sergio belmonte morales

Specialist: Microsoft Sentinel & KQL, M365 Defender & Intune, Active Directory, Sigma, YARA. Offensive: OpenVAS, Gophish, Nessus. I ship with PHP + vanilla JS and TypeScript/Next.js.

Securing LLM apps: prompt injection, untrusted-context isolation, and measuring a guardrail against real attacks instead of trusting it. Also going deeper on Sigma and KQL.

CyberEscudo: 30+ free browser security tools, labs and a CTF in vanilla PHP/JS, no framework, no build step. Secure AI Kit: a Next.js starter with a prompt-injection guardrail.

SOC / detection engineering roles (Sentinel, KQL, Sigma), security reviews of AI apps, and honest talk about what actually works in a SOC. Say hi if you build defensive tooling.