Main projects

VibeResume

• Tagline: User uploads a resume, and then they get a beautiful personal portfolio site, hosted online and instantly shareable within minutes with AI-powered design.
• ICP: Nontechnical job seekers who want a personal portfolio page they can show off to employers, styled nicely without paying $200 a year for hosting.
• features
  • free user: As a free user, you can upload your resume and create a beautiful personal portfolio site using our free AI model, hosted on VibeResume. You'll also get limited AI credits to make customized suggestions and edits. Plus, you own the code and can download it to use elsewhere.
  • paid user: As a paid user, you have premium access to the best models and you can even have additional features such as analytics, manual editing with Wix style editing, and unlimited edit with AI suggestions.
• Monetization strategy: A standard subscription strategy allows access to premium models for users who want to try out a lot of things, but the main selling point of this is a one-time fee where users can pay something like $1 or $2 and have usage credits with AI to improve their site as best as possible. Once they're happy with it, they don't have to do anything anymore, just a one-time fee and they have their site forever.
  • paid feature (premium AI models): Users can use models like GPT-5 or Claude for impeccable design and better editing
  • paid feature (analytics and custom domain): Users can add a custom domain, remove watermark, and have analytics
  • paid feature (site optimization): Users can pay to have optimal SEO and AEO and to have their page cached in redis for static page speed optimization
  • paid feature (templates): professional design templates from Stitch and Mobbin to have profession portfolio looking sites instead of AI-ish UI.

vibe-resume — AI resume → portfolio

future feature checklist

• [ ] Milestone 1 (polish product)
  • [ ] Analytics
  • [ ] custom domains
  • [ ] Beautiful, professional templates
  • [ ] redis caching optimization (to make paid users’ sites faster)
  • [ ] AEO + SEO optimization
• [ ] Milestone 2 (compete with the big players)
  • [ ] Agentic AI for building websites (basically reinventing Lovable or vibe coding agents, but for building completely static websites)
  • [ ] Allow users to edit their websites with drag and drop blocks, Wix style

KeyStash Manager

• Tagline: Excalidraw, but for managing secrets. This completely end-to-end encrypted, local-first way of managing your API keys across different environments, profiles, and folders makes it easy to organize your secrets and always access them. Never store your API keys in apple notes or paste them in the Slack chat ever again. This is the easy way to manage environment keys across your team without worrying about security vulnerabilities.
• monetization: "Our monetization approach is based on securely sharing ENV files. In the free plan, you share the auth token directly. In the paid plan, we take on the security risk by storing the encrypted file on our server and sending it to specified email addresses. You can designate who receives the auth token to decrypt the file, and we handle the rest, storing the file in a secure S3 bucket. This way, we ensure end-to-end encryption and security, making it a more convenient and secure option for users."
• what pain points this solves:
  • security (7/10): As opposed to our competitors, this is equally secure but for different reasons - we use client-side E2E encryption so the server has no knowledge of the encryption and thus not susceptible to man-in-the-middle attacks
    • caveat: Even though the auth token is one-time use or has time-based ephemerality, if the auth token and file both get in the hands of someone malicious, they now have full access to your secrets. This can’t happen without an attacker having unfettered, complete control over your computer, however, and atp you’re already screwed.
  • convenience (8/10): This is the most convenient solution for a nontechnical founder or a solo founder or small startup. Instead of startup founders sending .env files one at a time or new env keys that get rotated on email or slack, you can send one encrypted JSON file with an ephemeral authtoken so that receivers can immediately see all shared secrets without manual copy and pasting into .env files.
    • caveat: other solutions like Doppler are more convenient when it comes to sharing, because you never have to send an auth token or file to others, but the paid version of KeyStash will allow emailing people the auth token and file directly. Where Doppler wins in the convenience of sharing, it fails in the technical overhead of CLIs, etc., which scares away nontechnical founders.
  • UX: (10/10): The main selling point of this app is its similarity to excalidraw - dummy easy to use and intuitive. other competitiors like Doppler or Infiscal take too much setup and require inconvenient tools like CLIs and 2FA for securely sharing secrets, since they store secrets in the cloud.
  • cost (10/10): The majority of use cases are free. You can store as many keys as you want, there’s no limit. They’re encrypted at rest via IndexedDB. Every other competitor requires you to pay hefty money at a certain point.
• features
  • open source: You can run it locally via a dockerized express app so that data syncs across browsers and is stored in the docker volume instead.
  • organization features: You can organize ENV keys across profiles and folders, with multiple environments like staging, dev, or prod for each key. This flexibility lets you customize your key management for each app. For example, you can create a profile for your startup and another for your job with sub-folders for specific API keys, like Google or AI keys. Plus, with drag-and-drop functionality, you can easily reorganize secrets across profiles and folders, making it intuitive and easy to manage.
  • security and sharing features: "Our free version generates an auth token on the client side, which you can share with others. This token allows them to decrypt the files you send, such as .env files or profiles and folders, securely. As long as the token and file remain private, your API keys will be safe."
• ICP: startups and both technical and nontechnical solo founders alike wanting a safe, convenient way to manage their API keys without dealing with stuff like CLIs or RBAC or audit trails, because you need that stuff if you’re cloud based API key storage, but this is completely local.
  • specific example: My nontechnical dad used store his API keys for OpenAI and Claude in apple notes and had a hard time managing them, knowing which ones had spending caps, which ones were revoked, etc. But when he He started using my app. He was able to manage all of his API keys in a safe, local-first, convenient way that allowed him to organize them so he could always find and search for them without any cognitive load.

Key stash manager

KeyStash Manager