Kallan FraserBackend & Security Engineer
Now leading engineering at Portal Portugal · local

I build data‑heavy products end to end.From the ingestion pipeline to the last pixel, with security designed in from the start.

Full-stack engineer with a backend bias and an M.S. in Cybersecurity Analytics. I lead engineering on Portal, a fashion social app on the App Store. Before that I founded Density-Delta, a forensic real estate SaaS for Dubai built on 1.6M+ transaction records, and on the side I'm building GAAP Sentinel, which flags accounting manipulation across SEC filings. Born in South Africa, raised in Dubai, educated in California, now based in Portugal.

1.6M+Transaction records served by Density-Delta
100+Paying investor clients, Density-Delta
v2.0Portal shipped to the App Store
3.95GPA, M.S. Cybersecurity Analytics
Own it end to end

Pipeline to pixels, billing to auth. Almost everything on this page I built as the only engineer.

Data · API · app · billing
Idempotent by default

Payments, webhooks and order flows survive retries and partial failures, so a replayed event never charges or ships twice.

Stripe · RevenueCat · Printify
Private by construction

Collect less and round the rest. Portal's Market stores a town and a distance bucket, never anyone's coordinates.

Parameterised SQL only
Ship small, roll back fast

Migrations before deploys, tagged releases, and over-the-air updates that check runtime compatibility before going out.

Gated OTA pipeline
Current roleLive on the App Store

Portal Fits4U

Lead Software Engineer · Portal F4U, Madrid · Remote · 2026 – present

A fashion social app for iOS. Scan your wardrobe, get styled by an AI stylist that knows what you own, post fit checks, and sell or trade the pieces you no longer wear. I own engineering end to end: product calls, architecture, the iOS app, the API and every release.

  • AI stylist

    A chat stylist grounded in the user's own closet, with looks rendered on a generated avatar. Built on Gemini with a fallback chain across image providers.

  • Wardrobe scan

    Finds every garment in one photo and renders each as a clean product shot. Segmentation-based background removal makes a pure white background a guarantee, with an automatic re-render gate behind it.

  • Market

    Sell or trade pieces from your closet without Portal ever touching money. Location privacy by design: a town and a distance bucket, never coordinates. Age-gated, one conversation per listing.

  • Platform

    Moved the app, API and storage onto a company-owned stack and shipped v2.0 as an update to the existing App Store listing, carrying every user's closet and posts across. Over-the-air releases go through a gated pipeline that checks runtime compatibility before anything ships.

  • Portal Pro

    Subscriptions on RevenueCat with App Store billing, plus Pro-only animated backgrounds written as Skia shaders, including a live weather sky.

ExpoReact NativeNode.jsExpressSupabase PostgresCloudflare R2GeminiRevenueCatSkiaEAS UpdateRailway
9:41
For you
ines.lx2 hours ago
31841

ines.lx Same blazer, two moods. Office or weekend?

maya.r5 hours ago
967

maya.r Trying the same trousers with a warmer palette.

Saturday · 21° and clear

Good evening

Pick a starting point or just ask.
Style my linen trousersThree looks from your closet
Date night, but make it easyPolished without trying too hard
What goes with my new trainers?Pairings for this week
Pack for a Lisbon weekendSix pieces, five outfits
Rework last week's outfitSame pieces, new feel
Dress for 18° and clearLight layers for today
Something for tonightUse my new jacketWarmer
Ask anything
Market
Near youSellTradeOuterwear
Sell1 km
Wool overcoatCOS · Size M · Worn twice
€40
Trade4 km
Silk slip dressNo brand · Size S
Swap
Sell9 km
White leather trainersVeja · EU 42
€25

Closet

42 pieces
Scan
All42Tops18Bottoms9Shoes6
Ready to rehome

3 pieces you haven't worn since spring.

List
Trench coatOuterwear
Linen shirtTops
Wide trousersBottoms
Slip dressDresses
LoafersShoes
Woven toteBags

Screens redrawn in Portal's palette for this page. Tap a feature or a tab to look around.

