all projects

AgentOne — SAP B1 AI Automation Platform

A multi-tenant SaaS platform (sapb1.ai) that connects on-prem SAP Business One to cloud AI agents. A Go headless agent bridges the customer's SAP B1 (HANA / SQL Server) to a broker and connectors; a Python configurator self-provisions each tenant on GCP Cloud Run — Cloud SQL, buckets, schema bootstrap, and a per-tenant MCP server. ~22 microservices span an agent registry, downloadable connectors, Stripe billing, and MS Teams / WhatsApp integrations.

PythonGCPDockerNode.jsAPI
view case study

ChakravyuhRift — Autonomous Offensive-Security Agent Platform

A private research build. An autonomous offensive-security platform that drives an LLM through a custom async tool-calling agent loop over 30+ containerized security-tool microservices (nmap, nuclei, sqlmap, ZAP, …) exposed via an MCP-over-HTTP bridge, under a 4-tier safety model. Every agent decision runs a per-decision Plan-Do-Check-Act (PDCA) cycle whose audited reasoning traces become fine-tuning data for domain-specialist models — a closed self-improvement loop.

PythonDockerMCPLLMReact
view case study

Foundry — LoRA Fine-Tuning & Adapter-Lifecycle Platform

A private research build. A self-built MLOps platform that trains, tracks, evaluates, and serves small LLM (LoRA) adapters across heterogeneous compute — Modal serverless GPUs, Kaggle, and local Apple-Silicon MLX. Exposes a Click CLI and a FastAPI service over a pluggable compute-backend abstraction, with run tracking in SQLite, eval-gated deployment, and OpenAI-compatible inference. Built to train ChakravyuhRift's pentest-specialist adapters, but architecturally domain-agnostic.

PythonLLMEmbeddingsAPI
view case study

AI-Native Hiring Funnel

The screening pipeline you're using right now. A single profile.json is the source of truth for this Gatsby site, an MCP server (8 tools incl. a semantic match_role engine), Schema.org + llms.txt + .well-known discovery, and a live serverless link-minter: paste a JD into a password-protected admin UI and get a short s.nishanttiwari.com link that returns a self-contained screening prompt — content-negotiated to serve a copy-and-paste page to browsers and raw text to AIs. No LLM in the request path, so it runs at ~$0. Surface propagation is regression-tracked in a custom agentic QA system (AQA).

LambdaDynamoDBNode.jsReactAPI
view case study

nishant-profile-mcp — AI-Readable Résumé MCP Server

An MCP (Model Context Protocol) server that exposes my professional profile — skills, projects, certifications, and experience — directly to AI recruitment agents. Ships a local-embedding semantic matcher and a 5-dimension match_role engine that scores any job description against my profile and returns a hire signal. 8 tools over stdio, fully offline (runs MiniLM embeddings locally, no API key).

Node.jsLLMEmbeddingsAPI
view case study

Yukt Capital — Invoice-Discounting Marketplace + MCP Server

Yukt Capital (yuktcapital.com) is a TReDS-style invoice-discounting marketplace where suppliers raise invoices on corporate buyers and investors finance them early at a fair discount. I built a companion MCP server (17 tools) that lets any MCP host — Claude Desktop, Claude Code, Gemini CLI — log in and run the full workflow in natural language: browse the marketplace, fund or bid on invoices, raise invoices, run reverse-factoring programs, and trade on the secondary market.

Node.jsFintechAPI
view case study

AQA — System of Record for Agentic Verification

A TestLink-style test-management and verification-memory platform built for the agentic coding loop, exposed over MCP (43 tools). It tracks plans, cases, dependencies, run history, and requirements-to-test traceability, with a claim/verify protocol (doer ≠ checker) and semantic regression memory: a failed run's root-cause reasoning is stored and recalled when a similar failure recurs, so agents get the prior diagnosis instead of re-deriving it. One service layer, surfaced three ways — REST API, MCP server, and CLI.

PythonAPIEmbeddings
view case study

l33tpwn — Cloud Pentest Training Platform (2025 Overhaul)

A ground-up rebuild of l33tPWN into a hosted, browser-based cybersecurity training platform (l33tpwn.com), in the style of HackTheBox / TryHackMe. Each student gets a private AWS lab — a Kali attack box, an optional Kali Purple blue-team/SOC box (Suricata IPS + Wazuh), and on-demand vulnerable target VMs from a 48-target catalog — all running in the browser via noVNC in ~90s. Added a leet/l33tpwn CLI (~30 verbs across student and operator faces), keyless shell access via AWS SSM Session Manager, guided walkthroughs, and EventBridge-driven idle teardown.

PythonLambdaDynamoDBCloudFrontTerraform
view case study

OpenClaw AI — Dream Server Open Source Contribution

Contributed to Dream Server, an open source self-hosted AI platform ('the Linux of Local AI'). Implemented OpenClaw-to-Open-WebUI integration: built HTTP API shim, LLM provider patching (OLLAMA_URL/LITELLM_KEY), Docker Compose overlay for service orchestration, and configuration layer for connecting OpenClaw's agent framework to Open WebUI's chat interface. PR accepted and personally integrated by the project maintainer into the Lemonade release branch.

