Independent software · Zürich

Production software for businesses that need it to work.

I'm Corey. Nine years building wealth-management platforms at Credit Suisse and UBS, now CTO of a regulated credit union and shipping live products across mobile and web. I take full ownership of what I build — from architecture through deployment.

British passport · Swiss B permit One project slot opens June 2026
Portrait of Corey Musa
Corey Musa
Senior full-stack engineer
Shipped through
  • UBS
  • Credit Suisse
  • Backbase
  • Smartstream
  • Manx Credit Union
  • RugbyUnlocked
  • 9 yrs building production financial systems
  • UBS / CS full-stack across Switzerland, Spain, Italy, UK
  • CTO of an IoMFSA-regulated UK credit union
  • 110 clubs on a SaaS I built and run solo
  • Live React Native, Next.js, Astro and Angular in production
§01 · Right now Updated May 2026

Building the underwriting-committee flow for the credit union and shipping a new billing rotation for Rugby Unlocked. Half the week is on customer calls, half is actually writing code — and that ratio is the whole point.

  • Building this week — MCU committee timeline, RU per-club invoice run.
  • ReadingThe Goal, Eli Goldratt. Theory of constraints, again.
  • Listening — anything with a Spanish guitar in it.
  • Open to talk about — Rust, Stripe billing edge cases, regulated overlays.
What I build

Three lanes. One operator. Yours, end-to-end.

Most projects fall into one of three shapes. Each is delivered by the same person who architected it, wrote it, and pushed it to production.

01

Site rebuilds

WordPress, Squarespace or hand-rolled sites rebuilt mobile-first on Astro and Vercel's edge. Faster pages, structured data Google can read, no plugin patch cycles.

  • Fixed price, fixed timeline (~3 weeks)
  • Stripe Checkout if commerce is in scope
  • 301-redirect every old URL — rankings come with you
02
Most common

Custom platforms

Full-stack web and mobile products built from a blank canvas. Auth, payments, admin tools, audit trails, regulator-grade if you need it. React / TypeScript and Spring Boot stack, the same one I run for the credit union.

  • Architecture, build, deploy — one engineer
  • Mobile (React Native) and web (Next.js / Angular) under one roof
  • Regulated overlays: AML/CFT, KYC, DSAR, audit chains
typically £15–40k Scope a build →
03

Site care

Once it's live I keep it running. Hosting on Vercel (managed for you), content updates, performance monitoring, security patches, uptime alerts and a monthly health summary.

  • Six-month minimum, month-to-month after
  • Direct line to the person who built it
  • Scales with larger sites, content volume, and active SEO
from £150 / month Get care →
Selected work

Live work — with real users on it today.

A representative cut. Production sites, regulated platforms, AI products and a growing SaaS — all owned end-to-end by me.

Regulated platform 2025–

Manx Credit Union

The operating system of an IoMFSA-regulated UK credit union. Member portal, full loan lifecycle, AML/CFT operations, SHA-256 audit chains, in-product regulator training, one-click inspection-pack export.

  • Angular 19 · Spring Boot 3 · Java 21
  • Custom Spring Authorization Server
  • Open-banking via Yapily
Co-founder & CTO · Read the case study →
Mobile + AI 2025–

Mooncake

Cross-platform AI chat app with automatic context memory across conversations. React Native first, TypeScript, Hono and Drizzle ORM. iOS and Android pending store release.

  • React Native · Hono · Drizzle
  • Memory + tool calling pipeline
  • getmooncake.com
Solo build · case study →
SaaS 2026–

Rugby Unlocked

Identity and statistics platform for amateur rugby. Grew organically to 400 users and 40 paying across 110 clubs, no paid acquisition. I own architecture, billing and ongoing ops.

  • Next.js · Stripe billing
  • Sole engineer, full P&L
  • rugbyunlocked.com
Co-founder · case study →
LLM platform 2025–

PromptMySite

LLM agent platform: orchestration, tool calling, streaming inference, multi-turn state, RAG pipeline. Live on Shopify with Stripe billing.

