// SHIPPING
5 ACTIVE
Building things
that ship.
- INVT / grid platformMQTT · observability
- Metaspryextension + cloud app
- LiftorraMVP · building now
- CoographOSS · code-graph fixes
- DBuddyperf · themes
$ daily_commits · CET · GIT_ONLY
CORE_TEMP 37.0°C
ICE PERM
NET 04 NODES
VOL.III · ED.2026
FILE: PL-94-001
BUILD: NEON.7
TARGET_LOCK
>> SUBJECT_PROFILE.LOAD — PL-94-001
Paul Lukić, Full Stack Developer
WIRE_BIO.TXT042/042 BYTES
Full Stack Developer. I build Java/Spring backends and React/Svelte frontends, and have shipped both since 2019. By day I work on grid-scale energy software at INVT/grid platform. After hours I run my own products: Coograph, Metaspry, DBuddy and Liftorra. I also built and sold a Chrome extension. Mentor by default, ship by deadline.
Open to: full-stack (java + ts) · backend (spring · modulith) · founding engineer · deep contracts · pen-test / red team
- 07+YEARS SHIPPING
- +200%ORGANIC LIFT (SOLO)
- 2K+USERS (ACQUIRED)
- 150MAU ZERO CAC
>> WIRE_BIO · SUBJECT_PROFILE
/BRIEF
About me: what I build, how I work and what I'm looking for next.
STATUS
OPEN_TO_ROLES
CLEARANCE
PUBLIC · SHARE_OK
/usr/local/bin/netrunnerPID 94
[ BOOT ] netrunner_94 v2026.10 — kernel ok
[ AUTH ] subject = PAUL_LUKIC · clearance = PUBLIC
[ NET ] handshake @ NOVI_SAD ↔ /dev/grid
Full stack developer since 2019. Most days that means Java/Spring services behind React/Svelte interfaces, taken from first commit to production and kept running after. I build and run my own products too, so I care about the screen as much as the query behind it. I trained in penetration testing on TryHackMe, and it shows in how I review code. Open to full-stack, backend, founding-engineer or deep contract roles.
// BACKEND
Distributed Spring services
- Spring Boot · Modulith · Postgres · TimescaleDB · RabbitMQ · Redis · Keycloak
- Currently on INVT's grid-control platform: MQTT protocol fixes, observability rollouts, multi-repo WebClient → RestClient migration
- Comfortable with contract-first dev (OpenAPI), modulith decomposition and fixing time-windowing bugs nobody else wants
// FRONTEND
Production React + Svelte
- React 19 · Svelte 5 (runes) · SvelteKit 2 · TypeScript strict · Tailwind 4
- Rebuilt a text-highlight engine four times chasing peak performance; built a custom PDF viewer with CORS bypass
- Ships Chrome extensions end to end: Metaspry, DBuddy, and a sold result counter
// PRODUCT
End-to-end ownership
- Runs Metaspry solo: free Chrome extension, paid SvelteKit + Firebase app, Astro marketing site
- Sole engineer on Gastarbajter24: 150 MAU in 6 months at zero CAC, +200% organic via i18n + structured data
- Building Liftorra, a social workout app: SvelteKit PWA + Expo native app on Firebase
// SECURITY · OPEN_FOR_HIRE
Pen-tester / red team
- Completed TryHackMe's CompTIA PenTest+ and Jr. Penetration Tester paths (2023)
- Maintains Paxhax: a working notebook on tooling, exploits and responsible disclosure
- Brings a red-team mindset to code review and threat modelling on every project
- Available for paid pen-test engagements, security reviews and red-team contracts
//TRANSMITTED_FROM
- COOGRAPHOSS · 2026—NOW
- METASPRYSOLO · SAAS · LIVE
- DBUDDYCHROME_EXT · LIVE
- LIFTORRABUILDING · 2026
- GASTARBAJTER24SOLO · 2023—NOW
- WISEHOSTINGCONTRACT · 2026
- INVTGRID_CONTROL · 2025—NOW
- IGELPHONEFREELANCE · 2025—NOW
- 4BEESGAME · 2023
- CLUINGEX-COLLABWRITING · 22—25
- COR_TECHUS · 2020
- TEODESKENTERPRISE · 19—23
◢◤◢◤◢◤ SELECTED_WORK ◢◤◢◤◢◤
>> HOLO_MARKET · PROJECT_INDEX
/SELECTED_WORK
Products I build and run, plus work for employers and clients. Open any card for the full case study.
