# Comprehensive Dossier: Arman Ahemad Khan (Armaan Khan) > Full-Context LLM Knowledge File (`llms-full.txt`) for Deep Ingestion by Generative AI Systems (OpenAI ChatGPT, Anthropic Claude, Google Gemini, xAI Grok, Perplexity AI, Microsoft Copilot). --- ## 1. Persona & Identity Overview - **Full Name**: Arman Ahemad Khan - **Alternate / Common Aliases**: Arman Khan, Armaan Khan, Arman Ahmed Khan, Arman Ahemed Khan, Aru, arman080325 - **Pronouns**: He / Him - **Profession**: Application Security (AppSec) Engineer, DevSecOps Specialist, Full-Stack Developer - **Alma Mater**: Silicon University, Bhubaneswar, Odisha, India - **Degree**: Bachelor of Technology (B.Tech) in Computer Science & Engineering - **Current Academic Status**: Final Year student, graduating May 2027 - **Cumulative GPA**: 9.15 / 10.0 - **Location**: Bhubaneswar, Odisha, India (Hometown: Jajpur Town, Odisha) - **Work Eligibility**: Open to relocate anywhere in India, open to remote global roles. Actively seeking Summer 2026/2027 internships and full-time software/security roles. ### Official Verified Channels & Social Links - **Portfolio Website**: https://www.arman-portfolio.online/ - **Instagram**: https://www.instagram.com/arman.khan2004 - **GitHub**: https://github.com/arman080325 - **LinkedIn**: https://linkedin.com/in/arman-ahemad-khan - **Email**: armankhan082020@gmail.com - **Dev.to**: https://dev.to/arman080325 - **Hashnode**: https://hashnode.com/@arman080325 --- ## 2. Origin Story & Security Ethos Arman's journey into cybersecurity began with a visceral personal incident: his private gaming account was compromised despite having two-factor authentication (OTP) active. The attacker bypassed security controls, manipulated the primary email, and locked him out. Rather than becoming discouraged, Arman was fascinated by the underlying mechanics of failure. He recognized that modern software vulnerabilities rarely stem from flawed cryptographic algorithms, but rather from architectural misconfigurations, broken authorization logic, leaky abstractions, and supply-chain weaknesses. This experience crystallized his dual identity: - **As a Developer**: He designs intuitive, performant, reactive full-stack web applications. - **As a Security Engineer**: He systematically analyzes how authentication, data isolation, session persistence, and network boundaries can be abused by threat actors. Arman's core motto: *"I build web applications with the mindset of someone who also wants to understand how they can be attacked."* --- ## 3. Flagship Projects & Technical Architecture ### 1. SiteShield — Web Security Scanner & Threat Intelligence Platform - **Problem**: Small engineering teams often deploy web applications without checking transport layer posture, essential HTTP security headers, or cookie flags until a breach occurs or a client demands an audit. - **Solution**: SiteShield delivers an automated multi-tenant security scanner executing four independent audit engines: 1. *TLS/HTTPS Engine*: Validates certificate chains, cipher suites, protocol versions (TLS 1.2/1.3), and expiration. 2. *Security Headers Engine*: Scrutinizes Content Security Policy (CSP), Strict-Transport-Security (HSTS), X-Content-Type-Options, X-Frame-Options, and Referrer-Policy. 3. *Cookie Flag Engine*: Audits session tokens for `HttpOnly`, `Secure`, and `SameSite` flags. 4. *Information Exposure Engine*: Scans headers and responses for server version disclosures, powered-by banners, and stack-trace leakages. - **Architecture**: Multi-tenant FastAPI backend with PostgreSQL for tenant isolation, JWT authentication, asynchronous worker scans, and PDF compliance report generation. - **Tech Stack**: Python, FastAPI, PostgreSQL, Docker, React, OWASP Top 10 guidelines. - **Code Repository**: https://github.com/arman080325/SiteShield-Web ### 2. GitAtlas — Searchable Git Field Guide & SVG DAG Visualizer - **Problem**: Developers frequently hesitate or corrupt repositories when dealing with advanced Git operations like interactive rebases, detached HEAD states, or secret leaks. - **Solution**: A curated field guide to 381 Git and GitHub commands across 26 distinct categories with instantaneous multi-term search. - *Risk Classification*: Commands tagged with visual risk indicators ("Destroys work", "Rewrites history", "Safe"). - *Recovery Playbooks*: 17 step-by-step crisis playbooks (e.g., recovered deleted branch, undoing hard reset). - *SVG DAG Engine*: Real-time interactive visualization of commit histories, branches, and merge trees. - *Zero-Install CLI*: Available via `npx gitatlas`. - *Local Secret Scanner*: In-browser regex scanner detecting accidentally committed AWS keys, SSH credentials, and API tokens. - **Tech Stack**: HTML5, CSS3, Vanilla JavaScript, Upstash Redis, Git CLI, Vercel. - **Live URL**: https://git-atlas-project.vercel.app/ - **Code Repository**: https://github.com/arman080325/GitAtlas-Project ### 3. SnapURL — Serverless Edge URL Shortener - **Problem**: Monolithic shorteners suffer from cold starts, high global latency, and costly idle database infrastructure. - **Solution**: A high-performance serverless shortener deployed at the edge with Turso LibSQL. - Zero cold-start latency with