Experience

Where I've shipped

Founder roles and contract work, mostly as the only engineer, always owning the system end to end.

2026 – presentRemote · Madrid

Portal F4U

Lead Software Engineer, contract

Lead engineer on Portal Fits4U, a fashion social app for iOS. I took the app from a TestFlight beta to v2.0 on the App Store and run engineering on my own.

  • Rebuilt the platform on a company-owned stack (Expo app, Node and Express API, Supabase Postgres, Cloudflare R2) and shipped v2.0 as an update to the live App Store listing, migrating every existing user's closet and posts.
  • Built the AI stylist, wardrobe scanning with segmentation-based background removal, the social feed, moodboard and direct messages with push notifications.
  • Designed and shipped the Market: peer-to-peer selling and trading with off-platform payments, distance-bucketed location privacy and age gating.
+
  • Portal Pro subscriptions on RevenueCat, with Pro-only Skia shader backgrounds and a live weather sky.
  • Over-the-air release pipeline on EAS Update with a runtime assertion gate, so JavaScript updates only reach builds that can run them, plus tagged rollbacks.
  • Image generation behind an environment-gated provider layer with automatic fallback between providers.
  • Parameterised SQL everywhere, manual migrations ahead of every API deploy, and read-only security audits before each release.
ExpoReact NativeNode.jsExpressSupabasePostgreSQLCloudflare R2GeminiRevenueCatSkia
Nov 2025 – presentRemote · Dubai

Density-Delta ↗

Founder & Full-Stack Engineer

A tiered SaaS delivering forensic real estate intelligence for the Dubai property market. Designed and shipped alone: architecture, data pipeline, billing, auth and UI.

  • Serverless on Cloudflare Workers and D1, serving 16 years of Dubai Land Department transactions (1.6M+ records) across 204 communities and 2,000+ projects with sub-second responses from the edge.
  • Custom ETL across six formats (CSV, PDF, XLSX, XML, KML, JSON), with heuristic matching that reconstructs links between communities, developers and projects into a strict relational schema.
  • Earlier phase served 100+ real estate investor clients and 10,000+ monthly users through custom analytics and data licensing. The source data has since gone private, leaving Density-Delta with exclusive access.
+
  • Free, Basic and Premium tiers on Stripe Checkout, Webhooks and the Billing Portal, with trials, prorated upgrades and idempotent webhook handling.
  • Auth.js with Google OAuth and JWT sessions running on Workers.
  • 3D map dashboard in deck.gl and Mapbox covering 13 metrics, quantile colour scales, a three-community compare mode and a forensic project view with every transaction in sortable tables and multi-axis charts.
Next.js 14TypeScriptCloudflare WorkersD1Drizzle ORMAuth.jsStripedeck.glMapbox
Jul 2025 – presentHybrid · California

GoodBuys ↗

Lead Engineer, Santa Clara University research team

I lead a six-person research engineering team under a faculty advisor, building the first centralised global registry of ecolabels and certified companies to expose greenwashing. The research has been accepted for publication, with a conference presentation in May 2026.

  • Catalogues 100+ ecolabels and 10,000+ certified companies, separating claims backed by accredited third-party certification from self-declared marketing.
  • Company recognition engine with weighted confidence scoring and dictionary-backed filtering, so names like "General" or "Pioneer" aren't mistaken for ordinary words.
  • Adaptive network layer with per-host jitter and exponential backoff to work around anti-bot defences across dozens of certification body sites.
Node.jsCheerioNext.jsTailwindAxios
Sep 2024 – Feb 2026Remote · California

Beach & Bar Wear ↗

Founder & Full-Stack Engineer

A direct-to-consumer apparel brand on a custom Next.js storefront. I owned engineering, infrastructure, brand, product design and marketing, and the launch reached hundreds of customers in its first months.

