Gideon Djan Afoh

I build web systems that are secure by design.

Software engineer · MSc Cyber Security candidate

Five years building PHP and MySQL applications for agriculture, healthcare, churches and business. Now specialising in application security and security architecture at Arden University, Germany.

View my work Read publications Get in touch
5+years building systems
MScCyber Security
3sectors served

Try my secure login flow

A simplified model of the authentication project below.
1
Email and passwordPassword checked against a salted hash
2
Email one-time codeShort-lived code, limited attempts
3
Secure sessionRegenerated ID, HttpOnly and Secure cookie
Waiting for a request.

Selected work

Systems built for real organisations, from requirements through deployment and support.

Enterprise Cocoa Operations System

Kuapa Kokoo Limited · MIS Officer

One platform connecting District Offices, Port Offices and Head Office. It turns purchasing, funds transfer, evacuation and port data into management reports.

  • Weekly purchase reporting and cocoa evacuation tracking
  • Role-based access, user administration, HR and asset management
  • Exploring forecasting using historical purchases and weather data
PHPMySQLAJAXBootstrapREST APIs

ChurchSave

Gados IT Solutions · Founder

A church management platform built around one question: who has stopped attending, and how do we follow up?

  • Member records, attendance tracking and absentee identification
  • Multiple administrators, subscriptions and payment processing
PHPMySQLSaaSPayments

getHealthy

Gados IT Solutions · Healthcare management

Database-driven healthcare applications designed around confidentiality, access control and reliability. This work started my focus on securing systems that handle sensitive data.

Attendance and identity systems

Biometric and facial-recognition integration

Hikvision device integration feeding a central database with employee registration, attendance reports and admin dashboards.

HR, invoicing and client platforms

Business systems

Leave management, SMS notifications, PDF invoices, receipts and subscription renewals, with Paystack and Hubtel payment integrations.

Security engineering

I learn how systems are attacked, then build and design so those attacks become harder.

Secure PHP login framework

Authentication security project

Email and password, then an email OTP, then a secure session. Built to show authentication done properly.

  • Password hashing, TOTP and email OTP, login throttling and account lockout
  • Role-based access control, input validation, audit logging
  • CSP, HSTS, CORS, JWT (HS256 and RS256) and compromised-password checks

Application security

OWASP principles, secure authentication, session security, access control, security headers, secure API design.

Network and architecture

Segmentation, VLANs and VLSM, ACLs, Layer 2 hardening, OSPF authentication, security-control mapping against ISO, NIST and CIS.

Assessment and response

Nmap and enumeration, vulnerability and risk assessment, threat modelling, incident response, MITRE ATT&CK.

Publications

Writing on technology, software engineering and cybersecurity.

Browse all publications →

Technology

Tech publications

Software development, web applications and practical engineering.

Publication links will be added here soon.

Cybersecurity

Security publications

Application security, secure system design and understanding threats.

Publication links will be added here soon.

Experience

  • Founder and Software DeveloperGados IT Solutions · ChurchSave, getHealthy, ShopHub
  • MIS OfficerKuapa Kokoo Limited · Operations Department
  • PHP Software EngineerPilgrim Consulting Group
  • Software DeveloperAnalitica Innovare
  • Website DeveloperAfrica Education Watch

Education and learning

  • MSc Cyber SecurityArden University, Germany · in progress
  • BSc Information Technology ManagementUniversity of Professional Studies, Accra
  • ISC2 Certified in Cybersecurity (CC)Preparing
  • Certified Ethical Hacker (CEH)Preparing
  • TryHackMeHands-on labs: scanning, enumeration, web and Linux security

Toolkit

PHPMySQL / PDOJavaScriptjQueryHTML5 / CSS3BootstrapREST APIsGit / GitHubNmap

Let's build something secure.

Open to application security, secure software engineering, security engineering and consulting opportunities, and to collaborations.

Emaildev@gideonafoh.com LinkedInlinkedin.com/in/gideonafoh GitHubgithub.com/gadosdev