InvisiMail is a self-initiated SaaS project built around a simple but real problem: giving people disposable email addresses so their real inbox never touches third-party services. I engineered it as a production-oriented full-stack application — focusing on robust API architecture, authentication, and security rather than a surface-level demo.

Beyond the core app, I built a secure Mailgun webhook pipeline with HMAC-SHA256 signature verification and replay-attack protection, JWT-based session handling with role-based access control, and an LLM-powered assistant for AI-composed replies. It gave me room to dive deep into backend security while maintaining the standard of polish expected in commercial SaaS products.