Contact
Portrait of Miguel Arcanjo

Miguel Arcanjo

Miguel ArcanjoFull stack / Cybersecurity

Full stackdevelopment.& security.

Web applications, tools and security studies.
Here you will find the projects, the technical decisions and what I learned along the way.

See projects
More about me
01 / ABOUT ME

About me.
Beyond the stack.

Hi, I'm Miguel Arcanjo

I'm 21 and my path in technology started back in high school through robotics, where I learned to program and competed in national competitions. I'm currently in the 8th semester of Computer Science and focusing my studies on Cybersecurity, especially web security and Bug Bounty, seeking to understand how vulnerabilities and attacks work in order to build more secure applications.

What I'm building

Zelo: an app that brings together rental management and a maintenance marketplace. The agent manages their properties, the tenant opens requests through WhatsApp and local service providers respond with transparent pricing and protected payment. I am building the MVP, from product to code.

1 / 3

What I'm studying

I'm currently deepening my studies in web application vulnerabilities, learning how to identify and exploit them in practice to grow in Bug Bounty. At the same time, I'm studying ways to apply Artificial Intelligence to this process, researching and planning HackerBot, an idea for a tool that will help analyze and investigate vulnerabilities in the future.

2 / 3

Away from the editor

When I'm not coding or studying security, I like to spend my time gaming, mostly Valorant, working out at the gym and riding my motorcycle. These are some of the things that are part of my routine and help me step away from the computer for a while.

3 / 3
Swipe to see more
02 / PROJECTS

Projects & technical notes.

PROJECT / 0101 / 02
Cover of the To-do Live project
Desktop

To-do Live.

Project

Windows desktop app that only allows the church's streaming computer to shut down once the entire end-of-service checklist is complete, with OBS integration.

Scroll for details
Implementation

At the church I attend, it was common for someone to forget to turn off the cameras or end the livestream after the service. To-do Live solves this by turning the shutdown into a mandatory checklist: the computer can only be turned off once every item is checked.

  • Editable checklist, saved as JSON, with manual items and automatically verified items.
  • OBS integration via WebSocket (obs-websocket v5): the app detects whether the stream or recording is still running, prevents the item from being checked and lets you end the broadcast with one click.
  • Shutdown lock: the Shut down and Restart options are removed from Windows (Start menu, Ctrl+Alt+Del and Alt+F4), leaving the app's button as the only way. As a second safeguard, the app intercepts the system shutdown request (WM_QUERYENDSESSION) and shows the reason with the ShutdownBlockReason API.
  • Starts with Windows, as a single instance, with no option to close it from the X.
  • No dependencies: a single executable that uses the .NET Framework already present in Windows, compiled with the native csc, no SDK needed.
Stack
C#.NET FrameworkWinFormsWin32 APIWebSocketOBS
Repository
Next: Apart
PROJECT / 0202 / 02
Cover of the Apart project
FullStack

Apart.

Project

A desktop app I built for my group of friends after Google Meet started slowing everything down while we played: lightweight voice calls, screen sharing up to 1080p60 to show matches and projects, and groups with channels, roles and real-time chat.

Scroll for details
Implementation

Apart came from a real pain point. My friends and I wanted to play together while sharing matches, showing projects we were building and watching videos as a group. Google Meet handled the call, but it was far too heavy with a game running: it dragged the match down, the shared screen lost quality, and it simply wasn't built for this.

So I built our own app: light enough to run next to the game, with good-quality screen sharing and everything we use day to day. It's an Electron app in plain HTML, CSS and JavaScript, with no framework, an Appwrite backend and voice on my own LiveKit server, which I set up on an Azure VM.

Calls and screen sharing

  • Real-time voice with AI noise suppression (RNNoise in WebAssembly), push-to-talk and global shortcuts that work while a game is focused
  • Screen sharing at 720p or 1080p, 30/60 FPS, to show matches and projects, plus camera and a soundboard
  • "Watch together": the same YouTube video, in sync for everyone in the call
  • Role-based moderation (mute, deafen, disconnect) enforced on the server, ringing DM calls, a LIVE tag and an AFK tag

Groups and chat

  • Text and voice channels, categories, role-restricted private channels, invite links and a moderation log
  • Real-time messages with replies, reactions, mentions, polls, GIFs, link previews, attachments and voice messages
  • Online presence, custom status, "Playing now", "Listening on Spotify" and "Last seen"

Security and distribution

  • Every sensitive write goes through a server function that checks friendship, role and permission; the app only mirrors the rules
  • Data protected by Appwrite permissions (Teams and per-channel roles), a strict CSP and no secrets in the client
  • Windows installer with automatic updates through GitHub Releases and a "What's new" tour on every version
Stack
ElectronNode.jsJavaScriptAppwriteLiveKitWebRTCWebAssemblyAzureDockerelectron-builder
See it live
Work stack
03 / STACK

Work stack.
Piece by piece.

Tools and where they fit in.
Pick an area or keep scrolling.