PLATES
09
ACTIVE
08 / 09
ID/0x0108AB
OSS · 2026 → ongoing · Solo author▸ LIVE
CH.4•23.7MHZ
SCAN_OK ●
- 8AI tools wired
- 17★github stars
- MITopen source
COOGRAPH
Open-source toolkit that helps AI coding assistants find the right code without reading the whole repo. One workflow, eight tools (Claude Code, Copilot, Codex CLI, OpenCode, Cursor, Devin Desktop, Aider, Cline). A SQLite + tree-sitter code graph served over MCP replaces grep-then-read with targeted dependency queries. Ships specialized agents, Claude Code lifecycle hooks and the OpenSpec proposal flow.
- MCP
- SQLITE
- TREE_SITTER
- PYTHON
- CLAUDE_CODE
- +2
DETAILVISIT
INVT · Dec 2025 → present · Software Engineer
▸ SHIPPING
CH.4•46.5MHZ
SCAN_OK ●
- MQTTprotocol fix
- multi-repoHTTP migration
- JVMmetrics rollout
GRID_CONTROL_PLATFORM
This platform lets grid operators (TSOs) control distributed energy assets. At INVT I work on the Spring/Modulith services that route those control messages. Shipped a protocol fix that corrected downstream aggregation, restored device geo-metadata and rolled JVM metrics across the platform. Now leading a multi-repo WebClient → RestClient migration.
- SPRING_BOOT
- MODULITH
- TIMESCALEDB
- RABBITMQ
- ARGOCD
- +2
DETAILVISIT
Solo founder · 2023 → ongoing · Product + Eng
▸ LIVE
CH.4•69.3MHZ
SCAN_OK ●
- 19weighted audit rules
- 3apps · ext + saas + site
- solobuilt + run
METASPRY
SEO and social meta-tag auditor. A free Chrome extension scans any page in one click: every meta tag, share-card previews, a weighted 0-100 score across 19 rules, robots.txt / sitemap / llms.txt, JSON-LD and an AI-readiness checklist. A paid web app adds cloud history, bulk audits, drift monitoring with email and Slack alerts, and team workspaces.
- SVELTEKIT_2
- SVELTE_5
- FIREBASE
- CHROME_MV3
- ASTRO
- +2
DETAILVISIT
Solo · 2025 → ongoing · Chrome extension
▸ LIVE
CH.4•92.1MHZ
SCAN_OK ●
- 82animated themes
- 327users · oct 2026
DBUDDY
Chrome extension that makes duelingbook.com look and play the way you want: 82 animated themes with per-theme attack effects, duel hotkeys, a middle-click pile wheel, turn alerts, replays, chat tools, test hands with opening odds and optional foil card finishes. Never changes game rules, collects no data.
- REACT
- CHROME_MV3
- SHADOW_DOM
- +2
DETAILVISIT
Founder · 2026 → building now · Web + mobile
▸ BUILDING
CH.4•16.8MHZ
SCAN_OK ●
- WIPbuilding now
- 2apps · pwa + native
LIFTORRA
In progress: a social workout app. Log your lifts, see yourself get stronger, and train with the people who keep you honest. Fast set logging, automatic PRs, a weekly plan that writes itself, and friends and groups with per-item privacy. One codebase family for an installable web app and a native phone app.
- SVELTEKIT_5
- EXPO
- REACT_NATIVE
- +3
DETAILVISIT
Cluing (ex-Collabwriting) · 2022 → 2025 · Full-Stack + Mentor
▸ LIVE
CH.4•39.6MHZ
SCAN_OK ●
- 4×engine rebuilds
- PDFcustom viewer
CLUING
Research app that lets readers highlight and search what they read across the web, PDFs and Kindle (rebranded from Collabwriting to Cluing). Rebuilt the core highlight engine four times chasing peak performance, shipped a custom PDF viewer with CORS bypass, social scrapers (Reddit/X/Quora/YT/LinkedIn), Kindle notes sync, Tiptap editor, fuzzy AI search and a theming system. Mentored juniors and set long-term code quality direction.
