Cybersecurity professional focused on practical security research, offensive validation and defensive hardening across web apps, APIs, WAFs and AI-enabled systems. I publish hands-on notes and ethical testing guidance at paulo.seg.br.