Founder & CEO, Fiddo Technology · Offensive Security · Full-Stack Engineering
Mogadishu, Somalia · Nairobi, Kenya
I build software for businesses in Somalia and Kenya, and I secure it. I started out in offensive security, so I think about how a system can be broken before I ship it. Today I lead Fiddo Technology, a software and IT services company that builds payment, logistics and commerce platforms for the region.
- Education: MSc in Computer & Information Systems Security, BSc in Information Technology
- Experience: Offensive Security Specialist, IT Manager, Founder & CEO
- Community: founder of Somali Red Team, a free training community for offensive security
- Open to: remote roles in security engineering and full-stack development
| Project | Description | Stack |
|---|---|---|
| somali-payments | Typed Node.js client for EVC Plus, Zaad and Sahal mobile-money payments through WaafiPay | TypeScript |
| attack-surface-scanner | CLI that maps an organisation's external attack surface: subdomains, TLS, security headers and exposed files | Python |
| whatsapp-order-bot | Order-taking bot in Somali, built on the official WhatsApp Cloud API with webhook signature verification | TypeScript |
| ai-ad-video-agent | Agent that turns a product brief into a vertical video ad with a script, voiceover and motion graphics | Python · Claude API |
| qr-smart-menu | Scan-to-order restaurant menu that needs no backend and delivers orders over WhatsApp | JavaScript |
| somali-red-team | Learning roadmap, pentest methodology and cheat sheets for the community | Docs |
| Product | Description |
|---|---|
| Jiheye Tracking | GPS fleet and vehicle tracking SaaS |
| Fiddo Exchange | Multi-tenant management platform for foreign-exchange bureaus |
| Fiddo Pay | NFC and QR tap-to-pay ordering and payments |
| Fiddo Smart Menu | QR ordering system for restaurants |
| Jiheye Shop | Inventory and point-of-sale SaaS for small retailers |
| Fiddo Scanner | External attack surface management |
Languages: TypeScript, JavaScript, Python, SQL, Bash
Web & backend: React, Next.js, Node.js, REST APIs, webhooks
Data & cloud: PostgreSQL, Supabase, Vercel, Linux servers, cPanel
Security: web application and network penetration testing, reconnaissance, attack-surface management, secure code review, Kali Linux, Burp Suite, Nmap
Integrations: WaafiPay (EVC Plus / Zaad / Sahal), WhatsApp Cloud API, Claude API
Reach me through fiddotechnology.com.