  • Automated fulfilment: a successful Stripe payment builds the Printify production order from the database's product mapping, records it and emails the customer their tracking.
  • Inventory state machine (Draft, Published, Out of Stock) behind a REST API, with idempotent payments and webhook reconciliation so orders and stock stay consistent through retries and partial failures.
  • Background worker syncs stock with Printify every 15 minutes and moves products out of stock automatically.
+
  • Storefront and admin dashboard in Next.js, React and custom CSS, with order history, contact details and shipment tracking kept server-side.
  • Full brand identity: typography, colour system, photography direction and visual themes.
  • Paid acquisition through Facebook Ads and Google Ads alongside organic social.
Next.jsReactExpressPostgreSQLStripePrintify APIWebhooksCron jobs
Selected work

Live products and side builds

Everything here is running. Open any card to visit it.

Security & research

The security side

Selected work from my M.S. in Cybersecurity Analytics at Champlain College, plus published research.

Capstone

Measuring security strategy against NIST CSF 2.0

Benchmarks how well cybersecurity strategies hold up in practice, using the VERIS Community Database and IBM Cost of a Data Breach data, mapped onto the framework's six functions and visualised in Tableau.

GVGovernIDIdentifyPRProtectDEDetectRSRespondRCRecover
Applied cryptography

Zero-knowledge password manager

An open-source design where every encrypt and decrypt happens on the user's device. The server only ever stores opaque vault blobs, so it can't read a secret even if it is compromised.

deviceencrypts→opaque blob→server stores·keys never leave
Hardware security

Intel Management Engine mitigation

A technical guide to three ways of containing the Intel ME: disable it outright, overwrite its firmware, or isolate it with custom network modules that block all outbound ME traffic at the device level while the chip stays active.

disable/overwrite/isolate· outbound ME traffic blocked
Published research

Detecting greenwashing at registry scale

The GoodBuys work on registry methodology, certification authority verification and spotting duplicate or misleading labels, accepted for publication with a conference presentation in May 2026.

100+ecolabels·10,000+certified companies
Skills

Tools I reach for

Languages

  • JavaScript
  • TypeScript
  • SQL
  • Python
  • C++

Backend & data

  • Node.js
  • Express
  • PostgreSQL
  • Supabase
  • SQLite / D1
  • Drizzle ORM
  • ETL pipelines
  • REST APIs
  • Webhooks

Frontend & mobile

  • React
  • Next.js
  • React Native
  • Expo
  • Tailwind CSS
  • deck.gl
  • Mapbox
  • Skia

Cloud & infrastructure

  • Cloudflare Workers
  • Cloudflare R2
  • Docker
  • AWS
  • Railway
  • EAS Update
  • Git

Payments & AI

  • Stripe
  • RevenueCat
  • Gemini
  • LLM pipelines
  • Image generation

Security

  • NIST CSF 2.0
  • Applied cryptography
  • OAuth & JWT
  • Hardware security
  • Security analytics
  • Tableau
Education

Education

Champlain College · M.S. Cybersecurity Analytics

3.95 GPA. Capstone benchmarking security strategy against NIST CSF 2.0; research on hardware security and zero-knowledge architecture.

Aug 2026 · Vermont

Santa Clara University · B.S. Computer Science & Mathematics

Emphasis in software engineering. Four years of college rugby, and the start of GoodBuys.

Jun 2025 · California

JESS Dubai · International Baccalaureate

IB Diploma, and the first software projects.

2021 · Dubai

Diplomas

Signed digital originals via Parchment
Beyond work

Off the clock

Sport, music, photography, and following how the world actually works.

Volunteering

Flag of VietnamVietnam · House construction

Built housing with the White Thai community. Lived on site with residents, coordinated daily tasks and delivered on schedule.

Flag of NepalNepal · School restoration

Two weeks of post-earthquake support in Pokhara, repairing a primary school and resupplying classrooms.

Flag of the United Arab EmiratesDubai · Assistant golf coach

Volunteered at the Butch Harmon School of Golf, helping run youth lessons with demos, drills and feedback.

Contact

Let's build something solid.

Portal is my main focus, and I have room for one more fully remote freelance or contract project alongside it. I'm happiest as the sole developer or part of a small team, on backend-heavy, data-heavy or security-sensitive work.

kallangfraser@gmail.com Open in mail
English (native) · Spanish (conversational) · German (learning)