Nike Store Availability
Compared Factory, Clearance, and full-price stores using 886,825 Nike API status changes across 255 US locations.
Cole Banman
Work
- Zatanna (YC W26) · Engineering InternJun 2026 – Jul 2026
- Shipped production HTTP APIs that let customer AI agents access airline booking, healthcare/EHR, and back-office portals with no public APIs.
- Reconstructed authentication, session lifecycles, and request sequences at the network layer, replacing browser automation with parameterized endpoints hardened for production.
- Northeastern University London · Software Developer (Contract)Feb 2026 – Jun 2026
- Delivered the university's student job platform end to end as sole developer, including search, saved jobs, email digests, and admin analytics; presented architecture decisions to university leadership weekly.
- Unified seven job sources into one normalized feed, building custom connectors with traffic analysis, TLS fingerprinting, and proxy rotation where public APIs were unavailable.
- Turned search analytics, in-app feedback, and session replay into a staff-facing dashboard used to prioritize the product roadmap.
- Flow Monitors · Founder & Lead EngineerJun 2023 – Present
- Bootstrapped the product to 20,000+ users and $3.5K+ peak MRR with no outside funding; it continues as a passive business at ~$500 MRR.
- Engineered Go request infrastructure handling 10M+ daily requests, using Chrome TLS fingerprinting and a self-hosted proxy fleet to collect reliably behind Cloudflare, Akamai, and Kasada.
- Owned pricing, onboarding, and support without a sales team, retaining clients for multiple years.
Projects
dynafetch
Headless Chrome page-load replication with network interception and benchmarked speedups up to 13.7x over Chrome.
Brett Adcock Browser Agent Challenge
CDP-based computer-use agent that solved all 30 browser tasks in under 3 seconds.
Flow Monitors
Bootstrapped real-time retail inventory monitoring to 20,000+ users and $3.5K+ peak MRR, backed by 10M+ daily requests.
Grabbit
AI-driven browser automation framework that turns real interactions into deterministic API workflows.
Grabbit Extension
Chrome extension that reverse-engineers API requests from highlighted page data and generates schemas automatically.
Reverser
Autonomous vulnerability scanner with CDP browser automation, agent-driven discovery, and live session inspection.
NXTAntibot
Proof-of-concept anti-bot system with obfuscated client code and encrypted websocket challenges.
JavaScript Obfuscator
AST-based JavaScript obfuscation tooling built with Babel for code hardening and reverse-engineering resistance.
OSAuto
Collection of browser automation bots and experiments built to test interaction patterns across real sites.
Complete Sneaker Bot Suite
Full-stack automation system with payments, key management, and anti-bot bypass across multiple retail targets.
BetterVue Public
Modern redesign of a reverse-engineered gradebook API with a cleaner student-facing interface.
Achievements
- Awarded a $1,500 bounty for a critical authorization flaw in Vercel's AI SDK that granted unrestricted access to paid AI models; responsibly disclosed
- Awarded $25k+ in AI/cloud credits for a top solution to Brett Adcock's browser agent challenge; write-up reached 11.6K impressions
- Found an API vulnerability in JD Sports' mobile app that prompted a redesign of the affected platform
- Published two open-source developer tools to npm, Grabbit and dynafetch, with 3,900+ combined downloads