Independent Web Developer & Cybersecurity Expert

Premium Web Development. Pure Craft, No Agency Overhead

An independent digital studio focused on delivering tailored WordPress builds, scalable e-commerce solutions, and highly secure web infrastructures. Custom-coded for speed, designed to make your brand stand out.

Everything Your Web
Presence Needs.

Custom Web Architecture

Engineered from the ground up. Whether deploying headless CMS ecosystems or custom-coded WordPress architectures, I deliver bloat-free, scalable infrastructures tailored to your exact business logic. Zero reliance on rigid, off-the-shelf templates.

Proactive Cybersecurity

Security by design, not as an afterthought. I deploy master-level server hardening, custom Web Application Firewalls (WAF), and rigorous vulnerability protocols to shield your digital assets from automated bots and targeted exploits.

Performance & Core Vitals

Speed as a strict competitive advantage. I ruthlessly optimize rendering paths, asset delivery, and server response times to achieve perfect Lighthouse scores and satisfy the most demanding Core Web Vitals thresholds.

Recent Builds.

E-commerce / AI Platform

Project Alpha

Reduced load time by 60%.

Organization / Blog

Project Beta

Reduced load time by 60%.

The Lab

Latest Dev Notes.

Deep dives into frontend engineering, secure backends, and thoughts on the evolving web.

Mar 2026

Building a Secure 2FA Voting Gateway with PHP & Twilio

Mar 2026

Hardening the Core: Beyond the “Security Plugin” Illusion

Mar 2026

The “Zero-Bloat” Architecture: Optimizing for Core Web Vitals

Ready to think out of the box?

Let's build something secure, fast, and uniquely yours. Since I handle everything personally, you get direct communication and zero agency fluff.

LOC[-1, 1]

>_ SUDO RUN EXPERIMENTS

The Lab: Where Logic Meets Chaos.

A collection of technical deep-dives, creative coding experiments, and cybersecurity research...

Visual Engineering

Tanks Game

A simple game for two players.Each player must destroy the opponent’s tanks by clicking on the corresponding location of each tank on the screen. In other words, in order to destroy a tank on the right side you must click on its corresponding location on the left side.If the hit is not accurate, the tank […]

Visual Engineering

Pure CSS Night Picture

Visual Engineering

Pure CSS Minion

This is a “Pure CSS” design of Minion while he is looking for something.I wish you love it 🙂

Snippets

JavaScript

Minimal GSAP Magnetic Button

#GSAP#JavaScript

Snippets

1 min

High-Performance Scroll Observer (Vanilla JS)

#JavaScript#Performance#Scroll

Snippets

1 min

Secure PHP Headers

#Cybersecurity#Header#PHP

Technical Articles

4 min

Building a Secure 2FA Voting Gateway with PHP & Twilio

During the development of the parlementdesexiles.eu platform, I faced a critical architectural challenge: How do you build a public voting system that is entirely accessible, completely anonymous, yet strictly protected against duplicate votes and bot manipulation? The solution required bypassing standard out-of-the-box tools and engineering a custom PHP/MySQL backend integrated with a Two-Factor Authentication (2FA) […]

#2FA#Cybersecurity#PHP

Building a Secure 2FA Voting Gateway with PHP & Twilio

Technical Articles

Hardening the Core: Beyond the “Security Plugin” Illusion

There is a dangerous misconception in the web development ecosystem, particularly within WordPress, that installing a “Security Plugin” makes your site secure. In reality, adding more PHP code (in the form of a heavy plugin) often increases your attack surface rather than reducing it. True cybersecurity requires a “Zero-Trust” mindset applied at the server and […]

#Cybersecurity#WordPress

Technical Articles

3 min

The “Zero-Bloat” Architecture: Optimizing for Core Web Vitals

The modern web is suffocating under the weight of bloated JavaScript frameworks and excessive third-party scripts. Speed is no longer just a metric; it is a fundamental feature of user experience and a critical ranking factor for Google’s Core Web Vitals. When architecting high-performance websites—especially immersive ones utilizing WebGL or GSAP—the challenge is balancing visual […]

#Architecture#Performance#Website

The “Zero-Bloat” Architecture: Optimizing for Core Web Vitals

Have a complex technical challenge that needs a "Lab" approach?

