MCP Enterprise Security: A Practical Architecture and Lessons to Avoid Being Pwned
Practical security architecture for MCP in enterprise environments and lessons learned to avoid being compromised. With Alfonso Muñoz
Talks
I’ve traveled half the world giving talks. Many talks.
About cybersecurity. About hacking. About development. About APIs. About Docker. About whatever’s needed.
Plus, I founded Navaja Negra and the OWASP Madrid chapter, two of the most active cybersecurity communities in Spain. So I’ve seen quite a few good talks. And some not so good.
I’m passionate about sharing knowledge. And I love it when people leave one of my talks saying “wow, I can apply this tomorrow at work”.
Here are some of my most notable talks.
2026
When MCP goes Wrong - Que MCP no rompa tu seguridad
RootedCON
•
Madrid, Spain
•
March 2026
Security in Model Context Protocol (MCP): how design and implementation errors can compromise your infrastructure. With Alfonso Muñoz
2025
2024
Doing fun things with databases
Navaja Negra
•
Albacete, Spain
•
October 2024
Unconventional ways to exploit databases: beyond deleting data or stealing information
2024
AWS, with its lambdas and its little things
RootedCON
•
Madrid, Spain
•
March 2024
Real AWS Lambda examples. Good, bad and terrible practices. With César Gallego
2023
Protect your Python... because if it's as bad as it sounds, better nobody sees it
Navaja Negra
•
Albacete, Spain
•
October 2023
Techniques to protect Python code: from basic methods to creating custom Python interpreters
2023
Protecting Python Source Code
Navaja Negra
•
Albacete, Spain
•
October 2023
Techniques to protect Python source code when publishing it: from the simplest to compiling your own Python interpreter
2022
Asyncio in production: what nobody tells you
PyConES
•
Granada, Spain
•
October 2022
Everything I've learned using Python Asyncio in production processing millions of events per day: the good, the bad and the ugly
2022
Spreading Application Security Ownership Across the Entire Organization
RSA Conference
•
San Francisco, USA
•
June 2022
How to distribute application security responsibility across the entire organization, beyond the security team
2020
2018
🎤
RootedCON
2017
2016
I Meetup OWASP Madrid
OWASP Madrid
•
Madrid, Spain
•
June 2016
Technical talk at the first OWASP Madrid chapter meetup about web application security
2016
2015
2015
Your DevOp Gives Me Work: I'm a Security Auditor
Codemotion
•
Madrid, Spain
•
November 2015
How DevOps are creating new attack vectors and vulnerabilities that security auditors have to fix