Systems that hold.Security that lasts.
Backend, pentesting and AI orchestration from one person who builds systems from the wire up – and finds the holes before anyone else.
About me
I'm a backend developer, pentester and systems administrator who builds, scales and runs services that are used in production every day. My background is in IT support and customer service, and it shapes how I work: I build with the end user in mind and know what stable operations mean when something has to work around the clock.
Technically, the core is Node.js and TypeScript, PostgreSQL and Redis. I regularly integrate with third-party APIs – payment providers, accounting systems, email providers and AI services – and I'm comfortable running, securing and monitoring production environments.
I learned scaling in production. I ran one of Discord's largest bots for four years in collaboration with Discord's infrastructure team, built a Norid-accredited domain registrar with its own EPP stack and Redis queues from scratch, and have launched more than ten products of my own – some sold, some discontinued, all with real users. In the last year alone I'm behind more than 3,700 commits in the FENO repositories. That teaches you quickly what fails first when traffic arrives: missing queues, weak caching, databases without indexes and anything that isn't monitored.
Security went from interest to trade. Over a period of free pentests I found real vulnerabilities at real companies – from an anonymous WordPress request to admin, via misconfigured Firebase and Supabase, to arbitrary file writes in Avada – and documented them on the blog. Since August 2026 I deliver pentesting, domain security checks and Microsoft 365/Azure access reviews as a paid service through Glippen. Having built and run systems myself means I know where the shortcuts get taken.
What I actually offer is the ability to learn quickly and figure things out. I didn't know the EPP protocol until I had to speak raw TCP with Norid. When FENO needed integrations for certbot, Caddy, lego and acme.sh, they were built in Go, Python and shell and sent upstream. When customers needed automatic TLS, DNS with RFC 2136 and TSIG went in. The pattern is the same every time: if I don't know it, I'll find it out.
In recent years I've changed how I develop. I write very little code myself. AI agents write it – often 10–15 in parallel, reviewing each other's pull requests – while I own the architecture, the scope, the security requirements and the final judgement. It costs around USD 2,200 a month in tools and tokens, and gives me a throughput I would otherwise need a team for.
I also have broad experience with Microsoft Azure, Microsoft 365 and PowerShell automation. I'm certified in Azure Fundamentals and Microsoft 365 Fundamentals, hold a Norwegian trade certificate in IT services, and have further education in cloud administration.
Outside work I follow the Norwegian domain market closely and own around 100 .no domains at any given time. It started as a hobby and became a natural extension of my interest in the web – and of the work on FENO.
What I enjoy most is the intersection of code, operations, security and customer experience. Just as important as the technology are the people around it: good collaboration, clear communication and a straightforward tone day to day.
Work
- Glippen
Pentesting · Security · Microsoft 365 · AI agents · Started Aug 2026
We find the gap. Before it becomes a problem. My own security company, and where pentesting moved after the free period on erik.no. Fixed, published prices for domain security checks, web app and API pentests, and Microsoft 365/Azure access reviews. No mandatory meetings, everything in writing with same-day replies, and a retest within 30 days is included. I run every test myself, with home-built AI agents handling the repetitive parts. Started August 2026.
- Regnskap MCP
MCP · AI · Fiken · OAuth2 · SaaS · Discontinued
A cloud MCP server that let Claude, Cursor and other AI assistants do the bookkeeping in Fiken – with approval of every action, full traceability and undo. Discontinued once the accounting providers started shipping their own MCP servers.
- ModelSaid
AI · AEO/GEO · Monitoring · SaaS · Discontinued
AI visibility (AEO/GEO) for businesses: monitored what ChatGPT, Claude, Gemini and Perplexity said about your business, and alerted you when the answer changed. Now discontinued.
- Brainrot Tycoon Clicker
React Native · Expo · Mobile Game · Idle/Clicker
My first mobile app: a clicker/idle game built around internet memes. More than 25 characters, a prestige system, daily login rewards and passive offline earnings. Free-to-play with no pay-to-win. I own and develop the whole product myself, from game mechanics to distribution.
