# Federico Noya

> I build and run web products end to end — from the database to the deploy to the thing that actually brings in customers. Full-stack product, unattended systems and SEO as engineering.

Construyo y opero productos web de principio a fin: desde la base de datos hasta lo que de verdad trae clientes. Producto full-stack, sistemas desatendidos y SEO como ingeniería.

Based in Málaga, Spain. Works in Spanish and English with clients in Spain and Latin America. Contact: hello@federiconoya.com

## Pages
- [Home (ES)](https://www.federiconoya.com/): Federico Noya — Producto, sistemas y SEO como ingeniería
- [Home (EN)](https://www.federiconoya.com/en): Federico Noya — Product, systems and SEO as engineering

## Crafts
- **Product**: SaaS for regulated industries, from the database to the deploy. Row-level security in PostgreSQL, audited by hand, because “the query returns nothing” and “the user has no access” look identical until they don’t.
- **Systems**: Unattended automation: scheduled collectors, queues and Python agents. YouTube publishing through the API with quota control, and a deterministic video pipeline that renders frame by frame with no editing software.
- **SEO & GEO**: In-house collectors across 38 Search Console and 54 GA4 properties. Crawlers that diff a repo against a sitemap against a live crawl. And GEO: getting brands understood — and cited — by generative engines.
- **Security**: WebAuthn passkeys, TOTP with anti-replay, an AES-256-GCM vault, nonce-based CSP and SSRF protection. WordPress fleets watched for vulnerabilities, and hardening plugins of my own.
- **Markets**: Quantitative research with lab discipline: Deflated Sharpe, PBO and guards against HARKing. Trained in AI for Trading (Udacity) and a Master’s in Stock Markets.

## Vera OS
My own command center: CRM, clients, quotes, the WordPress fleet, monitoring, SEO and finance in a single panel. Eleven rules run every day, and every finding shows up on the same screen where it gets resolved. Next.js 16, strict TypeScript, MariaDB, passkeys and CI with secret scanning.
- 53,200 lines of in-house code
- 11 intelligence rules per day
- ~20 sites audited every week
- 208 passing tests

## Work in production
- **ContaDoc** (SaaS · Healthcare · Argentina) — https://contadoc.io: Accounting for independent healthcare professionals. Tax engine (VAT, income tax, provincial), OCR expense capture and period settlement.
- **OPS Colombia** (Marketplace · Solar energy) — https://opscolombia.com: Solar quotes marketplace with ~70,000 search impressions a month.
- **Granel** (SaaS · Commodities): CTRM software for commodity trading desks, with AI-assisted trade capture over WhatsApp.
- **CuotaQ** (SaaS · Clubs & non-profits) — https://cuotaq.com: Membership-fee billing for clubs and non-profits.
- **AssetWhisper** (Platform · Markets) — https://assetwhisper.com: Market analysis and educational content. No return promises.
- **NVDigital / Loco 22** (Studios · Spain & Argentina) — https://nvdigital.es: Web development studios on both sides of the Atlantic. Vera OS was born to run them.
- **Autoridad Digital** (Advanced SEO · GEO) — https://autoridaddigital.com: SEO as engineering and visibility in generative engines, with a nine-phase method and an in-house GEO scanner.

## Cases with numbers
- **OPS Colombia**: From 6 to 1,032 clicks a month in a year, with zero ad spend. A solar-quotes marketplace in Colombia. The first jump took three months; 1,000 clicks arrived at month ten. In June it fell 44% without touching the site — a Google core update plus seasonality — and by August it was back to 974, 6% off the peak. Source: https://www.autoridaddigital.com/blog/opscolombia-case-study

## Profiles
- GitHub: https://github.com/nvFede
- LinkedIn: https://www.linkedin.com/in/gaston-noya
- Studio NVDigital: https://nvdigital.es
- Studio Loco 22: https://loco22.com