Amazon
Secure MCP
A practical guide for people shipping MCP servers in production. Code, auth, permissions and what almost nobody gets right.
Books, talks, research
Publications
Here is what I have written, spoken and published.
I put the books first, then the talks, and the research at the end.
Books
Amazon
¿Cuántas APIs tienes realmente?
Half of organizations do not know how many APIs they run. How to find and manage the ones nobody documented, with open source and low cost tools. For tech leads and architects tired of finding surprise APIs in production.
ePub
Hacking and IPv4 packet manipulation with SCAPY
How to build and manipulate an IPv4 packet by hand. For people who want to understand the protocol. It has no recipes.
Talks
16talks
8at RootedCON
2015the first one
RootedCON
2026
When MCP goes Wrong - Que MCP no rompa tu seguridad
Security in Model Context Protocol (MCP): how design and implementation mistakes can compromise an organisation's infrastructure. With Alfonso Muñoz
RootedCON
2026
MCP Enterprise Security: A Practical Architecture and Lessons to Avoid Being Pwned
A practical security architecture for MCP in the enterprise and what we have learned about keeping it from being compromised. With Alfonso Muñoz
RootedCON
2025
Censorship, privacy and the fine art of disappearing without trace
Privacy techniques, censorship, anonymity and robust cryptography. With Dr. Alfonso Muñoz
Since 2015
2024
2023
Navaja Negra
Protecting Python Source Code
Techniques to protect Python source code when it is published, from the simplest to compiling a custom Python interpreter
Navaja Negra
Protect your Python... because if it's as bad as it sounds, better nobody sees it
Techniques to protect Python code, from basic methods to building custom Python interpreters
2022
PyConES
Asyncio in production: what nobody tells you
What I've learned using Python Asyncio in production, processing millions of events per day: the good, the bad and the ugly
RSA Conference
Spreading Application Security Ownership Across the Entire Organization
How to spread the responsibility for application security across the whole organization instead of leaving it only with the security team
2020
2018
2017
2016
OWASP Madrid
I Meetup OWASP Madrid
Technical talk on web application security at the first meetup of the OWASP Madrid chapter
RootedCON
Broker & MQ Injection
I introduce the Broker Injection concept and Enteletaor, a tool to inject, extract and modify information in brokers like Redis, RabbitMQ or ZeroMQ
2015
Cybercamp
Python, Hacking and Sec-tools from the Trenches
Hands-on workshop on building security tools with Python, from basic scripts to professional tools
Codemotion
Your DevOp Gives Me Work: I'm a Security Auditor
How DevOps teams are creating new attack vectors and vulnerabilities that we security auditors end up having to fix
Papers
Research
2026
LAPIS: Lightweight API Specification for Intelligent Systems
A new format for describing APIs, built for LLMs. It uses 85.5% fewer tokens than OpenAPI YAML and 88.6% fewer than OpenAPI JSON, tested on GitHub, Twilio and DigitalOcean APIs.
Read the paper →
Research
2026
Slow JSON Stream: A Low-Bandwidth Denial-of-Service Attack Against HTTP APIs with JSON Request Bodies
DoS attack that needs very little bandwidth, against HTTP APIs that accept JSON bodies. The attacker opens an HTTP/1.1 chunked connection and drips a valid JSON prefix at one byte per second, never sending the closing token. 90% of 41 evaluated targets are vulnerable under default configuration.
Read the paper →