---
title: "Phát Lâm | Full Stack Developer & Security Specialist"
url: https://phatdev.net/en
lang: en
updated: 2026-10-21
alternate:
  vi: https://phatdev.net/vi
markdown: https://phatdev.net/en.md
---

# Phát Lâm

> Full Stack Developer & Security Specialist. Building fast, secure web products and using AI where it actually helps. No fluff, no hype.

## About

I am a full stack developer and web security specialist with 14+ years of shipping real products, fixing real bugs at 3 AM included.

Stack I reach for: Node.js, Next.js, PHP, Python, MySQL, Redis, Docker. On the security side I focus on web hardening, OWASP audits and responsible pentesting.

Lately I build agentic AI tooling: data prep, small model fine-tuning, and production pipelines for clients. My philosophy is simple. Ship early, log everything, skip the over-engineering.

- Location: Vietnam
- Years of experience: 14
- Status: Freelancer, available for custom projects. Working hours 12:00-02:00 (Vietnam time), every day.
- Currently building: Agentic AI tooling · secure web platforms
- Focus: Agentic AI + Web Security
- Website: https://phatdev.net

## Numbers

- Years of experience: 14+
- Projects shipped: 60+
- Happy clients: 120+

## Skills and expertise

- **Frontend**: HTML5, CSS3 / Tailwind, JavaScript, TypeScript, React, Next.js (Tân Doanh · PC Builder)
- **Backend**: Node.js, PHP, Python, MySQL / MariaDB, Redis, REST API (SL Migrations · PC Builder)
- **AI / ML**: Agentic workflows, LangChain, Fine-tuning, Prompt engineering, Claude API (Media Studio)
- **Security**: Full-stack security, Web hardening, OWASP audit, Penetration testing, AES (SL Migrations · Tân Doanh)
- **Media**: Photoshop, Premiere Pro, CapCut, Figma, FFmpeg (Media Studio)
- **SEO**: On-page SEO, Technical SEO, Schema, Core Web Vitals (Tân Doanh · PC Builder)

## Featured projects

- [PixGamma](https://phatdev.net/en/projects/pixgamma.md): macOS app for AI image upscaling and restoration that runs entirely on the Apple Silicon GPU: product shots, portraits, old family photos, wildlife, landscapes, illustration and screenshots. Text stays correct, Vietnamese included, with diffusion-based Recover and a CLI and local API for developers.
- [CreditMate](https://phatdev.net/en/projects/creditmate.md): iPhone and iPad app for credit cards, loans and pay-later wallets, built for card holders in Vietnam: shared limits counted once, due reminders, on-device import of PDF statements, SMS and screenshots, offer-aware card advice and an AI assistant that only drafts. No account, no server.
- [MoneyFlow](https://phatdev.net/en/projects/moneyflow.md): iPhone and iPad app for Vietnamese household finances: one shared ledger for the family, quick entry with categories picked from the note, rolling budgets, bills and recurring transactions, savings and a live 99.9 gold price, debts and loans, and cost splitting with the minimum transfers. Synced through a server the household runs itself.

[All projects](https://phatdev.net/en/projects.md)

## Latest posts

- [Making Your Website Readable for AI in 2026: What Is an Official Standard and What Is Only a Proposal](https://phatdev.net/en/blog/website-ready-for-ai-agents.md): An AI answers wrongly about your shop because it cannot read the policy page. A walk through robots.txt, structured data, llms.txt, Markdown pages, MCP Server Cards, AI Catalog and WebMCP, saying which are standards and which are proposals, with phatdev.net as the example.
- [What Is a Passkey? Passwordless Sign-In Explained, and Whether Your Website Should Add It](https://phatdev.net/en/blog/passkeys-explained.md): A strong password is useless when you type it into a fake page. Passkeys block exactly that. How they work in plain words, how to turn them on for Google and Apple, what happens if you lose your phone, and when a site owner should add them.
- [What Is MCP? How AI Connects to Your Tools and Data, and the Risks to Know](https://phatdev.net/en/blog/mcp-explained.md): An AI can write a great email but cannot see your calendar. MCP is the shared socket that connects AI to tools and data. Plain examples, permission and prompt injection risks, the 2026 state of the spec, and a working example.

[All posts](https://phatdev.net/en/blog.md)

## Contact

- Email: [info@phatdev.net](mailto:info@phatdev.net)
- Phone: [+84.379.678910](tel:+84379678910)
- Telegram: [@PhatLam1801](https://t.me/PhatLam1801)
- Zalo: [0379 678 910](https://zalo.me/0379678910)
- GitHub: [PhatLam1108](https://github.com/PhatLam1108)
- LinkedIn: [Hữu Phát Lâm](https://www.linkedin.com/in/h%E1%BB%AFu-ph%C3%A1t-l%C3%A2m-2896b1282/)
- Facebook: [stevenlam1801](https://www.facebook.com/stevenlam1801/)