·3 min read
Why AI Agent Web Browsing Can Open a Door to SSRF
Learn how giving AI agents the ability to fetch URLs can create Server-Side Request Forgery risk, and how an isolated egress proxy keeps internal networks out of reach.
Senior Full-Stack / Product Engineer — Milan, Italy
Behnoud
Mostafaie
I build and operate SaaS, enterprise, and AI-powered products end to end — from product definition through deployment and support.
Open to full-time roles
80
Engineer enterprise team
5,000+
SaaS users in 50+ countries
−70%
Infrastructure costs
2×
Faster releases
Profile
Full-stack engineer with 8+ years in software and web, including Linux administration and, since 2021, building SaaS, B2B, enterprise, and AI products end to end. Top Rated on Upwork. As sole engineer, built Elegant Menu, a multi-tenant restaurant SaaS, to 5,000+ registered users across 50+ countries. Delivered enterprise projects for A2A and Luxottica, led a 3-engineer team, cut infrastructure costs 70%, and halved release time.
Skills
Languages
TypeScript
JavaScript
SQL
Bash
Frontend
React
Next.js (App Router)
Micro-frontends
React Native
Expo
Tailwind CSS
shadcn/ui
Storybook
Design systems
Accessibility
Backend & Data
Node.js
NestJS
Microservices
REST APIs
GraphQL
WebSockets
Role-based access control
TypeORM
PostgreSQL
MongoDB
Redis
AI & Automation
Structured document extraction & validation
LangChain
Local/cloud LLM providers (Ollama)
RAG
n8n
Inngest
Claude Code
Skills
Cloud & Infrastructure
Linux (Ubuntu) server administration
Self-hosting
Coolify
GCP
Docker
Cloud Run
Vercel
Cloudflare
CI/CD
Git
Lerna monorepos
Cost optimisation
Testing & Integrations
Jest
Vitest
Sentry
Stripe
Twilio
WhatsApp
Telegram
Supabase
Thermal printers
Experience
Product Engineering
Products I designed, built, and operated in production.
5,000+ users · 50+ countries
Elegant Menu
QR-based menu & order management SaaS for restaurants and hotels.
- Built and scaled a multi-tenant SaaS with QR menus, order management, and Stripe payments as sole engineer to 5,000+ registered users across 50+ countries.
- Built an AI-powered PDF ingestion workflow with n8n that extracts and validates structured menu data, reducing manual onboarding effort.
- Operated the product across GCP/Cloud Run, Vercel, and Cloudflare, owning deployment, infrastructure cost, and production support.
Next.js
NestJS
MongoDB
n8n
GCP Cloud Run
Vercel
Cloudflare
40,000 users · 100,000 tickets sold
Tiktaac
Real-time event management & ticketing platform.
- Built a real-time ticketing platform with WhatsApp integration and QR ticket generation that reached 40,000 users and sold 100,000 tickets in 2 years, using NestJS, React, React Native, and server-sent events (SSE).
- Built a mobile ticket scanner with Expo and React Native for high-volume check-ins, and integrated Epson thermal ticket printers for door sales.
NestJS
React
React Native
Expo
SSE
Open Source & AI
Open source · Self-hosted
Vekt
Open-source, self-hosted recruiting platform.
- Designed and built a privacy-focused, GDPR-conscious platform with AI-assisted candidate screening and event-driven workflows using Inngest.
- Architected support for local (Ollama) and cloud LLM providers, reducing single-provider dependency for privacy-sensitive deployments.
Next.js
TypeScript
Inngest
Ollama
Docker
Education & Certification
Languages: Persian (Native) · Azerbaijani (Native) · Turkish (C1) · English (C1, TOEFL 102) · Italian (B1)
Blog
Notes From
the Field
Practical write-ups on AI, automation, and software architecture.
Contact
Let's Work
Together
I'm open to full-time senior full-stack and product engineering roles in Milan or remote. Reach me at hi@behnoud.net or on LinkedIn.