- SVELTEKIT
- SPRING
- MYSQL
- +1
DETAILVISIT
Technical consultant · 2023 → ongoing · Sole engineer
▸ ONGOING
CH.4•62.4MHZ
SCAN_OK ●
- 150MAU · zero CAC
- +200%organic lift
GASTARBAJTER24
Classifieds marketplace for the Balkan diaspora in Germany. Five listing verticals, trilingual UX (DE/EN/SR), Google OAuth, GDPR cookie consent, SSR meta. Still actively iterating: new verticals, deliverability, growth loops.
- SVELTE_5
- SVELTEKIT_2
- FIREBASE
- +2
DETAILVISIT
IGEL Phone Germany · Aug 2025 → ongoing · Senior Technical Consultant
▸ ONGOING
CH.4•85.2MHZ
SCAN_OK ●
- CMSsanity studio
- DElive site
IGELPHONE
Web product for IGEL Phone, a German phone and accessories reseller. Architected and shipped it end to end as a freelance consultant: a Next.js frontend, a Sanity content studio and Firebase serverless functions, with multilingual, accessible UI. Live at igelphone.de.
- NEXT.JS
- SANITY
- FIREBASE
- +1
DETAILVISIT
Solo · 2021 → exited
▸ ACQUIRED
CH.4•9.0MHZ
SCAN_OK ●
- 2K+active users
- exitacquired
RESULT_COUNTER
Chrome extension surfacing real Google result counts. Built for friction reduction, scaled to 2,000+ users with no marketing, then sold.
- CHROME_API
- JS
DETAILVISIT
▓▒░▒▓ CAREER_LEDGER ▓▒░▒▓
>> CAREER_LEDGER · WHERE I'VE BEEN
/LEDGER
Every role so far, newest first, with what I shipped in each.
ENTRIES
07
SPAN
2019 → 2026
01
2026
2026
⌖ REMOTE
WISEHOSTING
// FULL_STACK_DEVELOPER · CONTRACT
- LARAVEL
- LIVEWIRE
- ALPINE.JS
- TAILWIND
- PHP
- GO
- REACT
- DOCKER
- Overhauled the public website of a Minecraft server-hosting company against a new Figma design system: homepage, pricing, Bedrock, modded and modpack pages, help centre, blog, news, glossary and a scroll-driven company timeline.
- Built the shared section and atom components and type tokens the redesigned pages are assembled from, and swapped animated GIFs sitewide for poster-first transparent WebM loops with LCP fixes.
- Fixed modpack installs end to end: in the Go node daemon, timed-out installers no longer take a node down, installs that never start are reported, and crashes during a panel outage are retried instead of lost.
- Made the modpack catalogue say which packs can actually be installed, with reliable RAM figures, and hardened the game panel's power actions and API permissions around installs.
02
2025
DEC_2025 — PRESENT
⌖ NOVI_SAD, RS
INVT
// SOFTWARE_ENGINEER · GRID_CONTROL
- JAVA
- SPRING_BOOT
- MODULITH
- POSTGRES
- TIMESCALEDB
- RABBITMQ
- REDIS
- KEYCLOAK
- ARGOCD
- TERRAFORM
- DOCKER
- Shipped a protocol fix in the MQTT gateway: control-message `to` timestamp now aligns with `from + device failure delay`, correcting downstream aggregation across the platform.
- Restored missing latitude/longitude on devices, eliminating a class of integration bugs around asset/location metadata for downstream consumers.
- Drove the JVM-metrics observability rollout across multiple Spring Boot microservices, with matching K8s config, giving on-call consistent visibility cross-service.
- Leading a multi-repo migration from Spring WebClient → RestClient, standardising HTTP usage and cutting long-term maintenance risk.
- Hardened the test suite: improved @ApplicationModuleTest strategy and removed brittle sleep-based timing, for fewer flakes in CI.
