NSNishan Singh
Available for work Surrey, British Columbia, Canada

I build &I secure.

I'm Nishan Singh. Through Hack & Hustle Studio I design, build, and secure websites & mobile apps for local businesses — and I'm training as a cybersecurity professional through real labs and reports.

See my workFree security checkResume
Next.js✦React Native✦TypeScript✦Supabase✦Stripe✦Kali Linux✦Nmap✦Nessus✦Metasploit✦Burp Suite✦Wireshark✦OSINT✦
01 — the studio
Hack & Hustle Studio logo

Hack & Hustle Studio

Build it. Ship it. Secure it.

A one-person studio in Surrey, BC building websites, mobile apps, and the security that keeps them standing.

Hack & Hustle is how I work with businesses. You deal directly with the person writing the code — no account managers, no agency markup, no handoffs. I design it, build it, launch it, and stay on afterwards.

Get a free quote@hacknhustlestudio
$ cd ~/websites

Websites & web apps

Fast, mobile-friendly sites that show up on Google and turn visitors into customers — plus the moving parts behind them: online ordering, booking, and payments.

  • Next.js business websites
  • Online ordering & booking
  • Stripe payments
  • Local SEO built in
See web services
$ cd ~/apps

Mobile apps

Cross-platform iOS and Android apps built from one codebase — and shipped to the stores, not left in a demo folder. My own app is live on the App Store.

  • React Native / Expo
  • iOS & Android from one build
  • Supabase backends
  • App Store submission
See app services
$ cd ~/secure

Security & hardening

Most small business sites fail the basics — no HTTPS enforcement, missing headers, cookies exposed, no email spoofing protection. I find those, explain them in plain English, and fix them.

  • Free security health check
  • HTTPS & TLS hardening
  • Security headers & cookies
  • SPF / DMARC anti-spoofing
Run a free check

How it works

  1. 01

    Quick chat

    You tell me what your business needs. Free, no pressure.

  2. 02

    Clear quote

    I send a simple plan and a fair, fixed price before any work starts.

  3. 03

    I build it

    You see progress along the way and give feedback.

  4. 04

    Launch & support

    Your site or app goes live, and I'm here for updates after.

  • You work directly with the developer — no agency markup, no account managers.
  • Fixed, upfront pricing before any work starts. No surprises.
  • Plain-English communication — no technical jargon.
  • Real, working projects behind me: TAKO Vancouver, Tri-Star Immigration Services, Candora Transportation.
  • Security isn't an upsell — every site I build ships hardened by default.
  • Local to Surrey/Vancouver, quick to reply, and around after launch.
02 — selected work

Real sites,
live in the card.

Every card opens the real thing. Hit Load live preview and the actual website streams inside the frame — nothing third-party loads until you ask for it.

candoratransportation.ca
Candora Transportation website homepage.

Candora Transportation

Live

Transportation · Logistics

Next.jsResponsive
projectchai.ca

projectchai.ca

Project Chai

Live

Café · Indian street food

Next.jsTailwindVercel
kinshiphomecare.ca

kinshiphomecare.ca

Kinship Home Care

Live

Home care · Seniors

Next.jsTailwindVercel

And two that live
in your pocket.

My own products, shipped to the App Store — real screenshots from the live listings.

on the app store
Flyerly app icon

Flyerly

Shopping · iPhone · iOS 16.4+

Your neighbourhood's best deals in one place. Local grocery, cafe and restaurant flyers, sorted by what's nearest — with a ping the moment a shop you follow posts something new.

  • Stores sorted by distance
  • Follow shops for new-deal alerts
  • Happy hour & time-limited deals
  • Filter by grocery, meat, bakery, cafe
Price
Free
Version
1.4.0
Updated
Aug 2026
Download on theApp Store
Flyerly stores tab listing nearby shops sorted by distance, with category filters and follow buttons.
on the app store
PayLeaf: QR Payments app icon

PayLeaf: QR Payments

Finance · iPhone · iOS 15.1+

QR payments and smart invoices for Canadian small businesses. Customers scan with their phone camera and pay by card — no terminal, no monthly fees.

  • Scan-to-pay QR codes
  • Branded PDF invoices
  • AI invoice drafting
  • Stripe payouts to your bank
Price
Free
Version
2.3
Updated
Jul 2026
Download on theApp StoreVisit website
PayLeaf keypad screen creating a QR code for a $2 charge with tax.
03 — free tool

Check your site's
security in 10 seconds.

A passive best-practices scan — not a penetration test. It reads what your site tells every visitor anyway: response headers, the TLS certificate, cookie flags, and public DNS records. Every finding is mapped to published guidance from OWASP, MDN, NIST or an IETF RFC, with a link so you can check the reasoning yourself.

// roughly the same passive checks as securityheaders.com and Mozilla Observatory, with the "why" attached

What it does

  • · One HTTPS GET of the page you enter, following redirects
  • · One plain-HTTP GET to see whether visitors get upgraded
  • · TLS handshakes to read the certificate and protocol version
  • · Public DNS lookups: SPF, DMARC, CAA, MTA-STS, MX
  • · One request for /.well-known/security.txt

What it does not do

  • · No login attempts, password guessing, or form submission
  • · No port scanning — only ports 80, 443, 8080 and 8443 are reachable
  • · No payload injection, fuzzing, or path enumeration
  • · No crawling — it looks at one page, not your whole site
  • · Nothing that touches your database or application logic

Passive best-practices check, not a penetration test. Only scan sites you own or are authorized to test. See the Terms of Use.

04 — cybersecurity

Labs, scans
& reports.

Labs & reportsCybersecurity
IntermediateCompleted

Metasploit Exploitation Lab

Exploited Metasploitable2 using Metasploit Framework — attempted VSFTPD 2.3.4 backdoor (unsuccessful) and su…

Metasploit FrameworkKali LinuxMetasploitable2
Read lab
BeginnerCompleted

Nessus Vulnerability Assessment

A vulnerability assessment workflow using Nessus and Nmap to identify, prioritize, and document weaknesses i…

Nessus EssentialsKali LinuxMetasploitable2
Read lab
BeginnerCompleted

Nmap Network Scanning

A service detection scan of the Metasploitable2 target at 192.168.128.2 using Nmap 7.98.

NmapKali LinuxLinux terminal
Read lab
BeginnerCompleted

Password Cracking with Hashcat

Cracked an MD5 password hash in under one second using Hashcat and the rockyou.txt wordlist, demonstrating h…

HashcatKali Linuxrockyou.txt
Read lab
05 — about

Based in Surrey, BC. I turn small businesses' ideas into shipped products — and I'm building the skills to keep them safe.

4+Live client sites shipped
8Documented security labs
2Products in progress