- Kroni.no
React Native · Expo · iOS · Android · i18n · Scandinavian launch
A family app for allowance and chores – no real money involved. Parents create tasks with a virtual value, kids complete them and save up toward rewards (screen time, movie night). GDPR-friendly with no tracking. Freemium with in-app purchases for extended use. An educational tool for teaching kids (ages 6-14) financial responsibility. Launching in Norway, Sweden and Denmark – translated into Norwegian, Swedish, Danish and English. We own kroni.no, kroni.se and kroni.dk.
- Altaret.no
Next.js · SaaS · AI · Subdomains · Wedding
A free wedding website builder for Norwegian couples. Create a personal wedding site on your own subdomain (yourname.altaret.no), manage RSVPs and the guest list in real time, a gift registry with collision protection, budget and checklists, AI-assisted seating charts and a moderated guest photo gallery. Sign up in under two minutes, no card details required.
- FENO Domener
EPP · TCP/TLS · Node.js · Redis · OpenAPI · MCP · RFC 2136 · Norid-accredited
A Norid-accredited domain registrar – quality over quantity. The entire EPP connection to Norid is built from scratch: raw TLS over TCP, RFC 5734 framing, a session pool with keepalive tuned to Norid's 120-second idle cut and Norid's own rate limits, all in a dedicated EPP process behind Node cluster. Around it: a public /v1 API with OpenAPI 3.1 and scoped keys, a reseller API with signed webhooks, an MCP server with 14 tools and server-enforced spend caps, automatic TLS via acme-dns and RFC 2136 with hand-rolled TSIG, dyndns2, DNSSEC, a domain marketplace, a drop-catching engine, Vipps, Stripe, Fiken and EHF. 1,959 commits in 18 months and 112 test files – one person behind the whole backend.
- FENO API & open source
Go · Python · OpenAPI · ACME · Open source
The developer platform around FENO, open on GitHub. OpenAPI 3.1 spec and documentation for api.feno.no, plus ready-made integrations: a libdns provider in Go, a Caddy DNS module, a certbot plugin in Python and an acme.sh plugin in shell. Sent upstream to certbot (merged), acme.sh, lego and ddns-updater. The point: automatic TLS for .no domains with the tools people already run – without installing anything from FENO.
- Open source-bidrag
Orca · scrcpy · ReDoS · ConPTY · Open source
I contribute to open source when I need something in the tool myself. Orca – the ADE I run my AI agents in – had an iOS emulator but no Android, and I needed Android for Kroni. So I added Android emulation via scrcpy with full iOS parity. When ngrok output froze my terminals, I traced it to a ReDoS in the link detection and fixed it. Plus Ctrl+Arrow for PSReadLine on Windows ConPTY. All three merged. Same pattern as the FENO integrations for certbot, lego and acme.sh: if it's missing, I build it and send it upstream.
- Jobbspor.no
Next.js · AI · SaaS · Sold
A tool for job seekers: full overview of applications, AI analysis of your CV against job listings, and interview practice with tailored questions. Imports listings from Finn.no, Arbeidsplassen and Jobbnorge with one click. Since sold on.
- Prakto.no
Next.js · SaaS · Clerk · Tailwind CSS
A website builder for small businesses, medical clinics and tradespeople who just want a professional website without learning to code. Pick modules, add content, done. Domain, hosting and Norwegian support included from 350 NOK/month.
- 123Deksel.no
Next.js · E-commerce · AI-assisted frontend · Discontinued
An online store where customers design their own phone case and have it delivered quickly. Built in Next.js with AI-assisted frontend development. Now discontinued.
- MineKvitteringer.no
Fastify · PostgreSQL · Redis · Document AI · Vipps/Stripe · FENO AS
Receipt management for individuals and families, a FENO AS product. Under the hood: Fastify in cluster mode, PostgreSQL with 141 migrations, a Redis queue that rebuilds itself from Postgres after a crash, Google Document AI and Gemini for receipt extraction, automatic import from Gmail, Outlook and IMAP, Vipps and Stripe side by side, daily reconciliation against Fiken, family groups and a PWA with share target. Over 1,000 backend commits, nearly all mine.
