Full-Stack Web DevelopmentApplication Security & Audit
TribuneJustice
Legaltech platform: lawyer-client matching, escrow payments, and AI automation.
My role
Tech Lead & Project Manager
Period
November 2025 — ongoing
LaravelAngularNext.jsRedisDockerLaravel ReverbTypesense
TribuneJustice is a legaltech platform enabling clients to find and engage certified lawyers. I took full technical ownership: architecture design, implementation of critical workflows (escrow payments, case state machines, faceted search), and a security audit of 41 vulnerabilities found in production.
Challenges
- 01Guaranteeing financial transaction integrity (escrow) between clients and lawyers in a multi-currency environment
- 02Refactoring a 594-line monolithic Angular component into specialized services without disrupting production
- 03Implementing granular RBAC covering 6 distinct roles with cross-resource permissions
Solutions
- Laravel state machine with validated transitions and pessimistic locking (lockForUpdate) to prevent race conditions
- Angular split into 4 specialized services with strict TypeScript dependency injection
- 41 vulnerabilities patched (SSRF, CSRF, TTL-less sessions, missing HTTP headers) — full OWASP Top 10 audit
- Typesense integration for faceted lawyer search with filters by specialty, location, and availability
Results
- Platform in production with 0 security incidents since deployment
- Lawyer search time reduced by 73% thanks to Typesense
- Decoupled architecture allowing 3 new modules to be added without regression
A similar project?
Let's talk about your need. I'll get back within 24h with a concrete analysis.