys with AWS KMS
A prompt-injection researcher points your app's own debug endpoint at itself, triggers an unhandled exception, and your error hand…