Skip to content
A live portfolio. Every project on this page is running now, and every figure is measured by the site itself. Wednesday 30 September 2026 · Nairobi
The LighthouseThe engineering portfolio of Martin Omwenga
Projects

4 projects, 3 running live right now

Each has a full write-up: the problem, the design decisions and how it is tested. Launch a demo to try it, or read the story first.

Live demos

3

Projects

4

● Live · 100% uptime
Redacted · Security · Live demo

Exposed: inside the intelligence agency's briefing room, where secrets black out mid-sentence

In plain terms. Like a shared Google Doc where some words are classified. People without clearance see black bars, and a manager can take away someone's access while they're typing.

Under the hood. NestJS and Yjs over PostgreSQL row-level security. Hidden text never leaves the server, and open connections are re-authorized before a permission change commits. 600+ tests.

Tests600+
Mutation score100% (policy)
StackNestJS · Yjs · PostgreSQL
Read the story →
● Live · 100% uptime
GhostChat · Cryptography · Live demo

Leak-proof: the messaging app built on the assumption that its own server is already compromised

In plain terms. Private messaging where even whoever runs the server can't read your messages or quietly change them.

Under the hood. Encryption in the browser with libsodium, signed hash-chained history, and a key transparency log with Merkle proofs.

Cryptolibsodium only
IntegrityMerkle proofs
StackReact · Express · MongoDB
Read the story →
● Live · 100% uptime
Lighthouse · Infrastructure · The system behind this page

The website that monitors itself, logs its own failures and publishes the evidence

In plain terms. A system that keeps watch over every project, notices when one goes down, records an incident and publishes what happened. It also checks a demo is up before opening it for you.

Under the hood. Go and PostgreSQL with row-level security, SSRF-safe probes, incidents opened by a state machine, property tests and fuzzing. Runs free on Cloud Run behind a Cloudflare edge, deployed without stored credentials.

Checksevery 15 min
LanguageGo
Testsrace, fuzz, property
Read the story →
Runs on your own devices, so there's no hosted demo.
PairBridge · Systems · Runs on your devices

Off the grid: how a laptop and a tablet share files without ever touching the cloud

In plain terms. A Linux PC shows up in every Android file picker, like Google Drive, but the files never leave your own network.

Under the hood. A FastAPI server on the PC and a native Android DocumentsProvider, built around one rule: the tablet only opens outbound connections.

PCPython · FastAPI
TabletKotlin · Android
Cloudnone
Read the story →