I'm Oussama Rahmouni, a senior crawling and anti-bot engineer.

RahmouniDev is my studio, registered in the US as RahmouniDev LLC. It runs as a factory: every product is designed to own its own complexity and operate without babysitting. APEX crawls without manual intervention. Al Bayrouni publishes on its own pipeline. The output changes; the operating standard doesn't.

For clients, the factory builds custom extraction for targets engineered to refuse it: sites behind enterprise WAFs, mobile apps with undocumented APIs, pipelines that have to stay up rather than work once. If a normal team can't get the data, that's the work I take.

Working on something that needs this kind of engineering? Let's talk.Direct engineering with the person who builds it. No middlemen, no handoffs.

Technical_Specialization

Engineering Depth.

Backend_Platform

  • Node.js & TypeScript
  • NestJS & Event-Driven Architecture
  • WebSockets & Real-Time APIs
  • REST, GraphQL & Custom Protocols
  • PostgreSQL, Redis & MongoDB

Data_Intelligence

  • Large-Scale Web Extraction
  • TLS Fingerprint Shaping: JA3/JA4, uTLS, curl-impersonate
  • Behavioral Anti-Detection Engines
  • CAPTCHA Solving & Token Banking
  • Multi-Market Data Pipelines
  • Mobile API Reverse Engineering

Cloud_&_Infrastructure

  • AWS
  • Docker & Containerized Services
  • Git, GitHub & GitLab CI/CD
  • Linux Server Administration
  • Nginx & Process Management

Security_&_Systems

  • Proxy Networks & Rotation Systems
  • Protocol Engineering (MTProto, WA)
  • Frida & Dynamic App Instrumentation
  • WAF Bypass & TLS Probing

Engineering_Philosophy

How I Build.

Systems should own their own complexity

Real expertise is knowing which layer a problem belongs to: network, protocol, application, or data

Anti-patterns in the wild are a roadmap. Once you can break a system, you understand how to build its replacement

Technical_Projects

Building Systems.

APEX: Crawl Infrastructure Platform

Crawl platform built on anti-detection primitives, TLS fingerprint shaping, identity & session trust, a browser-solver token bank, and a self-managed residential proxy mesh. Its live vertical is food-delivery intelligence: a reverse-engineered mobile API tracking thousands of venues daily. New verticals are configuration, not new engineering.

Node.jsTypeScriptPostgreSQLProxy RotationTLS Fingerprinting

The Public Toolbox

Six tools from the APEX component layer: whichwaf (anti-bot detection), ja3lab (TLS fingerprints), impersonate (browser-perfect HTTP), tokenbank (challenge solver bank), app2api (mobile API extraction), driftwatch (defense-change monitoring). Open source on GitHub.

TypeScriptNode.jsPythonSQLiteGitHub Actions

Al Bayrouni: Technical Content Platform

Long-form technical writing from first-hand implementation. Crawl architecture, anti-detection systems, security engineering. The technical record of work in progress.

Next.jsNestJSPostgreSQLStripeDocker

Consulting: Crawl & Data Infrastructure

Selective client engagements: anti-bot architecture, data pipeline design, Node.js/TypeScript systems.

Node.jsTypeScriptPostgreSQLAWSNestJS