vCard QR Generator
liveTurn your contact details into a QR code that phones save straight to contacts. For anyone who hands out their details: sales, events, front desks.
Add a name and your QR code appears here, live.
Business tools built by someone who has actually run the business.
AI is the tool. Rob is the craftsman. Twenty years of warehouse, fulfillment, and logistics operations behind every build.
20 years opsrls from migration zerodeny by default
the problem
Most AI-built apps ship insecure.
Research from Carnegie Mellon, Veracode, and the Cloud Security Alliance found that 62 percent of AI-generated applications ship with critical security vulnerabilities. In May 2025, one missing database policy exposed source code, credentials, and payment data across 170 production apps built on a popular AI coding platform. These platforms optimize for speed and demo quality. Production security is what gets skipped.
- CVE-2025-48757(opens the NVD entry in a new tab)
- 62% ship critical vulns
- 170 apps exposed
Here is what we do not skip: see how it is built.
free tools
Try the work. No account required.
Every tool here runs on the same architecture as client work. The quality of the free tools is the pitch.
coming soon
Reorder Point Calculator
Know when to reorder before the stockout, not after it.
For inventory owners and ops managers.
coming soon
SOP Builder
Turn tribal knowledge into procedures your team actually follows.
For warehouse and fulfillment leads.
how it is built
The architecture is the argument.
Plain language, specific choices, nothing bolted on afterward.
Locked by default
Every route requires authentication unless it is explicitly made public. Public access is opt-in, never opt-out.
edge auth: deny by default
Isolation the database enforces
Row Level Security is enabled on every table in the same migration that creates it. A missed application check cannot leak data, because the database refuses on its own.
rls: enabled from migration zero
Contained privileges
Three isolated database clients with strict trust boundaries. The key that bypasses security lives in exactly one server-only file, and every privileged action lands in an audit table.
service role: one file, audited
Nothing unvalidated
Every API input is schema-validated before any database call, errors never leave as stack traces, and public endpoints are rate limited at the database layer.
zod: parse first, query second
before anything ships: typecheck, lint, build, and a full supabase security advisor pass.
services
What Rob builds
Custom app builds
The tool your business needs but cannot buy off the shelf, built to own outright.
For founders and SMB owners.
Operations tooling
Dashboards, trackers, and internal tools for teams that move real inventory.
For warehouse, fulfillment, and logistics teams.
Workflow automation
The busywork between your systems, handled without the copy-paste.
For teams drowning in spreadsheets.
Engagements are simple:scoped projectretainerconsultation
Every engagement ships on the architecture above. Security is the starting point, not a retrofit.
Work with Robabout rob
Twenty years on the floor. Now building the tools.
Rob Ramos spent two decades running warehouse, fulfillment, manufacturing, and logistics operations: multi-site teams, ground-up SOPs, KPI targets held above 99 percent. The tools on this site are built for problems he has lived, not problems he read about. AI accelerates the work. Twenty years of operations decide what gets built, what ships, and what holds up.
Tell me what you are building.
Name, email, a sentence or two. Replies within one business day.