> sys.log: Initializing Lab Environment...

LOC[-1, 0]

>_ THE MIND BEHIND FIKRAH

I don't design logos or run ad campaigns. I am the engineer who builds fast, secure, and high-converting web platforms.

Engineering Rooted in Reality

Hi, I'm Obaida. With over 8 years of experience in web development, my journey isn't your typical corporate story. I started top of my Software Engineering class in Syria, but it was my time working as an IT Manager and journalist in high-risk geopolitical zones that reshaped my vision. I saw firsthand how critical data privacy is—not just as a compliance checkbox, but as a matter of real-world safety. That experience defines how I code today: robust, resilient, and built to survive.

Master-Level Cybersecurity

To bridge the gap between high-performance web development and bulletproof security, I earned a Master’s degree in Cybersecurity and Management in France. From implementing ISO 27001 standards to ensuring strict GDPR compliance, I don't just build websites; I engineer digital fortresses. Every custom WordPress or Node.js architecture I deploy is secured against advanced digital threats by design.

Based in France, Building for the Web

Fikrah is an officially registered independent digital studio in France. When you work with me, there are no agency middlemen—just direct collaboration with a lead engineer. I've always envisioned the web beyond the traditional vertical scroll. Instead of waiting for a client bold enough to ask for a spatial web experience, I built it myself using Headless WordPress and Node.js. This is what "Out of the Box" truly means.

STATUS: SECURE_OP
ID: ALNABWANI_O

LOC[1, -1]

>_ MASTER-LEVEL CYBERSECURITY

Bulletproof Your Digital Assets

Cyber threats don't sleep, and neither should your security. I provide enterprise-grade security audits, GDPR compliance, and proactive protection for high-stakes websites.

One-Time Security Audit

A comprehensive deep-dive into your current architecture. I identify vulnerabilities, plugin loopholes, and server-side weaknesses before hackers do.

Proactive Shield (Monthly)

Continuous monitoring and managed maintenance. Includes regular core updates, malware scanning, daily encrypted backups, and an advanced Web Application Firewall (WAF) setup.

Compliance & Privacy

For media platforms and businesses handling sensitive data. I ensure your architecture meets strict data privacy regulations (GDPR) and protects both you and your users from surveillance and breaches.

SYSTEM DIAGNOSTIC

Ask Fikrah AI: "Is my WordPress site currently safe?

LOC[-1, -1]

>_ THE FIKRAH ROADMAP

No Agency Bloat. Just Precision Engineering.

Every project follows a strict, security-first development lifecycle designed for scale and resilience.

The Architecture

Before writing a single line of code, we define the optimal tech stack, server infrastructure, and database logic tailored to your business goals.

The Architecture

Before writing a single line of code, we define the optimal tech stack, server infrastructure, and database logic tailored to your business goals.

Security-First Build

Zero reliance on bloated themes. Every component is custom-coded with strict security practices, ensuring absolute data integrity and reducing attack surfaces.

Optimization & Motion

We integrate fluid GSAP animations and immersive interactions that elevate the user experience without sacrificing a millisecond of load speed.

Optimization & Motion

We integrate fluid GSAP animations and immersive interactions that elevate the user experience without sacrificing a millisecond of load speed.

Launch & The Vault

Deployment via hardened servers, followed by an immediate transition into 'The Vault' for continuous monitoring and proactive defense.

Ready to map out the perfect architecture for your project?

LOC[0, -1]

SYS.ADMIN.LOCATION: FRANCE (CET)ADMIN.LOCAL_TIME: 00:00:00CAPACITY: Accepting new projectsUPLINK: E2E ENCRYPTED

>_ OVERRIDE AI PROTOCOLS

Establish Direct Human Uplink.

For complex web architectures, sensitive security audits, or strategic consulting. Bypass the automated core and initialize a direct connection with the Lead Engineer.

Book a Strategy Call

Schedule a focused 30-minute video transmission to outline your technical roadmap, discuss custom integrations, or assess security requirements.

Direct WhatsApp Line

For rapid project inquiries, quick consultations, or urgent security breach responses. End-to-end encrypted mobile messaging.

