Software · AI · Cybersecurity
Hi, I'm Fran.
I build applications, train AI automations and test the security of what I and others put online, always with authorization and a technical report at the end.
What I do
Services
Web Development
Modern, fast and responsive websites and apps, built from scratch or evolving what you already have.
Pentest & Offensive Security
Authorized penetration tests on applications, networks and infrastructure, with a report and remediation plan.
How a pentest with me works →Security Audit
Code, configuration and attack-surface review to reduce risk before it turns into an incident.
Automation & Bots
Custom integrations and automations, from backend to Discord/Telegram, always focused on results.
[ Security lab ]
Test it now, for free.
The scanner is open to everyone. The other tools are for Codraise members.
Is your website secure?
Paste the address and get an instant security grade: what is right, what is missing and how to fix it.
or try
🔒 Passive test: I only make a regular visit to the home page, like a browser, and read the headers. No attacks, no port scans. Only the domain and grade are kept for 30 days to validate the badge; nothing else.
Is this link safe?
Paste a link (especially shortened ones like bit.ly) and I show where it REALLY goes — without you clicking — and flag scam signals.
or try
🔒 I follow the link for you, sandboxed, and do NOT download its content. This is a signal analysis, not a guarantee — when in doubt, don’t click. Tested links are not stored.
Universal decoder
Paste a JWT token, Base64 text, an encoded URL or a hash — I recognize and decode it instantly, all in your browser.
🔒 Everything runs in your browser: nothing is sent. Decoding ≠ decrypting — Base64 and JWT are not secret, just a way to pack data. The JWT signature is NOT verified here.
Members-only tool
Sign in with Discord (Codraise members only). Secure login: the site never sees your password.
Sign in with DiscordHas your password leaked?
Find out if a password shows up in known breaches: over 900 million exposed passwords.
🔒 Your password never leaves your browser. It computes the SHA-1 hash and only the first 5 characters of that hash are queried (k-anonymity, the same technique Chrome and 1Password use). Nothing is stored.
Members-only tool
Sign in with Discord (Codraise members only). Secure login: the site never sees your password.
Sign in with DiscordIs it a scam?
Paste a suspicious link or an email header. I point out the phishing signs and explain each one.
🔒 Analysis runs 100% in your browser: the link or email is not sent anywhere. I never open the link.
Members-only tool
Sign in with Discord (Codraise members only). Secure login: the site never sees your password.
Sign in with DiscordCan someone spoof email with your domain?
Email records X-ray: SPF, DMARC, DKIM, MX, MTA-STS and TLS-RPT — with fixes.
🔒 Only public DNS is queried. I never connect to your server and don’t store the domain.
Members-only tool
Sign in with Discord (Codraise members only). Secure login: the site never sees your password.
Sign in with DiscordStrong password generator
Random password or an easy-to-remember passphrase, made with your browser’s cryptographic randomness.
🔒 Generated right here in your browser (crypto.getRandomValues). Nothing is sent or stored.
Members-only tool
Sign in with Discord (Codraise members only). Secure login: the site never sees your password.
Sign in with DiscordThreats blocked, live
What francodes.dev’s firewall blocked in the last 24 hours. Real Cloudflare data, no one’s IP.
Who I am
About
I'm a programmer and software developer, currently doing a postgraduate degree in cybersecurity, with hands-on experience building systems. My work has two sides that complete each other: building applications that actually work in production, and testing their security with the mindset of someone who also knows how to attack.
That has already become Python and Node.js code running 24/7, AI bots talking to many people at the same time, automations monitoring systems in real time and penetration tests on real applications, always authorized and with a technical report at the end. I keep studying and improving, because security and AI move fast.
100+
Codraise members
—
Online now
3
AI personalities running
∞
Always learning
Languages
Scripting & automation
AI & integrations
Security
Web & infrastructure
In practice
Projects
Vérité: fraud verification
Vérité: checks links, messages and stores before you fall for a scam.
- 5 checking tools in one place
- Receipts are read on your own device (privacy-first)
- Free plan + paid plans from R$19.90/month
AirSong
Play music in the air with your hands: the camera reads your fingers and each raised finger becomes a note.
- Ten fingers, ten notes, two octaves
- Runs in the browser: the camera never leaves your device
- No sign-up, no login
AirDraw
Draw in the air: touch your index fingertip to your thumb and paint with the camera, your finger or the mouse.
- 48 colors plus rainbow mode
- Touch on mobile, mouse and shortcuts on desktop
- The camera never leaves your device
AI bots for communities
Three Discord bots with their own personalities running 24/7 at Codraise: chat, moderation, music, events and gamification.
- Robin, Atlas and Grokinho talk to each other
- 100% local AI (Llama via Ollama): no conversation leaves the server
- XP, leagues, seasons and automated events
ARQUIVO ZERO
An investigation game that runs inside Discord as an Activity: cases to crack with clues, documents and deduction.
- Discord Activity + Cloudflare Workers
- Multiple playable cases
- VIP members only
OSINT tooling
Investigation scripts that collect public information to support security analysis and identity verification.
- Public sources only
- Ethical, authorized use
Web monitoring & automation
Selenium automations that monitor platforms in real time and fire alerts, continuously and resiliently.
- Webhook alerts
- Watchdog restarts anything that falls
And more projects, always in progress.
Community
Join Codraise
The Discord community I build: AI bots, gamification, challenges and real people talking about programming and security (mostly in Portuguese).
Join the serverAlready a member? Sign in to unlock the Lab tools:
What guides me
Mission, Vision & Values
Mission
Understand what you need before writing the first line of code. Behind every project there is a person with a real problem.
Vision
Always evolving, improving and getting closer to the ideal with every new project.
Values
If something won't work, I say so. Security exists to protect people, not just systems.
Schedule
Availability
I take on a few projects at a time to deliver with quality. Click an open day to book a 30-minute call.
Let's talk
Contact
Tell me what you need. I'll reply by email as soon as possible.