Önder Denetim SMMM
Corporate site plus a security-focused custom backend for an independent audit/accounting firm.
View Live Site
Role
Full frontend + backend, with a focus on hardened API design and testing (Jest/Supertest). I also manage the domain (onderdenetim.net), SSL, and Vercel deployment.
About the Project
Built both the corporate site and the custom Express.js backend API for Önder Denetim. The backend includes Helmet, CSRF protection, rate limiting, Zod schema validation, JWT-based authentication, and Firebase Admin integration. It also includes an admin panel for blog posts, regulation updates, and contact requests, backed by an SMTP-based email notification system — it handles real production traffic.
Stack
The same API serves both a public contact form and an authenticated admin panel. I protected the anonymous endpoints with rate limiting against abuse, secured the cookie-based admin sessions with CSRF tokens, and centralized validation in a single Zod schema layer instead of ad-hoc checks scattered per route.