Naithan Weigh

Senior full-stack engineer · Systems architect · CTO

Naithan Weigh
builds systems, and asks how they break.

Over a decade across data-centre operations, Linux infrastructure and production platforms. I'm co-founder and CTO of Webfluentia, and lately I run AI coding agents in sandboxes, so I don't have to trust them.

See my work CV (PDF) GitHub LinkedIn

New essay Anatomy of an Asymmetric Persistence Mechanism

Portrait of Naithan Weigh
01 / About

From client servers to AI security

I started in technical support and data centres, building and maintaining servers across two 24/7 facilities, and moved up the stack from there: blockchain engineering, then CTO roles leading web platforms. Today I own technical architecture and client delivery at Webfluentia, from hardened Linux servers and Cloudflare edge services to distributed backends and web and mobile frontends.

The more I work with AI, the more I want to be involved in keeping it safe rather than only consuming it. I use LLM APIs and agentic tooling daily, and I run Claude Code in isolated pods, separated from the client infrastructure I host, because I don't fully trust an agent with root on a production server.

I first lived in Thailand from 18 to 25, then worked in Ireland, England, Malta and Malaysia before coming back. I now live in Chiang Rai. Studying meditation in Buddhist temples in Thailand led to my book, Becoming the Ocean. I speak English and Thai fluently, and Dutch is my native language.

02 / Writing

Latest essay

AI security · 8 min read

Anatomy of an Asymmetric Persistence Mechanism

Persistence is an asymmetry problem: the defender has to find everything, while the attacker only has to leave one thing behind.

A persistent WordPress infection, a cron job that undid my cleanup on its next run, and what the same pattern means for a model running across many devices: how to detect it, contain it, remove it everywhere at once, and measure the capability before it exists.

Read the essay All writing
  1. 01 Detect
  2. 02 Contain
  3. 03 Eradicate
  4. 04 Evaluate the step a website never needed
03 / Skills

What I work with

Infrastructure & operations
  • Linux: Ubuntu, Debian, Arch, RHEL/CentOS
  • Docker, Podman, Nginx, HAProxy
  • Google Cloud, ESXi, bare-metal data centres
  • Monitoring: Gatus, Netdata, Nagios, PRTG, SNMP
Security & hardening
  • Fail2ban, iptables/CSF, SELinux, pfSense, TLS
  • nmap, tcpdump, Wireshark
  • Incident response and persistence removal on compromised servers
  • Sandboxed containers for coding agents, with isolation tests
Languages & frameworks
  • JavaScript/TypeScript (Node.js), Python, PHP, Go, Java, Dart
  • Next.js, React, Vue, Nuxt, Vite, Laravel, WordPress
  • Flutter and React Native for mobile
  • Solidity and OpenZeppelin smart contracts
Data, edge & AI
  • PostgreSQL, MySQL, Cassandra, Kafka, Redis, SQLite
  • Cloudflare Workers, Durable Objects, D1, R2, KV, Queues, Workers AI
  • LLM APIs (Anthropic, Google, OpenAI), voice synthesis, PyTorch
  • Local inference pipelines and agentic coding workflows
04 / Work

Selected work and experience

agent-pod

Open source Early

Runs an autonomous coding agent (Claude Code) in a rootless Podman container that gets one project directory and nothing else from the host: no Podman socket, no host network, no display, no host credentials. It ships with a verify script that tests those limits on your own machine, instead of asking you to take them on trust. It also says plainly what it does not protect against.

  • Bash
  • Podman
  • Linux namespaces
  • Claude Code
  • Apache-2.0
View on GitHub

Platform highlights at Webfluentia

Enterprise IoT tracking platform

Architected and led development: distributed microservices, real-time streams on Kafka and Cassandra, and integrated live media streaming.

Compliance-first fund-data portal

Magic-link access, structured data intake, a diff-based review queue with audit history. Next.js and PostgreSQL, containerised for in-country data residency, delivered in three weeks.

Property management system

For a 40-apartment rental business with over 1,000 bookings a year: dynamic pricing, payments, two-way channel-manager sync and a cleaning-operations dashboard.

Real-time chat on the edge

Multi-tenant chat hosted entirely on Cloudflare Workers, using Durable Objects for low-latency connections, with a moderation backend.

Hosting & observability

Hardened Ubuntu servers and Cloudflare Worker domains for around 20 client sites, with a monitoring stack I designed: Gatus, Netdata with DDoS detection, Telegram alerting.

Experience

  1. Co-founder & CTO, Webfluentia

    Dec 2023 – present · Thailand / Malaysia

    Technical architecture and client delivery across enterprise IoT, edge-hosted applications, property management and AI-integrated products.

  2. Chief Technology Officer, High Score Media

    Feb 2021 – Sep 2023 · Malta

    Led design and development of web applications, from Node.js and Laravel services to WordPress themes and plugins; set engineering practices and oversaw infrastructure growth across tens of sites.

  3. Co-founder, The Thai Detective

    May 2018 – present · Thailand

    Built and maintain the company websites, run ads and analytics, and coordinate the team.

  4. Lead Blockchain Engineer, The Incitement

    Nov 2017 – Jul 2018 · Malaysia

    Designed and developed Ethereum smart contracts, including a crowdsale; led the blockchain team and wrote the technical documentation.

  5. Linux Infrastructure Engineer, Melbourne Server Hosting (iomart Group plc)

    Apr 2016 – Sep 2017 · UK

    Built and maintained infrastructure across two 24/7 data centres with hundreds of servers; escalated support for complex server and network issues.

  6. Earlier roles

    2013 – 2016

    Software support at Dmax (Linux, DNS, MySQL and HIDS maintenance for 35+ websites), and bilingual Dutch/English technical support for Logitech at Teletech.

05 / Education

Education & certificates

MITx · edX · 2015–2016

6.00.1x: Introduction to Computer Science and Programming Using Python

Taken 2015–2016; verified certificate issued 16 March 2016.

Verify on edX

Qubit by Qubit · IBM Quantum · 2020–2021

Introduction to Quantum Computing

October 2020 to May 2021. Linear algebra, coding with Qiskit, quantum mechanics, quantum algorithms and applications.

View certificate (PDF)

MAVO (physics, chemistry, biology, sociology), Landstede, Harderwijk, Netherlands, 2007.

06 / Book

Away from the terminal

Cover of Becoming the Ocean: A Guide to Mindful Living

Becoming the Ocean: A Guide to Mindful Living

Struggling with a restless "monkey mind"? Becoming the Ocean offers a path to inner peace through mindful movement: practical techniques, including the hand movements taught by my teacher, a Buddhist monk in Thailand, to quiet mental chatter and find stillness within motion.

Amazon UK Amazon US Other stores
07 / Contact

Get in touch

Interested in infrastructure, agent sandboxing or AI security work? Email is the best way to reach me.

Based in Chiang Rai, Thailand · British citizen, eligible to work in the UK

[email protected] CV (PDF) LinkedIn GitHub Webfluentia