- Implemented backend feature work in Cybernoc (per-user Favourite Portfolio) and expanded scheduled-job DTOs (added EnergyProducts to CFO).
03
2025
AUG_2025 — PRESENT
⌖ REMOTE · DE
IGEL_PHONE_GERMANY
// SENIOR_TECHNICAL_CONSULTANT · FREELANCE
- NEXT.JS
- REACT
- SANITY
- FIREBASE
- TYPESCRIPT
- Architected and shipped the full-stack web product end to end: a Next.js frontend, a Sanity content studio and Firebase serverless functions.
- Led the design and build of multilingual, accessible UIs, the CMS content models and the typed data flows between them.
- Built for performance and maintainability, so the team runs the site's content without a developer in the loop.
04
2023
MAR_2023 — MAY_2023
- Built branded browser games for Marlboro and Cocta on agency cycles, playable on phone and embedded in client campaigns.
- Owned smooth canvas animation and resilient UI under deadline pressure.
05
2022
NOV_2022 — MAY_2025
- Rebuilt the core text-highlighting engine four times chasing peak performance, keeping the product viable as the corpus and DOM grew.
- Built a custom PDF viewer with CORS bypass and smart content extraction, enabling a content category competitors couldn't ship.
- Shipped a fallback Chrome extension so power users could keep highlighting across the open web.
- Integrated Kindle notes sync, Tiptap editor, fuzzy AI search and a theming system. Wired Sentry + Glitchtip for production observability.
- Mentored junior engineers and set long-term code-quality direction across the team.
06
2020
MAR_2020 — JUN_2020
⌖ REMOTE · US
COR_TECH_GROUP_US_LLC
// FRONTEND_DEV · UI/UX · PART-TIME
- FIGMA
- BEM
- HTML
- CSS
- PHP
- Designed and built the UI for a US-client B2B storage tracking system, remote.
- Authored layout systems in BEM with Figma-led handoff and PHP integration.
07
2019
OCT_2019 — MAR_2023
⌖ BELGRADE, RS
TEODESK
// FULL_STACK_ENGINEER
- KNOCKOUT.JS
- REACT
- REDUX
- TAILWIND
- BOOTSTRAP
- JAVA
- SPRING
- MYSQL
- Designed and built the interactive project-timeline view with advanced multi-select task logic, the flagship feature of a B2B SaaS (Knockout.js + Java/Spring, 2020–2023).
- Maintained backend logic and UI consistency across the platform, coupling Java/Spring services to a Knockout frontend.
- Started on a React + Redux internal-tools storage management system (2019–2020): learned production frontend rigour, design systems and code review on the job.
●●● LIVE_FEED · NOW ●●●
>> LIVE_FEED · THIS WEEK
/NOW
What I'm building, learning and reading this month.
WEEK
44 / 52
SNAPSHOT
2026-10-23
Building things
// LEARNING
Sharpening
edges.
- OSCP prep
- CRDTs
- WebGPU shaders
~1h/day · evenings
// ON THE STACK
- Designing Data-Intensive AppsKleppmannRe-read
- The Web App Hacker's HandbookStuttardIn progress
- Atomic HabitsClearFinished
// AVAILABILITY
OPEN TO:
Full-stack (Java + TS)Backend (Spring · Modulith)Founding engineerDeep contractsPen-test / red team
Reply in 24h.
paul.lukic94@gmail.com
● LIVE · hand-kept · outdated entries are a bug — ping me if you spot one.
◇◆◇◆ INVENTORY ◇◆◇◆
>> INVENTORY · WEIGHTED · 2026
/TOOLKIT
The languages, frameworks and infrastructure I use in production, grouped by layer.
STACK
45 TOOLS
SCOPE
DAILY · SHIPPED · PROD
// BACKEND
11Services that
don't page at night.
- JAVA
- SPRING_BOOT
- MODULITH
- POSTGRESQL
- TIMESCALEDB
- MYSQL
- FIREBASE
- RABBITMQ
- REDIS
- KEYCLOAK
- LARAVEL
// FRONTEND
09Interfaces
that earn the click.