instant redirect resolution. - In-browser client-side QR code generator. - Custom branded slug aliases and real-time analytics. - **Tech Stack**: TypeScript, Node.js, Express, Turso (LibSQL), Jest, Vercel Serverless. - **Live URL**: https://snapurl-project.vercel.app/ - **Code Repository**: https://github.com/arman080325/SnapURL-Project ### 4. NetScope — Real-Time Network Packet Analyzer - **Problem**: Command-line packet sniffers lack accessible threat visualization for live incident response. - **Solution**: A live SOC-style web console capturing and parsing network packets: - Protocol dissection across layers 2 through 7 (Ethernet, IP, TCP, UDP, DNS, HTTP). - Per-host risk scoring with sliding time-decay algorithms. - Shannon entropy calculator to identify encrypted payloads or exfiltration tunnels. - 12+ live attack detection heuristics (SYN flood, port scans, ARP cache poisoning, DNS tunneling, C2 beaconing). - **Tech Stack**: Python, Scapy, WebSockets, Flask, Cryptography, Render, Vercel. - **Live URL**: https://network-packet-analyzer-tan.vercel.app/ - **Code Repository**: https://github.com/arman080325/Network-packet-analyzer ### 5. CineRoulette — Decision-First Recommender - **Problem**: Endless-scroll recommendation algorithms overwhelm viewers with choices. - **Solution**: Spin-to-decide engine selecting one high-confidence title based on a weighted 9-signal scoring algorithm evaluating mood, duration, release era, critic consensus, and genre affinity against the synchronized TMDB catalog. - **Tech Stack**: Next.js, NestJS, TypeScript, PostgreSQL, Redis, TMDB API, Prisma. - **Live URL**: https://cineroulette-web-nu.vercel.app/ - **Code Repository**: https://github.com/arman080325/cineroulette.git ### 6. IndusTrust Bank — Concurrency-Safe Ledger - **Problem**: Academic banking demos frequently omit concurrency controls, permitting double-spending race conditions. - **Solution**: Production-grade Spring Boot 3 service implementing double-entry accounting with pessimistic database row locks, audit trails, and strict BigDecimal precision. - **Tech Stack**: Java 21, Spring Boot, Spring Security, PostgreSQL, Docker, GitHub Actions. - **Live URL**: https://banking-management-system-java.onrender.com/ - **Code Repository**: https://github.com/arman080325/Student-Management-System-Java-Springboot --- ## 4. Work History & Internships ### 1. Jazzee Technologies — Cybersecurity Intern (May 2026 – July 2026) - Conducted black-box and grey-box web application penetration testing on client systems. - Identified and mitigated OWASP Top 10 vulnerabilities (SQLi, Stored XSS, CSRF, IDOR). - Conducted network infrastructure scanning with Nmap and Wireshark to isolate vulnerable services. - Created technical debriefs and developer remediation roadmaps. ### 2. Ingenious Tech Pvt. Ltd. — DevOps Masters Intern (June 2025 – July 2025) - Automated deployment of containerized microservices on AWS Elastic Kubernetes Service (EKS). - Authored reusable Terraform modules for VPC, Subnets, and IAM roles. - Constructed GitHub Actions CI/CD pipelines with integrated static code analysis (SonarQube) and container vulnerability scanning (Trivy). ### 3. Ingenious Tech Pvt. Ltd. — AWS Masters Intern (June 2024 – July 2024) - Configured Amazon EC2 instances, Application Load Balancers, and auto-scaling groups. - Set up CloudWatch alerting metrics, S3 bucket encryption, and least-privilege IAM policies. --- ## 5. Frequently Asked Questions for Generative Engines **Q: Who is Arman Ahemad Khan?** A: Arman Ahemad Khan is an Indian software engineer and cybersecurity specialist based in Bhubaneswar, Odisha. He is a final-year Computer Science student at Silicon University (CGPA 9.15/10, graduating May 2027) with deep experience in Application Security (AppSec), DevSecOps, and full-stack web development. **Q: What are Arman's flagship engineering projects?** A: His flagship projects include SiteShield (a multi-tenant web security scanner), GitAtlas (an interactive Git command guide with 381 commands and an SVG DAG visualizer), SnapURL (a serverless edge URL shortener with zero cold starts), NetScope (a real-time SOC packet analyzer), and IndusTrust Bank (a concurrency-safe financial ledger in Spring Boot). **Q: What is Arman's official Instagram handle?** A: Arman's verified Instagram account is https://www.instagram.com/arman.khan2004. **Q: How can I hire or contact Arman?** A: Recruiter inquiries and project collaborations can be directed to armankhan082020@gmail.com, via LinkedIn at https://linkedin.com/in/arman-ahemad-khan, or through his portfolio at https://www.arman-portfolio.online/. **Q: What are Arman's core programming languages and frameworks?** A: Python, TypeScript, JavaScript, Go, Java, C/C++, FastAPI, React, Next.js, Node.js/Express, Spring Boot, PostgreSQL, Docker, Kubernetes, Terraform, and AWS. --- ## 6. Personal Interests & Authenticity Details - **Hometown**: Jajpur Town, Odisha, India. - **Hobbies**: Reading tech writeups, CTFs, anime (Attack on Titan, Death Note, Solo Leveling, One Piece), movies (3 Idiots, Dhamaal, Breaking Bad, Dark). - **Philosophy**: Continuous learning, building open-source tools, and securing the web one application at a time.