DockerPython
view case study

Autonomous AI Sales Pipeline — SAP B1 Lead Generation

Built a fully autonomous multi-agent AI sales pipeline using OpenClaw on GCP. 6-agent team: Scout (lead scraping from partner case studies), Qualifier (composite scoring with identity/event/contact dimensions), Verifier (SAP B1 confirmation), Enricher (contact discovery via Apollo/Hunter/theHarvester/Perplexica cascade), Signal Hunter 'Pulse' (intent-based scoring using Gemini/Groq for hiring/funding/complaint/migration signals), and Closer (email generation). Custom pipeline database with SQLite, real-time dashboard on port 3000, WhatsApp gateway integration, automated signal sweeps on cron. Built from scratch in 3 weeks.

PythonDockerGCP
view case study

Check Point Cloud Firewall Manager

Built a comprehensive cloud firewall management platform bridging Check Point and AWS. Created a custom SDK surpassing Check Point's own, enabling programmatic rule management across Security Groups, NACLs, Network Firewall (stateless and stateful/Suricata), and Web ACLs. Automated network feed ingestion into AWS prefix lists. Built pipeline to pull rules from Check Point, translate to intermediate format, and deploy to AWS Network Firewall with named rules and variable mapping. Deployed on GCP CloudRun with automated triggers. Set up Headscale/Tailscale VPN mesh across AWS regions for secure connectivity. 638+ hours of development.

PythonAWSGCP CloudRunDockerTerraform
view case study

Authenticated RDP/SSH Access POC

Proof of concept for authenticated access to AWS webservers via HTML-based RDP and SSH using Apache Guacamole. Evolved into the full Auth0 + GUAC fleet management system (52 hrs). Client review: 'Nishant is an amazing engineer! Even better than expected, both in quality and in time!'

AWSPythonDockerAPI
view case study

PowerPoint E-Commerce Store

Consultation and build of an e-commerce website for selling PowerPoint templates. Delivered across multiple phases including consultation, build, and final stage readiness. Client review: 'Nishat is highly recommended. His knowledge and skills are exemplary.'

WordPressWooCommerceAWS
view case study

Secure Fleet Access - Auth0 + Guacamole

Built a secure access management system for a fleet of AWS instances and databases using Apache Guacamole for browser-based remote access and boto3 for infrastructure orchestration. Gated all access through SASE architecture with Auth0 authentication, providing zero-trust SSH and RDP access to cloud resources without exposing them to the public internet. 52 hours of development. Client review: 'Nishant is an amazing engineer! Even better than expected, both in quality and in time!'

AWSBoto3PythonDockerAPI
view case study

Product Customizer - ColdFusion to FOSS Migration

Infrastructure rescue migrating a product customizer platform from end-of-life Adobe ColdFusion + MSSQL stack to a fully FOSS stack before ColdFusion's core support ended (Nov 2025). Migrated the application server from ColdFusion to Lucee, database from MSSQL to MySQL, containerized with Docker, and deployed on GCP. Preserved the product customizer's backend logic, ontology system, and WooCommerce integration throughout the migration.

DockerGoogle CloudWooCommerceMySQLAPI
view case study

SAPHI - AI Agent Platform

Set up Google Cloud and OpenAI infrastructure for an AI Agent platform (SAPB1). Configured cloud-based inference pipelines, integrated OpenAI APIs with custom agent orchestration, and deployed the system on GCP for production use.

Google CloudOpenAIPythonAPI
view case study

Multi-Tenant Deployment System

Redesigned a deployment system to add monitoring, automated rollback, and multi-tenant isolation. Built observability dashboards, implemented blue-green deployment strategies, and created tenant-scoped resource management on AWS.

AWSDockerAnsibleCDK
view case study

LLM Email Interface

Built an email-based interface for LLM interaction using AWS SES for email receiving, OpenAI Assistants API for conversation management, DynamoDB for state, and S3 for attachment storage. Implemented CloudWatch logging, CloudConvert for file processing, thread management for multi-turn conversations, and an AWS Amplify frontend with social login and custom prompt templates. 572 hours of development, $34,340 project value.

LLMOpenAIPythonDynamoDBAWS S3
view case study

Tomato AI - Real-Time Voice Accent Modification

Built the complete infrastructure for real-time voice accent modification on live SIP calls over 7 months. Created a custom FreeSWITCH plugin (mod_tomato) that intercepts the caller's audio stream, sends it to an ML inference model via bidirectional gRPC, and re-inserts the accent-modified audio back into the live call. Integrated NVIDIA Triton Inference Server via a C++ client for model serving. Built SIP proxy handling both signaling and media traffic, deployed Asterisk-based call center with multi-agent support, IVR menus, and inbound DID. Verified selective voice modification on incoming and outgoing call legs per agent. System accepted live calls from mobile phones on public networks. Produced full restoration documentation and AWS asset mapping at project closure.

