Fortifying the Fort: Defensive Strategies in Kubernetes and Containers
Defensive strategies for securing infrastructure built on Docker containers and Kubernetes orchestration, from the perspective of an offensive cybersecurity expert.
Building Plexicus · Proof-Driven AppSec
José Ramón Palanco
Founder & CEO/CTO of Plexicus
Security Researcher
Over 20 years in cybersecurity: offensive research, reversing, threat intelligence and product. I founded Dinoflux (acquired by Telefónica) and now build Plexicus: Proof-Driven AppSec.
Founder of Plexicus 
20+ years in cybersecurity
2002 publishing since
51 articles on this blog
1 exit: Dinoflux → Telefónica
My company
Proof-Driven AppSec.
Know what is real. Understand what it affects. Fix it with evidence.
Plexicus is Proof-Driven AppSec: validated findings, contextual understanding, and reviewed remediation, anchored in evidence and scoped with you.
01 · Validate
AI Swarm Pentest
Explores authorized paths through your app and captures the evidence behind every verified attack path.
02 · Understand
Deep Code Analysis
Adds code and business-logic context to every validated finding.
03 · Remediate
Remediation
Reviewed, merge-ready fixes with verification re-tests.
04 · Coverage
XBOM
Software, crypto and AI component inventory for compliance and supply chain.
Blog
View all articles Latest articles
Technical notes on DevSecOps, reversing, hardware and cloud security.
Practical DevSecOps: Hardening the Supply Chain in the Age of SBOMs
A practical guide to hardening the software supply chain using SBOMs, Syft, Grype and Cosign signatures in a DevSecOps pipeline.
Hands-On Tutorial: Hardening MLOps – Building a Secure Machine Learning Pipeline with DevSecOps
A practical guide to building a secure Machine Learning (MLOps) pipeline by integrating DevSecOps, Docker, Kubernetes, DVC and SBOM.
Want to Be a DevSecOps Engineer? Then You Need This Tool Stack!
Essential DevSecOps tools for secure integration into the CI/CD pipeline, including SAST, SCA and IaC security.
Pipeline Hijacking! An Offensive Perspective on CI/CD and the Hunt for Credentials
An offensive analysis of CI/CD pipelines. Learn how attackers hunt for credentials on your runners and how to apply Zero Trust with OIDC.
The 7 Critical Mistakes Every DevSecOps Engineer Must Avoid in Their Pipeline
An in-depth look at the most common mistakes in DevSecOps pipelines and how to avoid them to build secure products.
Reticulum: Advanced Cloud Infrastructure Security Scanner
A comprehensive analysis of Reticulum, an advanced security scanner for Kubernetes Helm charts that identifies exposure levels and security vulnerabilities in cloud infrastructure.
Career
Two decades of breaking and building
From early write-ups and CVEs to founding and selling a threat-intelligence company, and now Plexicus.
- 2002
First publications
TelephonyPublishes his first article, on telephone networks; WAP and sniffer detection follow in 2003.
- 2006–2007
Published vulnerabilities
Zyxel · D-Link · Mono · GForgeDiscovers and publishes CVEs in routers, web servers and development platforms.
- R&D
R&D at Ericsson and Optenet (Allot)
Ericsson · OptenetWorks in Ericsson's R&D department and at Optenet (Allot).
- 2011–2014
Drainware
Cloud DLP platformBuilds a cloud data-loss-prevention platform with his team, open-sourced in 2020.
- 2014
Founds Dinoflux
Threat intelligenceCreates Dinoflux, which turns malware into intelligence and feeds it to IDS, firewalls, IPS and SIEM.
- 2018
Acquired by Telefónica
Telefónica · ElevenPathsTelefónica acquires Dinoflux and José joins ElevenPaths, its cybersecurity unit.
- Today
Founder & CEO/CTO of Plexicus
Proof-Driven AppSecBuilds Plexicus: AI Swarm Pentest, Deep Code Analysis, Remediation and XBOM to validate and fix real risk.
Talks
On stage
Speaker at security conferences including OWASP, RootedCON, ROOTCON, MALCON and FAQin.
“Orquestando el Enjambre: Arquitectura MCP y Grafos para la Explotación Autónoma”
“OT Security”
Slides → OWASPRootedCONROOTCONMALCONFAQinh-c0nAPIAddicts
Research
CVEs and open source
Published vulnerabilities, open-source tools and projects.
Published vulnerabilities
Tools and projects
ProtocolDetector Reticulum Neverwave Drainware attribution.id nmap-scada SCADA IDS EKanalyzer escan pma
Let's talk security
Talks, press, partnerships, or how Plexicus can help your team: get in touch.