About
Hi, I'm José Ramón Palanco
Security researcher and entrepreneur. Founder and CEO/CTO of Plexicus.
José Ramón Palanco 
I have spent more than 20 years in cybersecurity. I started publishing research on telephony and networks in 2002 and have since worked across reversing, hardware hacking, threat intelligence and product security.
I worked in Ericsson's R&D department and at Optenet (Allot). In 2014 I founded Dinoflux, a threat-intelligence startup acquired by Telefónica, and joined ElevenPaths.
Today I am the founder and CEO/CTO of Plexicus, an application security company.
I have spoken at OWASP, RootedCON, ROOTCON, MALCON and FAQin, published several CVEs and released open-source tools such as nmap-scada, ProtocolDetector, EKanalyzer and SCADA IDS.
Education
Telecommunications Engineering
University of Alcalá de Henares
Master's in IT Governance
University of Deusto
My company
Founder & CEO/CTO of Plexicus
Plexicus is the application security company I founded and lead today. It is where I apply two decades of offensive research, published vulnerabilities and security tooling.
Career
Two decades of breaking and building
From early write-ups and CVEs to founding and selling a threat-intelligence company, and now Plexicus.
- 2002
First publications
TelephonyPublishes his first article, on telephone networks; WAP and sniffer detection follow in 2003.
- 2006–2007
Published vulnerabilities
Zyxel · D-Link · Mono · GForgeDiscovers and publishes CVEs in routers, web servers and development platforms.
- R&D
R&D at Ericsson and Optenet (Allot)
Ericsson · OptenetWorks in Ericsson's R&D department and at Optenet (Allot).
- 2011–2014
Drainware
Cloud DLP platformBuilds a cloud data-loss-prevention platform with his team, open-sourced in 2020.
- 2014
Founds Dinoflux
Threat intelligenceCreates Dinoflux, which turns malware into intelligence and feeds it to IDS, firewalls, IPS and SIEM.
- 2018
Acquired by Telefónica
Telefónica · ElevenPathsTelefónica acquires Dinoflux and José joins ElevenPaths, its cybersecurity unit.
- Today
Founder & CEO/CTO of Plexicus
Application securityFounds and leads Plexicus, an application security company.
Talks
On stage
Speaker at security conferences including OWASP, RootedCON, ROOTCON, MALCON and FAQin.
“OT Security”
Slides → OWASPRootedCONROOTCONMALCONFAQinh-c0nAPIAddicts
Research
CVEs and open source
Published vulnerabilities, open-source tools and projects.
Published vulnerabilities
Tools and projects
ProtocolDetector Reticulum Neverwave Drainware attribution.id nmap-scada SCADA IDS EKanalyzer escan pma
Let's talk security
Talks, press or partnerships: get in touch.