@paulorigonato

Paulo Rigonato

@paulorigonatoGO, BrazilJoined June 2026

AppSec, Red Team validation, WAF testing and AI security.

About

Cybersecurity professional focused on practical security research, offensive validation and defensive hardening across web apps, APIs, WAFs and AI-enabled systems. I publish hands-on notes and ethical testing guidance at paulo.seg.br.

Available for

Security research, AppSec reviews, authorized Red Team validation, WAF testing, AI security analysis and technical writing.

Paulo Rigonato's blogs

Paulo Segurançapaulo-seg.hashnode.dev1 post

Articles Comments

Recently published

PRPaulo Rigonatopaulo-seg.hashnode.devJun 1 · 5 min read

WAF Bypass Testing: A Defensive Checklist for AppSec and Blue Teams

A WAF can reduce risk, but it should never be treated as the only security control between an attacker and an application. The most important WAF failures are often not caused by exotic payloads. They

Paulo Rigonato

About

Available for

Paulo Rigonato's blogs

Recently published

WAF Bypass Testing: A Defensive Checklist for AppSec and Blue Teams

Search Hashnode

Paulo Rigonato

About

Available for

Paulo Rigonato's blogs

Recently published

WAF Bypass Testing: A Defensive Checklist for AppSec and Blue Teams