25+
Years programming
Experience designing, rewriting, extending, debugging, and maintaining production web systems.
Core PHP + Agentic Development
AI-Speed Development.
25 Years of Human Judgment.
Web Shopping Systems combines programming with Claude Code and senior-level core PHP expertise to build custom websites and business systems faster—without handing architecture, security, or release decisions over to an AI agent.
Core PHP
Lean application architecture
Direct control over execution paths, dependencies, validation, database access, security controls, and performance.
AI + Human
Agentic speed with accountability
Claude Code accelerates implementation. Architecture, code review, security decisions, testing, and deployment remain human-controlled.
Why this model works
Claude Code is the accelerator. Experience is the control system.
The fastest way to get bad software is to automate bad decisions. Web Shopping Systems uses agentic coding to compress repetitive implementation work while applying decades of experience to the decisions that determine whether a system is maintainable, secure, and production-ready.
- Human-defined architecture before implementation
- Secure input validation and output encoding
- CSRF, session, authorization, and data-access controls
- Prepared database statements and least-privilege access
- Human review of agent-generated changes
- Testing before production release
- Lean core PHP when a heavy framework is unnecessary
Security experience
Security knowledge built in production—not added as a plugin.
Kimberly Carr has written and maintained web applications subject to external security review, payment-processing requirements, and active attack testing. Her work has been reviewed in environments involving Visa/Mastercard payment processing and the U.S. Department of Housing and Urban Development.
HUD specifically acknowledged a submission that passed its security review on the first review. That history matters because AI-assisted development still needs someone who recognizes insecure assumptions, unsafe data flow, weak authorization, and fragile application design before code reaches production.
$ delivery_model = [
'architecture' => 'human-led',
'implementation' => 'Claude Code accelerated',
'security_review' => 'human',
'testing' => 'required',
'framework_tax' => 'optional'
];
Selected experience
Systems that had to work.
GiveDirect.org platform development
Rewrote and extended a large online fundraising platform in core PHP, including public-facing websites, internal administration, accounting processes, and charity and donor portals. The work operated in a payment-processing environment subject to recurring security scrutiny.
RentalFacts.online
A current example of lean, purpose-built web application development. It represents the direction Web Shopping Systems is bringing forward: direct PHP control, practical architecture, and faster implementation with modern AI-assisted tooling.
Good fit
Custom work where speed and control both matter.
- Custom PHP websites and web applications
- Legacy PHP modernization and rewrites
- Business portals and internal systems
- Database-driven applications
- Payment and transaction workflows
- API and third-party integrations
- Security-focused remediation
- Expedited MVPs and feature delivery