Warren
Client testimonial
Engineering services by Hamza Khan
Legal AI, cybersecurity, and product engineering.
I help legal-tech teams and legal organizations build AI systems, connect everyday workflows, assess application security, and build or improve software.
No legal advice. A person approves every consequential step.
Built with
OpenAIGPT models
AnthropicClaude models
GeminiGoogle AI models
Mistral AIOpen AI models
Perplexity AIAI search
LangChainAI agent workflows
LLamaPrivate AI models
PyTorchCustom AI models
TensorFlowMachine learning
Apache SparkLarge-scale data
PostgreSQLSecure databases
MySQLDatabases
MariaDBDatabases
SQLiteLightweight databases
MongoDBFlexible databases
CassandraHigh-volume data
RedisFast caching
PrismaSafe database access
SupabaseBackend & auth
FirebaseApp backend
AWSCloud hosting
Microsoft AzureCloud hosting
GCPGoogle Cloud
OCIOracle Cloud
VercelWebsite hosting
NetlifyWebsite hosting
CloudflareSpeed & protection
DigitalOceanCloud servers
RailwayApp hosting
HerokuApp hosting
DockerPortable apps
KubernetesScaling apps
TerraformInfrastructure as code
AnsibleServer automation
GitVersion history
GithubCode collaboration
GitHub ActionsAutomated releases
GitLab CI/CDAutomated releases
BitbucketCode collaboration
CircleCIAutomated testing
Travis CI/CDAutomated testing
JenkinsBuild automation
EthereumBlockchain
PolygonBlockchain
SolanaBlockchain
Binance SCBlockchain
Hyperledger FabricPrivate blockchain
AlchemyBlockchain access
MoralisBlockchain data
HardhatSmart contract builds
Truffle SuiteSmart contract builds
GanacheBlockchain testing
TenderlyContract monitoring
OpenZeppelinSecure contracts
MythxContract security scans
MetaMaskCrypto wallets
Trust WalletCrypto wallets
ReactInteractive screens
Next.jsFast websites
Vue.jsWeb interfaces
AngularLarge web apps
SvelteLight web apps
AstroContent websites
RemixWeb apps
NuxtJSFast websites
ReduxApp state
HTML5Web pages
CSS3Page styling
SassPage styling
Tailwind CSSClean, consistent design
BootstrapReady-made layouts
Material UIReady-made components
Ant DesignBusiness dashboards
Babylon Js3D in the browser
SanityContent your team edits
StrapiContent management
Node.jsServers & APIs
ExpressJSAPIs
NestJSStructured back ends
GraphQLFlexible APIs
tRPCType-safe APIs
FastAPIPython APIs
FlaskPython web apps
DjangoPython web apps
LaravelPHP web apps
Ruby on RailsWeb apps
ASP.NetMicrosoft web apps
Spring BootEnterprise back ends
PythonAI & automation
TypeScriptReliable app code
JavaScriptWeb code
JavaEnterprise systems
PHPWeb code
GoFast services
RustSafe, fast code
C++High-performance code
C#Microsoft apps
HaskellPrecise code- React NativeiPhone & Android apps
FlutteriPhone & Android apps
ExpoMobile app releases
SwiftiPhone apps
KotlinAndroid apps
AndroidAndroid apps
IonicHybrid mobile apps
Framework7Hybrid mobile apps
XamarinMicrosoft mobile apps
The tools behind the work, with what each one does in plain words.
One feature, end to end
intake-agent · change set
+ POST /intake
+ matter permissions
+ action audit log
Spec agreed
Acceptance criteria signed off
Build
API, data model and permissions
Checks
Tests pass before release
Release
Shipped with handover notes
- Built, complete
- Approved, complete
- Tested, complete
01 / Services
Start with the problem in front of you
Agentic AI, cybersecurity and product engineering, delivered end to end by one engineer.
Agentic AI
Build agentic AI workflows
AI agents that research, draft and act across your tools, with human approval before anything runs.
- Answers from approved sources
- Drafts, summaries and intake
- Agents connected to your tools
- Human approval before action
Cybersecurity
Cybersecurity and penetration testing
Authorized testing that finds weaknesses in your web, API and AI systems before clients rely on them.
- Web apps and APIs
- AI and LLM features
- Access, auth and data exposure
- Fix guidance and retesting
Engineering
Engineer and scale your product
Design, build and scale software, from new features to the platform your team already runs.
- New features, end to end
- APIs and data models
- Permissions and roles
- Reliability and fixes
02 / Proof
Teams that shipped with me
Clients in their own words, and the platforms we built together.