  • TypeScript · Shopify · Stripe
  • RAG · streaming inference
  • promptmysite.com
Solo build · case study →
The soft retouch 2026

Lonsdale Commercials

A Cardiff family business trading since 1980. Same brand, same URLs, same content. WordPress out, Astro in. A rebuild a returning customer wouldn’t notice, except the pages now load in under 100ms.

  • 38 vans · 188 SKUs · 1.4k WebP variants
  • £0 monthly hosting after cutover
  • Both sites still live for comparison
Solo build · soft-retouch case study →

More public experiments and side projects live at coreyscodecave.com.

§05 Operating principles

How I work, written down so you can hold me to it.

  1. 01

    The person who quotes is the person who ships.

    No salesperson, no project manager standing between us. You get the engineer who will write the code from the first call onwards.

  2. 02

    Fixed price, fixed scope, fixed timeline.

    If I can’t put a number on it, it’s a research project — and you’ll see why on day one, before any money moves.

  3. 03

    Source code is yours from day one.

    The repo lives in your GitHub org from the first commit. Nothing locked behind an agency portal, no proprietary admin to learn.

  4. 04

    Boring stack on purpose.

    React, TypeScript, Java/Spring, Postgres, Astro. The same stack the bank uses. Stuff your next engineer can read on the train home.

  5. 05

    Regulated is the floor, not the ceiling.

    Audit trails, retention engines, KYC pipelines — same hygiene whether you’re an Isle of Man credit union or a Cardiff bakery. The discipline travels.

  6. 06

    Show, don’t bill.

    Daily preview deployments on Vercel. You can click the work before you sign the next invoice. No "trust me, it’s coming".

§05.4 Right fit if you
  • Have an existing business or product, not just an idea on a napkin.
  • Want one engineer who’ll quote it, build it, and stay on it.
  • Value source-code ownership and zero agency lock-in.
  • Need regulated-grade discipline whether or not you’re regulated.
  • Prefer fixed-price, fixed-scope, fixed-timeline contracts.
§05.5 Things I will politely decline
  • Hourly billing on the build phase.
  • Re-engagements on a project I didn’t originally ship.
  • Anything where I’d be the third agency.
  • “Build it to flip it” briefs — I’d rather build to keep.
  • AI features bolted on for the sake of a deck.
§06 Places I’ve worked from

A career in five places, starting behind a counter.

  1. Newcastle 2014–2015

    Crew member at the McDonald’s on Northumberland Street while reading Computer Science up the road. The three lessons that have outlasted the job: turn up on time, do the boring step properly, and the customer in front of you is always the work.

  2. Bristol 2017–2018

    Smartstream graduate ladder. Java microservices, the boring fundamentals, the kind of two-year tour where you learn to ship before you learn to argue about how to ship.

  3. Cardiff 2019–2020

    Backbase, as the first full-stack hire. Built the reusable micro-frontend library every credit union and bank client ran on. Shipped the payments security layer (SMS OTP, device OOB, Keycloak) into production at multiple regulated institutions.

  4. Zürich 2020–2025

    Five years on Credit Suisse and then UBS wealth management. Frontend consultant to Assistant Vice President to Associate Director. Led the React / TypeScript full-stack delivery for the EMEA wealth platform through the largest banking consolidation in Swiss history.

  5. Everywhere 2025–

    Independent studio. Mooncake, PromptMySite, RugbyUnlocked, the agency client work, this site. Half the week on customer calls, half on actual code — on purpose.

§07 Ask me about

If any of these light you up, we’ll get along.

  • React Native first
  • Spring Authorization Server internals
  • signals vs ngrx
  • open banking via Yapily
  • IoMFSA inspection packs
  • SHA-256 audit chains
  • why I left the bank
  • RAG pipelines without LangChain
  • Stripe billing edge cases
  • monorepos that don’t hurt
  • Welsh poetry
  • sourdough
  • the offside line
  • how to fire a plugin without losing rankings
  • Astro & the death of WordPress
About

Nine years on regulated platforms. Now building the same quality for businesses outside the bank.