Tools Scroll to switch areasLAYER 01 / 04
01/ 04 — INTERFACE

Interface and state.

Building responsive, component-based interfaces, API integration, state management and experiences focused on usability and performance.

Re

React

Component-based interfaces

01
N

Next.js

Rendering and navigation

02
TS

TypeScript

Contracts and typing

03
Tw

Tailwind CSS

Responsive visual systems

04
JS

JavaScript

Logic and interactivity

05
HTML

HTML5

Structure and semantics

06
01/ 04 — INTERFACE

Interface and state.

Building responsive, component-based interfaces, API integration, state management and experiences focused on usability and performance.

Re

React

Component-based interfaces

N

Next.js

Rendering and navigation

TS

TypeScript

Contracts and typing

Tw

Tailwind CSS

Responsive visual systems

JS

JavaScript

Logic and interactivity

HTML

HTML5

Structure and semantics

02/ 04 — LOGIC & DATA

APIs, data and business rules.

API development, authentication, business rules, data persistence and real-time communication between applications.

JS

Node.js

Services and integrations

Py

Python

Automation and processing

Pg

PostgreSQL

Data and relationships

{}

REST APIs

Communication between systems

Ex

Express.js

APIs and HTTP routes

Ja

Java

APIs and business rules

Sp

Spring Boot

Services and REST APIs

Pr

Prisma

ORM and data modeling

IO

Socket.IO

Real-time communication

JWT

JWT

Authentication and authorization

PHP

PHP

Web development

Lr

Laravel

APIs and applications

03/ 04 — SECURITY

Application security and vulnerability analysis.

Study and practice in web application security, vulnerability analysis, access control, networking and offensive security fundamentals, focused on AppSec and Bug Bounty.

~/

Linux

Systems and permissions

OW

OWASP

Web application risks

IP

Redes

Protocols and traffic analysis

</>

AppSec

Security in development

Bu

Burp Suite

Web security testing

WS

Web Security

Web application testing

04/ 04 — DELIVERY

Environments, hosting and delivery

Setting up and maintaining environments, hosting, DNS, version control and deployment and continuous integration processes

Git

Git

History and collaboration

Dk

Docker

Reproducible environments

↻

CI/CD

Continuous verification and delivery

▲

Vercel

Application publishing

Cd

Cloudflare

DNS, proxy and security

CP

cPanel

Hosting and web services

WHM

WHM

Server administration

Bu

Buddy

Pipelines and deployment

04 / EXPERIENCE

Experience.
Where I learned by doing.

Jobs, internships and projects that shaped
how I build and protect systems.

Scroll through the journey Swipe through the journey01 / 04
Job Current

2025 - Present

Customer Support

Qualitare · Remote

I provide technical support and maintenance for web applications in production, making adjustments and implementing new features in projects for different clients. My work covers front-end and back-end with PHP, Laravel, WordPress, Vue.js and Next.js, as well as investigating and solving problems in real applications.

I also handle deployments, configuration and environment maintenance, working with Docker, WHM/cPanel, Cloudflare, DNS and email services. I take part in security testing and authorized Red Team activities, follow requests directly with clients, help plan solutions and stay involved in the process through validation and final delivery.

  • Maintaining and evolving digital projects for different clients
  • Building full stack improvements and features
  • Deployment and management of production environments
  • Security testing and authorized Red Team activities
Next.jsCPanelWHMDockerWordPressPHPSecurityLaravelVue
See more
Internship

2023 — 2024

Full Stack Developer

Software Factory - UNIPÊ · João Pessoa, PB, Brazil · Hybrid

I worked as a Full Stack developer building an inventory management system for UNIPÊ's university pharmacy. I led Back-end development with Java and Spring Boot and also contributed to the Front-end, API integrations and the database, taking part in the project's deliveries and agile ceremonies.

  • Led the Back-end team
  • Built a system used by the university pharmacy
  • Full stack work and API integration
JavaSpring BootReactNext.jsJavaScriptPostgreSQLMySQLGitGitHubPostmanREST APIScrum
Freelance

2022 — 2023

Freelance Full Stack Developer

Self-employed · Remote

Together with another developer, I built a member management system for a church, designed to centralize and organize information about members, families and documents. I worked mainly on the interface and the API integration using React and TypeScript, and also helped structure the components, forms, validations and business rules.

  • Built a system used in a real-world setting
  • Created reusable components and forms
  • Front-end integration with the API
ReactTypeScriptViteGitGitHubREST APIESLint
Education

2023 — 2027

Computer Science

University Center of João Pessoa - Unipe · João Pessoa, Brazil

Bachelor's degree in Computer Science, covering software development, algorithms, data structures, databases, networking and systems. Throughout the program I have been focusing my studies on Cybersecurity and Application Security, deepening my knowledge of web vulnerabilities and offensive security.

  • Back-end lead at the Software Factory
  • Built a system for the university pharmacy
NetworkingAlgorithmsSystemsJavaPythonData StructuresDatabases
04 / CONTACT

Want to talk about a project?

Email me or find my projects on GitHub.