Yigit Karabulut
Full-Stack Human building product, security and AI systems between London and Istanbul.
Things I've built, led or shipped.
- 01Tebli.co2026 · Full-Stack Developer
- 02Color Mosaic2025 · Designer & Developer
- 03NineCells2025 · Designer & Developer
- 04Petto2025 · Designer & Developer
- 05MyDoll.app2025 · Founder & Full-Stack Developer
- 06Ganbitera2024 · Cyber Security Team Lead
- 07Inpocket.ai2023 · Product Owner
- 08Hafiz Mustafa 18642023 · Regional IT Manager
- 09Doldur Music2022 · Co-founder
I build software end-to-end and break it when I have to. By day I ship product and platform work as a full-stack engineer at Tebli.co; in parallel I run indie iOS releases — Color Mosaic on the App Store, NineCells and Petto on TestFlight — and lead my own AI side bets. Before this I owned roadmaps as Scrum Master and Product Owner across three AI ventures at Inpocket.ai, and stood up information security from zero at Ganbitera (NFT) and Hafiz Mustafa 1864 — ISO 27001 / 27701 audits, SOC operations and offensive security work. I care about clarity, small teams shipping with conviction, and software that has a point of view.
Currently
- Hafiz Mustafa 1864
- Color Mosaic
- NineCells
- Petto
London / Istanbul · b. 2002
- 2026
Tebli.co
Full-Stack Developer
Shipping product and platform work end-to-end across the full stack.
- 2025
ColorMosaic
Developer
Designed and shipped an indie iOS puzzle game — grids, multiple difficulties, daily challenges, color-blind accessibility and Game Center.
- 2025
MyDoll.app
Founder & Full-Stack Developer
Founded and solo-built MyDoll end-to-end — frontend, backend, infrastructure and product direction.
- 2024
Ganbitera
Cyber Security Team Lead
Led security on an NFT marketplace; established ISO 27001 and 27701 compliance from the ground up.
- 2023
Inpocket.ai
Product Owner
Owned three ventures in parallel — Inpocket.games (Learn Isle), Inpocket.travel (AI travel companion) and Cordies Agency (AI talent).
- 2023
Hafiz Mustafa 1864
Regional IT Manager
Ran information security and IT operations — Micros 3700 & Simphony, helpdesk, ISO 27001 / 27701 audits, SOC L1, firewall.
- 2022
Doldur Music
Co-founder
Built an AI musician agency — three AI artists, 30+ fully AI-composed tracks, 20K+ digital streams.
Languages, frameworks and tools I've actually shipped with.
Pulled from the projects on this site — and the ones still cooking. Not a wishlist, not a buzzword cloud.
- TypeScriptprimary
- SwiftiOS · watchOS
- Gobackend services
- JavaScript
- PythonML / scripting
- C++
- SQL
- Next.jsApp Router
- React
- Vite
- Tailwind CSS
- shadcn/ui · Radix
- Framer Motion · GSAP · Lenis
- Three.js · react-three-fiber
- Pixi.js2D game runtime
- i18nnext-i18next · react-i18next
- SwiftUIColorMosaic · NineCells · Petto
- WidgetKit · Live Activities
- App Intents · Shortcuts
- watchOS
- Game Center
- React Native · Expoexpo-router
- Go + GinREST APIs
- gorilla/mux · WebSockets
- Node.js · Express
- REST · WebSocket · SSE
- Auth · sessions · CSRF
- PostgreSQLpgx
- Supabase
- Redis
- S3 · object storage
- PyTorch · safetensorsACE-Step audio model
- HuggingFace ecosystem
- Docker · docker-compose
- AWSSDK v2 · S3 · IAM
- Verceldeploy · analytics
- Linux servers
- CI / pre-commit · pnpm workspaces · Turbo
- ISO 27001 / 27701audit lead
- SOC L1 monitoring
- Firewall operations
- Pentest+ · offensive tooling
- Threat modeling · secure SDLC
- Product Ownership · Roadmapping
- Scrum Mastery
- End-to-end shippingsolo founder pace
- AI product strategy
- Information governance
- 01CompTIA Pentest+CompTIA
- 02Pre SecurityTryHackMe
- 03Introduction to Cyber SecurityTryHackMe
- 04DoS / DDoS Attacks & DefencesTurkcell Academy
- 05Kali LinuxBTK Academy
- 06Social Engineering & PhishingBTK Academy
- 07Cyber Security in BankingBTK Academy
- 08Cyber SecurityFintelligence
- 09Cyber SecurityStationX
- 10ISO 27001 Chief InspectorBilgiNetAkademi