Security tooling and AI infrastructure that companies actually run on.
57
Certifications across 18 institutions, since 2014
Javier\Romero
AI & SECURITY ENGINEER
Founder & CEO of Dymo. I ship the boring parts correctly.
Local time --:--:--
UTC+1 Seville, Spain
Enigma - AI, AgentsPythonArtificial IntelligenceEthical HackingInternet of ThingsDeep LearningMachine LearningNext.jsReactAWSPostgreSQLTypeScriptTailwind CSSNode.jsAstroDockerBashViteCloudflareRedisWXTScrumPythonArtificial IntelligenceEthical HackingInternet of ThingsDeep LearningMachine LearningNext.jsReactAWSPostgreSQLTypeScriptTailwind CSSNode.jsAstroDockerBashViteCloudflareRedisWXTScrum
(02) - Worked with[ 11 ]
The teams, accelerators and institutions I have shipped with
(03) - By the numbers[ 4 figures ]
- 57
- Certifications
- 7,881h
- Technical training
- 50+
- Clients
- 12y
- Building Dymo
Across 18 institutions
Recorded course hours
Companies and teams served
Founded 2014
Founder & CEO
Cybersecurity intelligence & big data with the world's largest fraud database.
Visit Dymo→(04) - Selected work[ 4 / 8 ]
Projects
Security tooling, AI infrastructure and the products I run. The rest are on the projects page.
(05) - Short-form advisories[ 14 published ]
ShortForm
DMSA feed
- DMSA-2026-US-002USDenial of Service in Next.js Server Actions via Malformed Origin Header13 Apr 2026
- DMSA-2026-US-001USInsufficient Rate Limiting and Chatbot Abuse in Chatwoot Web Widget26 Feb 2026
- DMSA-2025-US-002USCritical RCE Found in Teleparty Chrome Extension29 Nov 2025
- DMSA-2025-ES-002ESRCE Vulnerability Found in BeValk - React2Shell12 Dec 2025
- DMSA-2025-PH-001PHPhishing Campaign Targeting lto.gov.ph - Philippines19 Nov 2025
Coordinated disclosures published under DMSA, covering email authentication, subdomain takeover, phishing infrastructure and remote code execution across nine countries.
Read the advisories(06) - Disciplines[ 4 ]
AI & Security Engineer.
- Cybersecurity & AI
- Full-stack development
- DevSecOps
- Cyber intelligence & defence