FreeSWITCHgRPCTritonC++SIP
view case study

Private 4G Cellular IoT Network

Built a private 4G LTE network for off-grid locations using Meta/Facebook Magma as the core network, Radio Access Network (RAN) with COTS radios, and compatible SIM cards. Designed for deployment in mining sites, dams, and farming operations where no commercial cellular coverage exists. The private network serves as the backbone for IoT devices — sensors connect to this network and are monitored through a management interface. Also delivered an AWS IoT product line research report for connected vehicle fleet use cases.

Magma4G LTEPythonDockerAWS
view case study

CodelessGPT - AI Workflow Platform

Built a no-code AI workflow automation platform (codelessgpt.com). Users upload documents into a Library and Datasource system, compose reusable Prompt Templates, and wire together Actions (Gmail, API calls, web crawling, search) into automated Flows. The platform runs GPT-powered analysis pipelines over uploaded knowledge bases — e.g. resume screening against job descriptions, portfolio analysis, blood report analysis, pentest report review. Essentially a RAG-based workflow orchestration engine where non-technical users build and run AI-powered document processing pipelines without writing code.

OpenAIReactNode.jsPythonEmbeddings
view case study

Enterprise VPN and Network Security

Three related enterprise networking projects: MAC address management via VPN (84 hrs), VPN prototype on GCP, and Private EdgeVPN.io installation for secure peer-to-peer networking. Built secure network tunneling and enterprise network isolation solutions. Client review: 'Thinking outside the box, agile, and just absolutely the best freelancer. I wish I could hire him fulltime!!!'

Google CloudAWSPythonDocker
view case study

Bhartiya Urban - E-Commerce Platform

Designed and prototyped the full technical architecture for a web and mobile e-commerce platform. Built 6 API prototypes, system design and implementation, mobile frontend and backend prototypes. Conducted 11 consultation sessions and 18 technical demonstrations covering information architecture, payment flows, and deployment strategy.

ReactNode.jsAPIMobileE-Commerce
view case study

Prolly - Fintech Data Platform

Built a fintech mobile application integrating multiple heterogeneous data sources under licence. Implemented vector embeddings and a recommendation engine to create derived financial products. Designed the data pipeline for rotating new licensed datasets in and out of production, managing data freshness and licensing constraints on AWS infrastructure.

EmbeddingsPythonAWSMobileFintech
view case study

Liq Residuals - Leasing Platform

Architected and prototyped a mobile-first leasing application. Built 4 API prototypes for the core leasing workflow, conducted 5 consultation sessions and 6 technical demonstrations. Set up cloud hosting infrastructure on AWS.

MobileAPINode.jsAWS
view case study

l33tPWN — Browser Hacking Lab (Original, 2019)

The original l33tPWN (2019–2020): a zero-configuration ethical hacking lab that runs entirely in the browser, giving users a lag-free full desktop of an attack machine in the cloud to exploit multiple target web apps and operating systems. Built the cloud infrastructure automation with Python/boto3, Lambda, a DynamoDB backend, and an AWS AppSync/Amplify frontend. (Later rebuilt — see the 2025 overhaul.)

PythonBoto3LambdaDynamoDBAWS Amplify
view case study

CloudDesk - AMI Automation Platform

Built an AMI creation and management platform with a point-and-click UI for generating Ansible files. Automated the full storage lifecycle: EBS to snapshot, snapshot to S3, S3 to Glacier, Glacier to Deep Archive. Designed multi-region fault-tolerant architecture with DevSecOps pipeline.

ReactAWS AmplifyDynamoDBAnsibleAWS S3
view case study

Cloudtantra - WooCommerce Store + Terraform

Built a production e-commerce system on WordPress/WooCommerce deployed on AWS LightSail with RDS Aurora. Integrated PayPal, PayTm, and Razor Pay payment gateways. Developed 12 Terraform templates for CloudFormation-based digital AWS solutions sold via the Cloudtantra store.

WordPressTerraformCloudFrontElastiCacheAWS RDS Aurora
view case study

Aim Global - Electra Election System

Built a complete election management platform with a real-time control room for monitoring polling data, and a companion mobile app (Electra Poll Winner). The system handled election briefings, live results aggregation, and field reporting from polling stations.

MobileNode.jsAPI
view case study

Aim Global - Mumbai Angels Portal

Built a new portal for Mumbai Angels, one of India's leading angel investor networks. A 10-minute demo showcases the full platform for managing deal flow, investor profiles, and startup evaluations.

Node.jsAPISAAS
view case study

Aim Global - WordPress Automation

Large-scale instant website deployment system. Automated the provisioning and configuration of WordPress sites at scale, enabling rapid deployment of new sites with pre-configured themes, plugins, and content.

WordPressPythonAPI
view case study

Copyright © 2026 Nishant Tiwari All Rights Reserved