I started on a graduate programme at Smartstream in Bristol, joined Backbase in Cardiff as their first full-stack hire, then spent five years on the consolidated UBS EMEA wealth-management platform — through the largest banking consolidation in Swiss history — rising from contract architect to Associate Director.

I now run my own studio in Zürich. I’m CTO of an IoMFSA-regulated UK credit union, co-founder of a rugby SaaS with users across 110 clubs, and I ship production React Native, Next.js and Astro products under my own brand.

The thread through all of it is the same: take full ownership, ship to real users, and treat regulated standards as the floor rather than the ceiling.

Stack React / TypeScript · React Native · Next.js · Astro · Angular 19 · Java 21 / Spring Boot 3 · PostgreSQL · AWS
Regulated OAuth2 / OIDC · AML/CFT · KYC / CDD audit trails · FCA Consumer Duty · IoMFSA frameworks · SHA-256 audit chains
Education BSc Computer Science, Newcastle University · 2014–2017
§07.5 Notes

Short pieces on the way I work.

Things I’ve had to write the proposal version of more than three times, so I wrote them down properly. New entries land in this list.

§07.7 In their words

Corey intuitively understood what we needed without me having to spell it out. He gave the site a careful facelift our customers still recognise instantly, and unlike the agency we’d been paying, he didn’t charge me £900 a day every time we needed a small update.

Michaela Lee Director, Lonsdale Commercials Read the case study →

This site is sick. We’ve been on Rugby Unlocked since launch and it just works. When I asked Corey to tweak how attendance shows up, it shipped in two days. Most platforms charge me to even file the request.

Rhys Davies Club Captain, Penarth Wanderers RFC Read the case study →
§08 Before you ask

The questions every reasonable client asks first.

How long does a typical project take?

Site rebuilds run 21–25 working days from go-ahead to public cutover. Custom platforms are scoped per project, but a useful rule of thumb is six to twelve weeks for a first production version. Either way, you’ll see daily preview deployments on Vercel during the build — you’re never waiting on a status update.

Can you work alongside our existing agency?

Yes, with one caveat: I won’t be the third agency on a project. If you already have a brand or design partner, they keep the brand and design lane and I take engineering end-to-end. If you have an existing dev team I can complement them on a specific surface (mobile, regulated overlay, payments) but won’t take responsibility for code I didn’t write.

Do you sign NDAs and DPAs?

Yes. Mutual NDAs are signed before any sensitive material moves. For regulated work, I sign DPAs and can operate inside your data residency requirements. I’ve done this end-to-end with an FCA-regulated business and an IoMFSA-regulated credit union — the paperwork is familiar.

How does payment work?

Fixed-price projects: 40% on signature, 40% at the mid-project milestone, 20% on public cutover. Custom platforms: monthly invoice against a written plan. Site care: monthly direct debit, starting at £150/month and scaling for larger sites, heavier content cadence, or active SEO retainers. All invoices on Stripe, in your currency, with a receipt your accountant can reconcile in thirty seconds.

What happens after launch?

Thirty days of post-launch support and tuning come with every project at no extra cost. After that, you can either take the keys (the repo, content store and Vercel account are already yours) or roll onto Site care from £150/month, which folds hosting, security patches, performance monitoring and content updates into one invoice. Larger catalogues and active SEO retainers are priced on top.

I don’t have a designer. Is that a problem?

No. The mocks in the proposal show what the rebuilt site will look like — you sign off on the design before any production code is written. If you have brand assets I’ll respect them; if you don’t, you’ll get a coherent visual language out of the project and own it afterwards.

Start a project

If you can describe it, I can build it.

Tell me what you’re building — or what you’ve already built that isn’t working. I’ll come back inside two working days with a written assessment and, where it fits, a fixed-price proposal.

Next opening: one new project from June 2026. Replies within 48h · Mon–Fri +41 79 787 31 98 Or email corey@builtbycorey.com