AI-Powered Resume Optimizer

Land the job.
Resume that speaks
before you do.

Deep recruiter analysis, XYZ bullet rewrites, ATS simulation, 7-second scan check, mock interviews, and live job matching — free, no sign-up.

Try it free → View on GitHub

Free tier hosted on Render — first load after inactivity takes ~30s

5
AI-powered tools
4
Pipeline stages
10
Languages supported
0
Cookies / tracking
What it does

Five tools, one session

Each tool runs independently. Use one, use all. No account needed.

📄
Resume Optimizer
4-stage AI pipeline — senior recruiter scan, Google XYZ bullet rewrite, ATS simulation, 7-second hiring manager skim test. Optional mock interview with per-answer scoring and a final assessment.
✉️
Cover Letter Generator
Generates a letter that sounds like a real person wrote it — not a template. Bans buzzwords, opens with something specific to the company, closes with confidence. Tone selector included.
💼
LinkedIn Rewriter
Rewrites your headline, About section, and skills list for the role you actually want, not the one you have. Uses the same job description as the optimizer.
🔍
Job Match Finder
Extracts what you're good at from your resume and searches live job listings via the Adzuna API. Country selector. Credentials are server-proxied — never exposed to the browser.
📈
Skill Gap Analyzer
Identifies exactly what's missing between your current profile and the role's requirements. Surfaces specific, free learning resources for each gap. Prioritized by impact.
🎤
Mock Interview Engine
7 questions: one opening, three technical, two behavioural (STAR format), one curveball. Per-answer scoring with a rewritten model answer. Final interview verdict at the end.
Optimizer — 4-stage pipeline
1
Recruiter scan
Red flags, section scores, keyword gaps
2
XYZ rewrite
Accomplished X as measured by Y by doing Z
3
ATS simulation
Keyword coverage, parse score, format check
4
7-sec skim
What a tired hiring manager actually reads
Pricing

Free to use. Forever.

The free tier uses a server-side Gemini key — no sign-up, no catch. Pro mode lets you bring your own Anthropic key for sharper output.

Free
Gemini Flash
Just works. No account, no setup, no expiry.
  • All 5 tools included
  • No sign-up ever
  • Rate-limited to prevent abuse
  • 200 requests/day (shared pool)
Pro
Claude Sonnet
Noticeably sharper output. Your key, your billing.
  • Deeper recruiter analysis
  • ~$0.02 per run
  • Key stays in your browser only
  • Auto-cleared after 30 min idle
Technical

Built to stay simple

No database, no build step, no npm. A single-file frontend and a small Python backend deployed to Render free tier.

Backend
FastAPI + uvicorn
Python 3 · Pydantic validation · Render free tier
Frontend
Vanilla JS / HTML / CSS
Zero npm · Zero build step · Single file
AI — Free
Google Gemini 2.0 Flash
Server-side key · Rate limited · Daily cap
AI — Pro
Anthropic Claude Sonnet
User's own key · Never stored server-side
Job Search
Adzuna API
Credentials server-proxied · Country selector
CI / CD
GitHub Actions + CodeRabbit
pip-audit · Secret scan · Security checks
Monitoring
Sentry + UptimeRobot
Error tracking · Uptime monitoring
Design
Liquid Glass CSS
Gradient-border cards · No CSS framework
Security

Production-hardened

Built with a 13-layer security checklist. Full audit record in the private production repo.

✓
All AI output escaped before innerHTML (34 call sites verified with a real CSS/JS parser)
✓
Per-IP rate limiting + daily cap on all AI-calling endpoints
✓
Full security header suite — CSP, HSTS, X-Frame-Options, Referrer-Policy
✓
Pro-tier key stored in sessionStorage only, auto-cleared after 30 min idle
✓
Pydantic input validation — model allowlists, body size caps, control char sanitisation
✓
Job search API credentials server-proxied — never reach the browser
✓
X-Forwarded-For spoofing fix — last hop trusted, not first
✓
Stateless API — no database, no user data stored anywhere
✓
pip-audit + secret scan runs on every CI pull request
✓
Required consent checkbox on all 5 data-submitting tools
Architecture

How it fits together

Stateless by design — no database, no sessions, no persistent storage. Simplifies both security and deployment significantly.

Jobsy architecture diagram