Founder & Engineer · Yogyakarta, UTC+7
I build reliable websites, marketing technology, and AI-native systems.
75+ websites built and conversion tracking systems deployed for agencies and businesses across Germany and international markets.
- Google Tag Manager
- Google Analytics 4
- Consent Mode V2
- Google Ads conversions
- Server-side tagging
- Data layer design
- Technical SEO
- WordPress
- Next.js
- Cloudflare
- AWS
- AI-native development
Selected Work
Anonymised case studies from tracking, consent and conversion projects.
- A Headless Website for a Label Printing Brand Headless website · Label printing
- Privacy-First Tracking for a German Dental Practice Consent & tracking · Healthcare
- An In-House Recruitment Platform for a Packaging Manufacturer Recruitment platform · Packaging
- A Mobile Sales Inbox for a Packaging Manufacturer Mobile app · Packaging
In Numbers
- 75 +
- Websites built and maintained
- 350 +
- Clients served since 2020
- 2018
- Building for the web since
Overview
I'm Sultan Kautsar, a Founder & Engineer focused on web engineering, marketing technology, and AI-native development.
I build reliable digital systems across websites, infrastructure, analytics, tracking, automation, and marketing tools.
I choose technology based on the problem and the desired outcome, with a focus on simplicity, reliability, and efficient execution. AI is an active part of my engineering workflow for research, development, debugging, automation, and system design.
More about meCurrently
- Marketing Technology Engineer MediaConversion, Hamburg
- Software Engineer FlexyPack, Jakarta
- Founder & Engineer Rayatiga
Recent Notes
Things I've learned building, measuring and shipping, written down so they stay useful.
- Locking and Watching WordPress
How I made the code of about 50 WordPress sites immutable with chattr, what that broke, the two protections that had silently never run, and a daily Telegram report built to have almost no false alarms.
- Spam That Outlives the Hack
Why Google kept almost a million gambling spam URLs after the WordPress sites were clean, and how I mapped them from access logs, answered them with a tested 410 rule, and told Search Console to drop them.
- When the Server Fell Over
How a Facebook crawler flood took every WordPress site on a shared server down, why a full opcache looked like an attack, and the caps, crawler caching and checks that keep one site from sinking the rest.
- Two Servers, 50 Sites, One Bug
How wp2shell, a WordPress Core exploit, reached about 30 old WordPress sites across two RunCloud servers, what the attacker left behind, how I cleaned up and contained it, and the hardening I now recommend.
Next step
Have a project in mind? Let's talk.
Tell me what you have and what you need. I'll usually reply within one working day with how I'd approach it.