- FinnKvittering.no
Next.js · Client-side PDF · AI-assisted · Discontinued
Paste a FINN listing and get a PDF receipt. Started as an experiment and became a finished product in under an hour. Everything ran in the browser; no data was sent to a server. Now discontinued.
- Tullefonen.no
AI Voice Agents · Telephony integration · Conversational AI · Discontinued
AI voice agents in practice: call and talk to different AI characters. An experimental platform for real-time voice AI and telephony integration, discontinued because of high voice-agent costs.
- Discord Bot - Reaction Roles
JavaScript · Discord API · Node.js · Virtualization
One of Discord's largest bots, developed through Droplet Development in close collaboration with Discord's infrastructure team. Operated for four years before being sold on.
Have a project that needs backend, security or cloud work? Get in touch
Experience
AUG 2025–PRESENT
Owner
ENY Invest AS
Investment company. Previously ran 123 Deksel (a fully automated mobile phone case vending machine) – now discontinued.
Investment · Operations
JUN 2025–PRESENT
IT Consultant
Flexit ASBuilding internal applications with PowerShell and Azure Functions. Involved in migrating the Microsoft Warehouse App. Ensuring 24/7 uptime for warehouse and production systems. Working with CE and FO in Microsoft Dynamics 365. Responsible for internal support, vulnerability management and patching.
PowerShell · Azure Functions · D365 · Microsoft 365 Defender · Networking
NOV 2024–PRESENT
Owner & Backend Developer
FENO ASBuilding and running FENO (feno.no) – a Norid registrar with its own EPP stack, public API, MCP server and automatic TLS via ACME/RFC 2136 – plus minekvitteringer.no and prakto.no. Backend alone, frontend together with one colleague. Over 3,700 commits in the last year.
Node.js · Fastify · PostgreSQL · Redis · EPP · OpenAPI · MCP
SEP 2023–PRESENT
Owner
Nilsen KonsultBuying, selling and managing domains. Building websites and APIs. Backend development in Node.js/TypeScript. Since August 2026: pentesting, domain security checks and Microsoft 365/Azure access reviews as a paid service via Glippen.
Node.js · TypeScript · API · Domain Management · Pentesting
JUL 2023–JUN 2025
Consultant
Ikomm ASHandled customer inquiries via phone, email and chat using Pureservice. Worked with user administration via eAdm and Active Directory. Worked with Citrix and Azure Virtual Desktop. Served as SPOC for IT-related questions. Consistently scored high in customer satisfaction surveys.
Azure AD · Citrix · AVD · Pureservice · eAdm · Print
JUL 2022–JUN 2023
ICT Consultant
Experis NorgeService/support for clients. SPOC for schools in the Oslo school system. Responsible for apprentice training and onboarding new hires. Administrator in Pureservice. ICT lead at Marienlyst school with around 1,270 users.
Windows · Mac OS · Pureservice · AV Equipment · SLA
AUG 2020–JUL 2022
ICT Apprentice
Experis Norge1st and 2nd line support. Troubleshooting Windows, Mac OS and Microsoft Office. Configuring printers. Repairing computer equipment. Testing new applications from CGI.
Windows · Mac OS · Office · Printers · Support
MAR 2019–FEB 2023
Owner & Backend Developer
Droplet Development
Running and maintaining one of Discord's largest bots in close collaboration with Discord's infrastructure team. Setting up virtual servers on Windows Server. Coding in JavaScript.
JavaScript · Discord API · Windows Server · Virtualization
NOV 2021–JUN 2022
Contract Work – Sony
Santa Monica StudioContract work coding a Discord bot. Trained staff on how to use the bot. Weekly status meetings. All communication and meetings in English.
Discord Bot · JavaScript · English
APR 2019–FEB 2021
Support & Warehouse Associate
POWER Norge ASReceiving and logging service cases. Setting up devices to customer needs. Selling services and products. Troubleshooting products.
Customer Service · Troubleshooting · Sales · Warehouse
Contact
Need help with backend, Microsoft 365/Azure or security? Send a message and I'll reply within 1–2 business days.