Client testimonials
Client videos do not yet have reviewed captions.
Projects
Healthcare / Full-stack engineering
MyCareGorithm — Healthcare Platform
Patient appointments, collaboration interfaces, educational materials and a print module for a healthcare platform.
View project: MyCareGorithm — Healthcare Platform
Earlier work / Full-stack platform
PromoTravel — Multilingual Travel Platform
A multilingual travel platform built with Next.js, React and Sanity, supporting dynamic travel content and booking experiences.
View project: PromoTravel — Multilingual Travel Platform
Earlier work / Legal website
Scott Baron & Associates — Law Firm Website
A Next.js and Node.js website for Scott Baron & Associates, with legal-service content, responsive navigation and content management.
View project: Scott Baron & Associates — Law Firm Website
03 / Day-to-day operations
An AI assistant that keeps cases moving
It answers clients, updates cases and routes everyday work through your approved tools, and hands anything important to the right person.
What it handles
- New inquiries
- Case status calls
- Calls, texts and email
- Missing records
- Court deadlines
- Hand-off to your team
Example · an existing client calls about their case
- Agent
01Client calls
“What’s happening with my case?”
- Agent
02Identify the matter
Caller verified and matched to their case
- Agent
03Check status with approved tools
Reads stage, next date and open requests
- Agent
04Answer and update
Shares permitted basics; records new details
- Person decides
05Escalate when needed
Connects the case attorney or case manager
- Audit trail
06Logged
Call summary and actions saved to the matter
Connect your own legal research tools, such as LexisNexis, Harvey or Legora. Your attorneys still give the advice.
04 / Built for sensitive work
Connected to your tools. Tested before launch.
Approved sources go in, reviewable work comes out, and each release is security-tested before your team relies on it.
Every workflow follows three rules
- Reads only the sources you approve
- A person approves every consequential step
- Every action is logged to the matter
Works with your tools
Built into the systems your firm already uses. What connects depends on access, APIs and agreed scope.
Outlook
Word
Teams
SharePoint
Also case management, phone and SMS, e-signature and court notices.
Tested before launch
Before launch I plant attacks, fix what they find and retest, mapped to the OWASP Top 10 lists.
- LLM features. Checks for hidden instructions, data leaks and invented information.
- Agents. Checks that agents stay within their approved tasks and permissions.
- APIs. Checks that connected systems protect each client and matter.
Audit-support engineering
I've helped client teams through ISO 27001, SOC 2 and HIPAA audits by building the access controls, audit logs, encryption and evidence their auditors examined.
Auditors issue the reports and certificates; I build what they examine.
No legal advice: your attorneys make every legal decision. I'm not your auditor and don't guarantee compliance. Product names and logos are trademarks of their owners. Shown to identify integrations; no endorsement implied.
05 / Who you work with
Work directly with the engineer who builds it
I connect legal operations and firm knowledge with AI workflows, application security and full-stack product engineering.
I can own a defined workstream or work alongside your existing team, from understanding the process through implementation, verification and handover.
6+ years
Engineering experience3+ years
In legal technologyEnd-to-end
Delivery ownership
How an engagement runs
- 01
Understand
Map the workflow, the system owner and what a useful outcome means.
- 02
Scope
Agree the work, access, deliverables and acceptance criteria.
- 03
Build or assess
Implement or test, keeping findings and decisions visible.
- 04
Verify and hand over
Review the delivered behavior, document limits and agree next steps.
06 / Next step
Tell me what you need to build, assess or fix
30-minute intro call · or email hkhantanoli@gmail.com(opens in new tab)
Questions
Who do you work with?
Law firms, legal-tech founders and in-house legal teams are my main focus. I also work with AI and B2B software teams whose applications handle sensitive information.
Do you give legal advice?
No. I build and test software. Your attorneys make every legal decision, and the workflows I build route legal questions to them.
Can you work with our existing case-management system?
Often the starting point is an existing system. I first assess its available APIs, access permissions, data quality and workflow constraints, then define what can be connected or extended.
Can we hire you just for security testing?
Yes. An assessment can stand on its own with documented findings and remediation guidance. Implementation and retesting can be scoped separately or included in an agreed engagement.
Is the first security review free?
Yes. A first review of one agreed workflow is free, sized to your application and the question. You receive a brief record of what was reviewed and suggested next steps. Larger or complex workflows are scoped as a paid assessment; smaller ones can start with a short trial. It is not a comprehensive penetration test, and active testing needs agreed authorization.
Can we start with one workflow?
Yes. Most firms start with one recurring task that has a clear owner and usable inputs. We agree the scope, review points and acceptance checks, then build.