About

Developer by trade. Hacker by curiosity. Teammate everywhere.

I'm Zaigham — a full-stack developer from Lahore, Pakistan, who likes building things almost as much as finding out how they break.

Lahore, Pakistan · GMT+5
Portrait of Zaigham Naveed

What I bring

One developer, from idea to production.

I take products from a rough idea to something real users pay for — and I build AI into them where it actually earns its place.

  • Product development

    SaaS built end to end — architecture, API, database and UI — scoped so you ship early and keep shipping.

  • AI integrations

    LLM features wired into your product: summarising, extracting, generating and automating the busywork.

  • Chatbots & RAG

    Assistants that answer from your own docs and data with retrieval-augmented generation — grounded, not guessing.

  • CI/CD & deployment

    Pipelines, environments and cloud deploys set up and maintained by me — no separate DevOps engineer to hire.

Developer, AI engineer and DevOps — one hire, one invoice.

My story

From Oracle forms to SaaS products.

I studied Computer Science at the University of South Asia (2014–2018), majoring in Software Engineering, and started my career writing SQL, forms, and reports as an Oracle developer.

From there I built complete ERP modules — import/export, inventory, accounts — then moved into the MERN stack: a hospital management system, AI-driven products for Y Combinator–backed startups, and today SaaS products as a Senior MERN Stack Developer.

Off the clock you'll find me testing websites for security holes (with permission), on a basketball court, or planning the next trip. I take the work seriously — and I have a lot of fun doing it.

Ethical hacking

I break things — with permission.

Security is the side of the web I find most exciting. I do ethical hacking and security testing on websites — only ever after the owner has agreed to it — hunting for SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF) and other flaws, then reporting them so they get fixed.

Honestly, the moment a payload lands and a bug confirms itself is one of my favourite feelings. It also makes me a better builder: I write code assuming someone like me is going to poke at it.

  • SQL injection
  • XSS
  • CSRF
  • & more
SQL injection — reported to the owner
SQL injection — reported to the owner
Stored XSS — reported to the owner
Stored XSS — reported to the owner
CSRF — reported to the owner
CSRF — reported to the owner
Reflected XSS — reported to the owner
Reflected XSS — reported to the owner

Off the keyboard

Usually on a basketball court.

Basketball keeps me sharp: quick decisions, reading the play, and trusting the people around you. Funny how much of that carries straight into shipping software with a team.

Game day
Game day
Practice
Practice
With the team
With the team
Court time
Court time

Trips

Collecting places, people, and stories.

New places, new people, new food — travel is how I reset, and it's where some of my best ideas show up.

Trip one — add place & year
Trip one — add place & year
Trip two — add place & year
Trip two — add place & year
Trip three — add place & year
Trip three — add place & year
Trip four — add place & year
Trip four — add place & year
Trip five — add place & year
Trip five — add place & year
Trip six — add place & year
Trip six — add place & year

Still reading? We'll probably get along.

Building something — or want someone to find the holes in it before anyone else does?