⌘
Android & Mobile Security
APK analysis, application components, secure storage, network configuration, authentication and mobile-to-API trust boundaries.
OWASP MASVSAPK analysisPython
APPLICATION SECURITY & SOFTWARE ENGINEERING
I build digital products.
I secure what matters.
I'm Ahmad Ibrahim, an Android and web application security researcher, penetration tester and software builder. I turn ideas into working systems, examine their attack surfaces and help teams reduce real-world risk.
Kaduna, Nigeria · Open to remote opportunities & authorized security work
01 / ANDROID SECURITY02 / WEB & API TESTING03 / FULL-STACK DEVELOPMENT04 / AI & AUTOMATION
01 / ABOUT ME
Engineering with a security mindset.
I work at the intersection of product engineering and application security. My focus is designing useful software, testing its trust boundaries and building evidence-based improvements.
My practical work spans Android applications, API authorization, secure authentication, cloud-connected services and developer tooling. I use authorized labs and owned projects to explore weaknesses, validate fixes and communicate findings clearly.
I value reproducible evidence, maintainable code and accurate descriptions of every release. Research hypotheses are not confirmed vulnerabilities, and the published software is presented according to its verified capabilities.
02 / WHAT I DO
Expertise built around real problems.
Practical skills across development, testing and remediation — not a list of unverified claims.
◇
Web & API Penetration Testing
Authorized testing of session flows, object-level authorization, access control, data exposure and business-logic weaknesses.
OWASPBurp SuiteREST APIs
▣
Mobile & Full-Stack Engineering
Cross-platform products, backend services, database-backed workflows and testable customer/provider experiences.
FlutterTypeScriptPostgreSQL
AI, Automation & DevSecOps
Business workflow automation, evidence-oriented security tooling, release gates and human-controlled AI integrations.
PythonGitHub ActionsDocker
03 / SELECTED WORK
Things I've built and researched.
A curated portfolio of engineering projects, research tools and early-stage products. Status labels reflect the verified development or release state.
01 / MOBILE PLATFORM
OneCallEVERYTHING, ONE CALL AWAY
◉OneCall
A full-stack services platform connecting customers and providers through requests, bookings, messaging and secure account workflows. Explore its connected Android application and backend engineering.
02 / SECURITY TOOLING
$ ahmad-sec apk scan✓ manifest checks✓ evidence report_
⌁Android Security Toolkit
An evidence-first Android application security CLI for APK analysis, reproducible observations and practical remediation guidance within authorized assessments.
MetaAutomate
An intelligent business platform connecting secure workspaces, governed automation and AI-assisted workflows to real organizational operations.
04 / RESEARCH OPERATIONS
R/OS
⎔Security Research OS
A research operations system for authorized scope management, evidence integrity, reproducible validation, triage and remediation verification.
Research operations & evidence management
05 / MOBILE EXPERIENCE
SafwaQURAN · صفوة القرآن
✧Safwa Quran
An offline-first Quran and worship experience designed around trustworthy content, accessible study and dependable mobile use, with source and device assurance central to development.
Quran reading · study · worship
06 / COMMERCE CONCEPT
IMarketCOMMERCE, MADE ACCESSIBLE
✦IMarket
A Nigeria-first marketplace combining group-buying discovery, merchant trust and transparent installment-shopping journeys, with financing dependent on compliant partnerships.
Social commerce & payment-plan design
07 / TELECOM CONCEPT
NayveloMOBILE, MADE DIGITAL.
◌Nayvelo Mobile
A digital-first eSIM telecommunications venture exploring device readiness, private subscriber journeys and accessible mobile service onboarding.
Device readiness & mobile onboarding
08 / DOCUMENT PRODUCTIVITY
VAILABLEDOCUMENTS · WORKFLOWS · INTELLIGENCE
▤VAILABLE
A privacy-conscious document platform being developed around PDF organization, conversion, optimization, security and intelligent workflows. Product architecture and safeguarded development automation form its engineering foundation.
Product research & engineering
Showing all 8 projects.
SECURITY RESEARCH
Find real weaknesses. Prove their impact.
I investigate security vulnerabilities in mobile apps, web platforms and APIs with proper authorization, document reproducible evidence, and provide clear remediation guidance. My focus is on practical findings and fixes that help make software safer.
04 / PUBLISHED SECURITY RESEARCH
Research you can read and verify.
The Ahmad-IB Security Research Journal documents technical methods, source-backed engineering work and sourced intelligence, with clear limits on what has been demonstrated.
FEATURED ENGINEERING CASE STUDY · 26 OCT 2026
Designing redacted, reproducible APK evidence reports
A technical explanation of report determinism, evidence handling, redaction and manual validation in the Android Security Toolkit. The article references public source code and tests without claiming a confirmed exploited vulnerability.
Research index
Full journalANDROID SECURITYExported Android components: exposure is not exploitability
API AUTHORIZATIONThe authorization boundary does not live inside the mobile app
ENGINEERING METHODOLOGYBuilding an Android security toolkit around evidence
THREAT INTELLIGENCECybersecurity intelligence brief — 17 October 2026
Research notes are not equivalent to acknowledged vulnerability disclosures. Claims are supported by cited material and limited to the work described.
04 / ACCESS TO PROJECTS
Software access by arrangement.
Application packages, implementation files and repository access are shared privately with approved collaborators.
ANDROID & BACKEND
OneCall for Android
OneCall is a customer and provider services platform. Application packages and backend materials are provided through an approved access process.
APPLICATION SECURITY ENGINEERING
Android Security Toolkit
Research tooling, implementation materials and technical documentation are shared privately where appropriate.
05 / THE PROCESS
Build with care.
Validate with evidence.
A consistent cycle that connects functional software development with application security.
01
Understand
Clarify the business goal, assets, requirements and authorized scope.
02
Engineer
Build maintainable components, data boundaries and usable interfaces.
03
Test
Exercise failure modes, access controls and security-sensitive workflows.
04
Improve
Document evidence, fix weaknesses and verify regressions.
END-TO-END DELIVERY
From requirements to reliable operations.
A practical workflow for thoughtful engineering, accountable testing and ongoing improvement.
01 / DELIVERY STAGE
Requirements analysis
Clarify objectives, user needs, system boundaries and acceptance criteria.
02 / DELIVERY STAGE
Project planning
Define delivery milestones, technical scope, resources and key risks.
03 / DELIVERY STAGE
Experience design
Shape usable interfaces, information architecture and visual consistency.
04 / DELIVERY STAGE
Software architecture
Structure maintainable application components, integrations and data flows.
05 / DELIVERY STAGE
Implementation
Develop and integrate mobile, web, API and automation capabilities.
06 / DELIVERY STAGE
Testing & validation
Check user journeys, quality, security controls and regression behaviour.
07 / DELIVERY STAGE
Maintenance & support
Monitor, improve and support products through their operational lifecycle.
LEARNING & PROFESSIONAL PRACTICE
Always learning. Always validating.
Security education and practice include EC-Council University studies, Cisco Networking Academy training, authorized testing labs and project-based engineering. Specific certificate documents can be added only when verified and approved for publication.
06 / GET IN TOUCH
Have something worth building or securing?
Let's discuss a mobile app, a security assessment, an API review or an ambitious new product. For security testing, all work is scoped and authorized in advance.
LOCATIONKaduna, NigeriaFOCUSApplication security · Software engineeringCONTACTAhmadibofficial@gmail.com