[ OPEN SECURE CHAT ]

Classified Transmission

Submit sensitive RFPs, server vulnerability reports, or NDA requests via email. Utilize my PGP public key to ensure absolute data integrity.

[ SEND SECURE EMAIL ]

LOC[1, 0]

>_ ARCHIVE_UNLOCKED

Mission Logs

Case File 04: Bespoke Artist Portfolio (Khaled Dawwa Artworks)

A Paris-based Syrian sculptor required a purely minimalist digital exhibition space to showcase complex physical artworks (sculptures with multi-angle views and 2D sketches). Off-the-shelf CMS platforms introduced unnecessary bloat that detracted from the art itself.

Engineered completely from scratch without relying on any standard CMS, utilizing a raw PHP, MySQL, HTML, CSS, and JS stack. Developed a highly specific database structure to handle multiple image arrays for 3D sculptures versus single images for sketches. Implemented a tightly secured, custom backend accessible exclusively by three authorized administrators to manage the exhibition content.

Case File 03: Scalable RBAC System (D1Plus News)

Construct an Arabic-language news portal capable of handling high content volume with a strict, multi-tiered editorial workflow.

Bypassed off-the-shelf CMS solutions completely. Built a full-stack platform using raw PHP, MySQL, HTML, CSS, and JS. Engineered a custom Role-Based Access Control (RBAC) system featuring advanced password encryption to secure editorial permissions.

Case File 02: Investigative Thematic UI (Eye-Shots)

Build an immersive platform dedicated to investigative photojournalism. The client required a distraction-free dark UI and a highly specific, non-standard way of curating and displaying visual articles that standard themes couldn't handle.

Developed a bespoke WordPress Plugin from scratch to handle complex article selection and display logic. Wrote heavy, optimized custom CSS to craft a tailored dark mode that enhances the photography without sacrificing page load speed or reading accessibility.

Case File 01: Secure Voting System (Parlement des Exilés)

The NGO needed an online electoral system for migrant students who lack standard voting rights in France. The system required strict verification to ensure voters resided in France, alongside a complex conditional logic forcing voters to select exactly two candidates of different genders.

Engineered a custom validation gateway on top of WordPress. Integrated SMS-based One-Time Passwords (OTP) and IP address verification to confirm geographic eligibility securely. Built a custom logic algorithm to enforce the male/female candidate selection rules before a ballot could be cast.

// LIVE_SYSTEMS

Deployment 03: Ensemble Pour Luchon

A focused, high-clarity informational platform for Patrick Bayon's local election campaign in Luchon. Designed to deliver key political programs and updates efficiently.

#Responsive#WordPress#Informational#UI

Deployment 02: Réfugiés Enseignement Supérieur (RES)

An accessible and welcoming institutional platform for a French NGO dedicated to helping migrant students navigate higher education. Features custom CSS enhancements for a tailored user experience.

#Responsive#WordPress#NGO#CustomCSS

Deployment 01: Projects Clinic

A streamlined, professional digital presence for a corporate consulting firm. Engineered for rapid load times, absolute responsiveness, and a frictionless B2B user journey.

#WordPress#CorporateUI#Responsive

// CORE_SYSTEM_ARCHITECTURE

Case File 00: Fikrah.dev (The Matrix)

01_Challenge

Design a digital presence that transcends the traditional static portfolio. The objective was to engineer a living, breathing demonstration of elite web architecture, context-aware AI integration, and proactive cybersecurity—functioning simultaneously as an immersive showcase and a hardened digital fortress.

02_Architecture

Engineered on a Headless WordPress and Next.js 15 foundation, the interface is structured as a 3x3 spatial coordinate grid navigated fluidly via GSAP. The system is driven by an embedded, agentic AI Core capable of programmatic routing, dynamic portfolio curation based on semantic tags, and performing real-time website capability analysis.

03_Security

Operates on a strict "Zero-Cookie" default policy to guarantee privacy without intrusive consent walls. The infrastructure enforces aggressive Content Security Policies (CSP), SSRF-hardened edge functions for the live audit tool, rate-limiting via Redis, and complete backend obfuscation to seamlessly neutralize automated brute-force attacks.

LOC[0, 1]

>_ CORE CAPABILITIES