Skip to content
View zuhairhalawa's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report zuhairhalawa

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
zuhairhalawa/README.md

Zuhair Halawa — software engineering, cybersecurity and applied AI

I build software that goes beyond the demo — secure systems, AI tools, and products people can use.
Computer Science · Engineering-minded · Building in the UAE

LinkedIn   /   NFC'er   /   Public repositories   /   Contact


Selected work

01   TapTrail · LIVE DEMO · PUBLIC
Turn screenshots into interactive, clickable walkthroughs and share a self-contained HTML guide that works offline.
React · TypeScript · Vite · Tailwind CSS · IndexedDB

02   StudyAI · PUBLIC
A local-first study platform for lecture imports, spaced-repetition flashcards, practice exams, and an optional AI tutor grounded in course material.
React · TypeScript · Cloudflare Workers · Gemini

03   NFC'er · FOUNDER
Building an NFC products business and its commerce platform, including smart business cards and digital profiles.
Laravel · PHP · JavaScript · MySQL · NFC

04   RELAY · PRIVATE / EARLY BETA
An experimental end-to-end encrypted messenger. The implementation is private and has not undergone an independent security audit.
Java · React · TypeScript · Web Crypto

05   ZeroTrace Lab / BioHACK3D '26 · PRIVATE / RESEARCH
Preparing for the BioHACK3D final with computer-vision and adversarial-ML research around physical authentication. Source publication is pending review.
Python · PyTorch · OpenCV · FastAPI · React

06   AI-generated code security research · GRADUATION PROJECT
Exploring automated detection and repair of security and maintainability defects in LLM-generated code.
Python · Semgrep · Bandit · Ruff · Trivy

07   Algorithm visualizations · PUBLIC
Interactive explorations of Longest Increasing Subsequence and Longest Path / NP-completeness.


Open-source developer tools

Small, practical CLIs built to solve problems encountered while contributing to open source. Each repository includes a working terminal demo and installation instructions.

FreshQ · npm
Find newly posted, unanswered GitHub Discussions across repositories.
TypeScript · GitHub GraphQL · CLI

AdvisoryGuard · npm
Catch accidental CVSS and other security-advisory metadata changes before publication.
TypeScript · OSV · Supply-chain security

CIFirstAid · npm
Find useful root-cause evidence in noisy GitHub Actions failure logs.
TypeScript · GitHub Actions · Diagnostics

ReadmeProof · npm
Check README references and verify opted-in examples inside restricted Docker containers.
TypeScript · Markdown · Docker


Credentials

Cisco · Introduction to Modern AI
Cisco · Computer Hardware Basics

Digital credentials open on Credly for verification.


Engineering toolkit

Python TypeScript Java PHP React Laravel FastAPI Docker Linux GitHub Actions

Security & quality: Semgrep · Bandit · Trivy · Gitleaks · Ruff · PHPUnit · Playwright


Backing good engineering
I welcome project sponsorship, open-source support, and thoughtful collaborations. Reach out if you'd like to help build something useful.
Support the work — sponsor Zuhair Halawa on GitHub

Build carefully. Test what matters. Ship what works.

Pinned Loading

  1. AdvisoryGuard AdvisoryGuard Public

    Catch accidental data loss and risky metadata changes in security advisories before publication.

    TypeScript 1

  2. FreshQ FreshQ Public

    Read-only CLI that finds fresh, unanswered GitHub Discussions across repositories and organizations.

    TypeScript 1

  3. CIFirstAid CIFirstAid Public

    Evidence-first GitHub Actions failure diagnosis CLI: turns huge CI logs into a concise, actionable root cause. Offline, read-only, no telemetry.

    TypeScript 1

  4. ReadmeProof ReadmeProof Public

    Check whether README instructions actually work: offline static checks, plus opt-in verification of examples inside disposable, locked-down Docker containers.

    TypeScript 1