Saif AL-Moghrabi
AI · BACKEND · AUTOMATION
A portfolio designed to answer one question fast: what can Saif actually build?
SA / 001
I’m an Artificial Intelligence & Data Science student who learns by building useful, maintainable software.
My work connects backend engineering, interfaces, data, and automation. I build secure REST APIs, React storefronts, PostgreSQL-backed applications, browser tools, and n8n workflows.
Right now I’m strengthening the bridge between AI integrations and dependable software systems—with a practical eye for testing, debugging, security, and deployment.
Practical AI integrations shaped around structured inputs, useful outputs, and dependable workflows—not AI for decoration.
AI-assisted product features, data-driven prototypes, and intelligent workflow layers.
REST APIs with authentication, authorization, validation, predictable errors, and explicit trust boundaries.
Secure API foundations, authenticated services, and production-minded backend architecture.
Webhook-driven workflows that validate inputs, connect services, return structured data, and reduce repetitive work.
n8n workflows, API integrations, triage flows, and repeatable business-process automation.
Relational modeling, parameterized SQL, secure database access, permission design, and application-level validation.
PostgreSQL-backed applications with clear data models, ownership rules, and security controls.
Choose what you need. The portfolio will point you to the strongest evidence.
What are you looking for?
A Node.js + Express API designed around explicit trust boundaries: authentication, role-based access, validation, rate limits, IDOR protection, safe errors, and PostgreSQL persistence.
Security review and reusable Postman collection. A separate React storefront was added to the repository in August 2026.
An existing commerce API needed explicit trust boundaries across users, roles, products, and orders.
A security-focused Express API with protected routes, validation, ownership controls, and PostgreSQL persistence.
Routes → validation and authentication → controllers → parameterized SQL → Neon PostgreSQL.
JWT verification, live role checks, RBAC, IDOR protection, rate limits, Helmet, controlled CORS, and safe errors.
A documented security review and reusable Postman plan covering the required authorization and failure cases.
The API and Nova Tech frontend share a repository. The frontend currently uses mock data; API integration is a later task.
A responsive React storefront with 20 demo products, search, combined filters, sorting, pagination, a persistent cart, checkout, and customer and admin flows.
Successful CI and GitHub Pages deployment, plus documented interaction checks and responsive checks at 1440, 768, and 390px.
Build a complete shopping interface with clear navigation, reusable components, and useful loading, empty, error, and success states.
Product discovery, stock-aware cart controls, validated checkout, demo login and registration, profiles, and local admin management.
React Router pages → shared components and Context state → local mock datasets and localStorage, built with Vite.
Filter before sorting and pagination, derive cart totals from quantities, clamp stock limits, and preserve direct-route refreshes on GitHub Pages.
A published Task 4 frontend with a source-linked checklist that distinguishes verified interactions from implemented features.
Mock data only. Login, roles, orders, and checkout are demonstrations; there is no API, database, or payment integration.
An educational assessment simulator with an 80-minute timer, six sample questions, optional camera and microphone preflight, and a visible browser-activity log.
Published on GitHub Pages. Copy, cut, paste, focus, tab visibility, and fullscreen events are logged as local metadata with JSON export.
Make assessment monitoring understandable by showing participants which browser events the page observes.
A dashboard, consent and device preflight, timed questions, results, and a local activity drawer with downloadable JSON.
React and TypeScript manage assessment stages. Browser event listeners write metadata to sessionStorage; Vite builds the Pages demo.
Optional media permissions, visible event reporting, listener cleanup, and session-local storage. Clipboard text, audio, and video are not saved or uploaded.
A public learning lab for authorized testing of browser behavior and the limits of assessment monitoring.
An educational simulation. Events do not establish cheating; the app does not detect OS screenshots or record media.
A single-service full-stack task manager with JWT authentication, reminders, filtering, automatic database setup, and PostgreSQL persistence.
Same-origin frontend and API, documented production configuration, and a health endpoint for deployment.
Task tracking often splits the interface, API, and deployment into unnecessary moving parts.
An authenticated task manager with reminders, filters, automatic schema setup, and PostgreSQL persistence.
One Express service serves the static interface and API, backed by PostgreSQL on the same origin.
JWT authentication, a 32-character minimum secret, managed SSL support, restricted CORS, and a health endpoint.
A compact full-stack system that can be deployed as one Node web service with a managed database.
AI suggestions are disabled in production until a hosted provider is implemented. The task-management features operate independently.
An import-ready n8n workflow that validates incoming tickets, classifies five issue types, assigns priority, calculates SLA deadlines, and returns structured JSON.
Credential-free workflow, sample payloads, transparent rule ordering, and automated tests for triage scenarios.
Support teams lose time manually reviewing and prioritizing every incoming ticket.
An import-ready webhook flow that validates requests, classifies issues, assigns priority, and calculates SLA deadlines.
POST webhook → validation and rule engine → classification and SLA calculation → structured JSON response.
Core n8n nodes only, no credentials, security rules evaluated first, transparent categories, and reusable output.
A consistent first-pass triage process packaged with sample payloads, documentation, and automated tests.
A lightweight browser app for tracking applications, statuses, notes, search, filters, statistics, and JSON backups—without accounts or a backend.
Published on GitHub Pages with local storage, explicit JSON backups, dark mode, and no account or backend.
Job seekers need one place to track applications, statuses, links, dates, and follow-up notes.
A responsive dashboard for CRUD operations, search, status filters, statistics, and explicit backups.
A framework-free browser interface stores records in localStorage and exports or restores JSON on demand.
No account, backend, database, API key, or silent data transfer; the user controls every backup.
A published browser tool that also runs locally and keeps application records on the user's device unless they export a backup.
The work is public, inspectable, documented, and connected to the implementation—not invented testimonials.
Six engineering case studies across five public project repositories, with source code, documentation, and implementation history.
Inspect GitHub ↗ 02 / SECURITYThe E-commerce API documents authentication, RBAC, IDOR protection, safe SQL, rate limits, and a Postman test plan.
Inspect evidence ↗ 03 / TESTSThe ticket-triage workflow includes executable tests across validation, security, outage, access, billing, and default cases.
Inspect tests ↗ 04 / DOCUMENTATIONEach featured build explains setup, architecture, constraints, security choices, and what still comes next.
Read the docs ↗Clarify the real workflow, users, and failure cases.
Define data, boundaries, roles, and expected behavior.
Implement the smallest useful system cleanly.
Test permissions, inputs, edge cases, and outputs.
Document, deploy, observe, and improve.
Developing server-side features, PostgreSQL models, REST API integrations, authentication flows, validation, testing, debugging, and technical documentation.
Public projects spanning API security, a React storefront, ProctorLab browser monitoring, PostgreSQL applications, local browser tools, and n8n automation.
Tafila Technical University—building practical software experience alongside academic study in AI and data science.
Google credential ID 24563886, listed in the CV featured on LinkedIn.
I’m open to internships, freelance backend work, automation projects, and technical collaborations.
Schedule a Meeting↗