A real-estate platform for the Saudi market — taken from a production security audit into a full feature build: a role & permission system, a "request your property" flow with a financing calculator, redesigned developer pages, and an admin panel for listings.

Not a from-scratch build — I joined an existing production platform to audit and harden it, then designed and shipped new features on top.

Highlights

Audited the production codebase (47 issues, 6 critical) and hardened it — mass assignment, XSS, SQL injection, N+1 elimination, RBAC, caching and async image processing
Built a role & permission system (Super Admin / Content Manager / Data Entry) with a user-management UI and a granular permissions matrix
Designed a "Request your property" multi-step flow with a mortgage/financing calculator that estimates buying power and surfaces matching projects within budget
Redesigned the real-estate-developer pages (project cards with current / delivered tabs) and a rich admin add-listing form (interactive units table, floor plans, feature sets)
Expanded the services catalogue (HOA & property management, maintenance, facilities) with real production data