- REACT_19
- SVELTE_5
- SVELTEKIT_2
- TAILWIND
- ASTRO
- EXPO / REACT_NATIVE
- CHROME_EXTENSIONS
- KNOCKOUT.JS
- CANVAS
// LANGUAGES
08Dialects spoken
daily.
- TYPESCRIPT
- JAVASCRIPT
- JAVA
- SQL
- PYTHON
- GO
- PHP
- BASH
// INFRA & OPS
09Rails under
the ship.
- GIT
- DOCKER
- ARGOCD
- TERRAFORM
- FIREBASE_HOSTING
- VERCEL
- CLOUDFLARE_WORKERS
- SENTRY
- GLITCHTIP
// PRACTICES
08Discipline
over ceremony.
- CODE_REVIEW
- MENTORSHIP
- OBSERVABILITY
- TESTING
- OPENAPI
- AI_TOOLING / MCP
- SEO / A11Y
- PEN-TESTING
// SCHOOLING
INFORMATION TECHNOLOGY TECHNICIAN
Secondary School Krupanj · graduated 2013
// CERTIFICATIONS
COMPTIA PENTEST+ PATH
+ TryHackMe · Jan 2023 Jr. Penetration Tester path · TryHackMe · Dec 2022 Advent of Cyber 4
// LANGUAGES
SERBIAN — NATIVE
English — proficient · German — basic
>> SECURITY_CLEARANCE · BLACKWALL_PROXY DETECTED
/CLEARANCE
Security work: my penetration-testing training, my TryHackMe profile and Paxhax, my notebook on tools and exploits.
ICE_BREAKER
ACTIVE
CERTS
03
CompTIA PenTest+ path
TryHackMe · Jan 2023 · Learning path · pen testing & simulated attacks
Jr. Penetration Tester path
TryHackMe · Jan 2023 · Learning path · web app & infrastructure security
Advent of Cyber 4
TryHackMe · Dec 2022 · 24-day security challenge event
// OFFENSIVE_TOOLKIT
- #NMAP
- #BURP
- #FFUF
- #DIRB
- #NIKTO
- #HYDRA
- #NETCAT
- #SUBLIST3R
- #OSINT
- #GOOGLE_DORKS
- #BASH
// RED_TEAM · NOTES
PUBLICWorking notebook
for attacks.
PAXHAX
Working notebook of penetration-testing exercises, tooling notes and responsible-disclosure write-ups.
- Lab write-ups: web, network, AD, binary
- Tooling snippets: Burp, nmap, ffuf, hashcat
- Responsible disclosure log
// AFTER_HOURS //
>> AFTER_HOURS · RELICS
/THE_LAB
Side projects, live GitHub activity and every earlier version of this site, still online.
MODE
SIDE · ONGOING
SCOPE
GITHUB · ARCHIVES
//SIDE_BUILDS · OFF_GRID_TOOLS
//RELICS · EARLIER_BUILDS · FROZEN_IN_TIME
TERMINAL · 2022
terminal.paullukic.com
The original terminal site that lived on paullukic.com.
VISIT
GUI · WIN98
terminal.paullukic.com/gui
Windows 98 desktop reimagining, part of the terminal site.
VISIT
V1 · REACT · 2022
react.paullukic.com
First React iteration, frozen in time.
VISIT
V2 · NETRUNNER
cyberpunk-v2.paullukic.com
Blackwall HUD prototype. Its shader lives on in /CLEARANCE.
VISIT
V3 · DOSSIER
cyberpunk.paullukic.com
The dossier this site grew out of, as it was in May 2026.
VISIT
>> DOSSIER_LOG · CHANGELOG
VERSION_HISTORY
- SELECTED_WORK: new plates for METASPRY, DBUDDY and LIFTORRA (building now)
- CAREER_LEDGER: WISEHOSTING contract added; Teodesk years merged into one entry
- New /CLEARANCE section on the Blackwall wall from cyberpunk v2
- THE_LAB: every earlier build is still online, from the 2022 terminal to v3
- Faster first load, readable without JavaScript, calmer on repeat visits
ONLINECORE 37.0°CSIGNAL 94%ICE PERM
00/08HERO
44.81N · 19.83E14:40:43